Privacy Policy

Your privacy is important to us. It is NDT EXCHANGE's policy to respect your privacy regarding any information we may collect from you across our website, and other sites we own and operate.

1. Data Controller

The data controller responsible for your personal information is:

2. Information We Collect

We collect information in the following categories to provide and optimize our service:

• Personal Information: We may ask for personal details such as your Name, Email, Social media profiles, Phone/mobile number, and Work address.
• Professional Information: To verify NDT capabilities, we collect certification records (e.g. ASNT/PCN levels), qualification details, training history, employer/organization affiliations, inspection logbooks, and overall competencies.
• Log Data: When you visit our website, our servers automatically log standard web browser data, including your IP address, browser type and version, pages visited, time and date of visits, and time spent on pages.
• Cookies & Tracking: We use cookies, local storage, and similar technologies to maintain user sessions, remember system preferences, improve platform performance, measure usage analytics, and enhance security.

3. Legal Bases for Processing

We process your personal information lawfully, fairly, and in a transparent manner. We collect and process information about you only where we have legal bases for doing so, such as when it is necessary for contract performance, compliance with legal obligations, or when we have your consent.

4. Security of Your Personal Information

We employ strict organizational and technical security measures to protect your personal information from unauthorized access, disclosure, or modification:

• Encryption in transit using TLS (Transport Layer Security).
• Encryption at rest for databases and file archives.
• Role-based access controls restricting data access.
• Comprehensive platform audit logging.
• Support for Multi-Factor Authentication (MFA).
• Secure backup procedures.

5. Your Rights & How to Exercise Them

You retain the right to access, correct, port, or request the deletion of your personal information.

Exercising Your Rights: You can submit a data request directly to contact@ndtexchange.com. We will respond to and address your request within applicable legal timeframes.

Account Deletion: Deleting your account removes platform access and public directory visibility. Certain transaction and inspection history records may be retained (marked inactive) where necessary for legal compliance, audit trail integrity, dispute resolution, or system security.

6. Data Sharing and Disclosure

Our platform is designed to connect professionals. As such, some of your information is shared to facilitate these connections:

• For Asset Owners (Clients): When you post a job, your company name and general location are visible to potential service providers. Contact details are shared once you award a job.
• For Service Providers (Inspectors):Your company profile and list of offered techniques are visible in the public directory. Assigned technicians' names and certifications are visible to clients for active projects.
• For Freelancers & Contract Inspectors: If you register as an independent specialist on our Gig Board, your profile details, ASNT/PCN levels, and methods are visible to hirers. When applying, your full verified credentials and resume are shared with the hiring company.
• Trusted Subprocessors: We may engage trusted third-party service providers (such as hosting platforms, analytics providers, email services, and payment gateways) to assist in operating our infrastructure under strict confidentiality agreements.

We do not sell your personal information to third parties.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• User Account Records: Retained while your account remains active.
• Inspection Reports & Audit Records: Due to safety regulations in the energy and aerospace sectors, inspection logs and audit records are retained for a minimum of seven (7) years unless a longer period is mandated by law, customer agreement, or industry regulations.

8. Cross-Border Data Transfers

Your personal information may be stored, processed, or transferred in countries other than your country of residence (where our servers are hosted). We implement appropriate safeguards (such as standard contractual clauses) to protect your data under international transfer guidelines where required by applicable law.

9. Children's Privacy

The NDT EXCHANGE platform is intended exclusively for business and professional users. The site and services are not directed toward individuals under eighteen (18) years of age, and we do not knowingly collect personal information from children.

10. Breach Notification Commitment

In the event of a security breach compromising your personal data, NDT EXCHANGE commits to notifying affected users and relevant supervisory authorities within legally required timeframes from the point of confirmation.

11. Global Privacy Standards (GDPR, CCPA & Data Sovereignty)

We comply with global data protection regulations to ensure your data rights are respected regardless of your location:

• GDPR (EU & UK): If you are located in the European Economic Area (EEA) or the United Kingdom, you have the right to request access to, rectification of, or restriction of your personal data, as well as the right to object to processing.
• CCPA (California): If you are a California resident, you have the right to request disclosure of what personal information we collect, request deletion of your personal information, and opt-out of any sale of personal information (though we do not sell your data).
• Data Residency & Sovereignty: All high-fidelity inspection files, component designs, and digital twins are hosted and stored securely in accordance with regional data sovereignty guidelines, preserving high-trust cross-border engineering workflows.

12. Changes to Privacy Policy

We may update this Privacy Policy periodically. Material changes will be communicated through the platform or via email where required by law.

13. Contact Details

For questions or concerns regarding our privacy practices, you may reach out to our legal and data protection team:

• Email: contact@ndtexchange.com