Privacy.

Information you provide

CM Global Sourcing may collect information you intentionally provide through website forms, contact requests, buyer requirement forms, supplier inventory forms, booking flows, email communication or other direct business interactions.

This may include your name, company, business email, phone number and country or location when provided. It may also include buyer sourcing requirements, supplier inventory information, product or equipment specifications, commercial requirements, documents voluntarily provided for a sourcing opportunity, meeting details and other information provided for a legitimate business inquiry.

Optional form fields are marked. Please provide information that is relevant to the conversation and that you are authorized to share. Do not include passwords, payment card details or government identification documents in a public inquiry form. Vendor Network applications accept optional business qualification documents through the private upload form. Do not include SSNs or banking information; redact any SSN from a W-9 before uploading. Other document sharing can be arranged during follow up.

How we use information

We may use submitted information to respond to inquiries, evaluate buyer requirements and supplier inventory, research potential sourcing solutions, identify potential commercial matches, communicate about sourcing opportunities, schedule and conduct business conversations, and prepare introductions where appropriate.

We may also maintain CRM and sourcing records, track legitimate commercial opportunities, protect the website and business from abuse, fraud or misuse, and keep records necessary for ongoing business operations. Submitting an inquiry does not automatically subscribe you to a marketing mailing list.

Private evaluation and appropriate sharing

Information supplied by buyers or suppliers is not automatically published or freely distributed. Protected or commercially sensitive information may be held privately while an opportunity is evaluated.

Where a legitimate sourcing opportunity exists, relevant information may be shared with prospective buyers, suppliers, service providers or other commercial counterparties when reasonably necessary to evaluate or pursue that opportunity.

Sharing sensitive identifying information, protected buyer or supplier information, pricing, documentation or other confidential material requires an appropriate business justification and any permissions or engagement terms that apply. Please identify relevant confidentiality and circulation restrictions when discussing an opportunity with us.

Specific confidentiality and noncircumvention obligations may be governed by separate written agreements. This notice does not claim contractual protections that have not been agreed. Information may also be disclosed where required by applicable law.

Form processing and booking services

Vendor Network applications include business capabilities, service areas, qualifications, opportunity preferences, discovery source and consent. Uploaded documents are held in private object storage and are accessible only through authenticated CRM review. A salted hash of the request IP is kept with the private application for abuse prevention; it is not used for analytics or cross-site tracking.

Website submissions are stored in our private intake and CRM system using Supabase. The forms also record the public page used to submit the inquiry. Website hosting and database providers process information needed to operate the site and its inquiry workflow.

Our booking page embeds a Google Calendar appointment schedule. The embedded scheduler displays live availability and sends information entered during booking to Google Calendar and the CM Global meeting organizer. Booking confirmations, appointment messages, and Google Meet details are handled by Google Calendar. See Google's Privacy Policy for information about its own practices.

Website operation and browser storage

Hosting and security services may process technical request information, including IP addresses and browser details, to deliver and protect the website. The private administrator area stores authenticated session information in the administrator's browser to maintain sign in.

Optional Google Analytics is described below. Google Tag Manager, advertising trackers and CRM linked visitor intelligence are not enabled. The inquiry workflow does not attempt to identify anonymous visitors by name or use visitor fingerprinting.

Optional website analytics and your choice

If you choose Allow analytics, we use Google Analytics 4 to estimate visitors and sessions and understand public page views, landing pages, traffic sources, approved campaign categories, CTA activity and successful website inquiry submissions. Google may also provide approximate geography and basic device or browser categories. These reports help us understand website use and commercial interest.

Google receives the analytics events and technical connection information, including IP addresses, and processes that information under its privacy and analytics terms. CM Global does not create a raw IP analytics database. Analytics reports are restricted to authorized users of our analytics account.

Google Analytics uses cookies with the cmg_analytics prefix containing random browser and session identifiers. They are configured to expire after 90 days without extending that lifetime on each visit; your browser may shorten their lifetime. We do not connect these identifiers to CRM contacts, names or protected commercial records.

Our analytics events exclude form contents, email addresses, phone numbers, document contents, private reference mappings and authentication credentials. Page and CTA addresses are limited to approved public paths or general action labels. Only reviewed, nonpersonal UTM category codes are accepted for campaign reporting. We do not use visitor fingerprinting, Google signals, advertising personalization or visitor name identification.

Google Analytics does not load or receive analytics events before you allow it. Declining does not affect inquiries, booking links or other website features. We store only your analytics choice and its expiry in the cmg_analytics_consent_v1 local storage entry for up to 180 days. CM Global adds no analytics session storage entry. You can change or withdraw your choice using Analytics preferences in the footer. Withdrawal stops further collection and removes the accessible analytics cookies.

Activity before consent is not reconstructed. Visits or conversions may be absent from reports when analytics is declined, blocked or unavailable. Loading or viewing the embedded schedule is not a confirmed appointment. Browser storage expiry does not determine how long legitimate business records are retained.

See Google's Privacy Policy and how Google uses information from sites using its services for its processing practices.

Retention

Business records may be retained as reasonably necessary for legitimate business, sourcing, recordkeeping, dispute prevention, security or legal purposes. Retention depends on the information and the continuing purpose for keeping it. There is no fixed automatic deletion period stated by this policy.

Questions and information requests

Contact Cornell Murray at cornell@cmglobalsourcing.com or +1 (202) 765 9728 to ask about information you provided, request a correction or request deletion. We may need to verify the request and may retain records where a legitimate continuing business, security or legal purpose requires it.

CM Global Sourcing is based in Washington, DC, USA.

Updates to this policy

This policy describes our current website and business information practices. It may be reviewed or amended with qualified legal counsel as those practices or applicable requirements change. Updates will be posted here with a revised date. Our Terms of Use provide general context for website use and commercial conversations.