Privacy Policy

Overview

ApexProto Technology Co., Limited ("ApexProto," "we," "us," or "our") respects your privacy and treats customer project information as confidential. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit apex-proto.com, request a quote, communicate with us, or use our custom manufacturing services.

ApexProto is the controller of the personal information described in this policy unless another party is identified at the point of collection. This policy applies to website visitors, business contacts, customers, suppliers, and other individuals whose information we process in connection with our services.

1. Information We Collect

2. How We Collect Information

We collect personal information from the following sources:

• Directly From You: Through the quote form, email, telephone, meetings, trade shows, orders, surveys, and other communications.
• From Your Organization: From authorized colleagues, representatives, procurement teams, engineers, or other contacts involved in a project or order.
• From Service Providers: From logistics, financial, payment, or other operational providers when necessary to complete or support a transaction.
• Through Website Operations: From hosting, security, and anti-abuse technologies when you visit the website or submit the quote form.

We do not use bulk scraping of public websites, professional directories, or social media platforms to build marketing contact lists.

3. How and Why We Use Information

We use personal information for the following purposes:

• Quoting and Engineering Review: To understand project requirements, perform DFM review, prepare quotes, and communicate technical or commercial questions.
• Manufacturing and Order Fulfillment: To plan, manufacture, inspect, document, package, ship, and support custom parts and assemblies.
• Business Communication: To manage customer and supplier relationships, provide order or quality updates, answer inquiries, and resolve service issues.
• Security and Abuse Prevention: To protect the website, verify quote-form submissions, prevent fraud and automated abuse, troubleshoot errors, and maintain service reliability.
• Legal and Operational Requirements: To maintain quality and transaction records, comply with tax, customs, accounting, regulatory, and legal obligations, establish or defend legal claims, and enforce agreements.
• Relevant B2B Marketing: To send product, capability, event, or company information to eligible business contacts, subject to applicable law and your communication choices.

Depending on the circumstances, our legal bases include taking steps at your request before entering a contract, performing a contract, complying with legal obligations, pursuing legitimate interests such as operating and securing our business and communicating with business contacts, and obtaining consent where required. We do not use personal information for solely automated decisions that produce legal or similarly significant effects.

4. Confidential Project Data and CAD Files

Customer CAD files, drawings, specifications, and related project information are treated as confidential business information. We use them only as needed to quote, review, manufacture, inspect, deliver, and support the requested parts or services.

• Limited Access: Access is limited to authorized ApexProto personnel and service providers that require the information to provide hosting, communication, production support, inspection, or other agreed services and are subject to appropriate confidentiality obligations.
• Non-Disclosure Agreements: We can review and sign a customer-provided NDA before design files are shared and will follow any applicable project-specific confidentiality obligations.
• No Unrelated Use: We do not sell customer design files, use them for unrelated marketing, or disclose them to competitors.

Requests to delete project files are subject to active quoting or contractual requirements, legal and quality-record obligations, dispute preservation, and limited backup-retention cycles. Residual backup copies remain protected and are not returned to active use.

5. How We Share Information

We do not sell or rent personal information. We also do not share personal information for cross-context behavioral advertising. We disclose only information reasonably necessary for the following purposes:

• Website and Security: Cloudflare provides website hosting, Pages Functions, network security, and Turnstile verification.
• Email and Business Communication: Resend supports delivery of quote-request notifications, and Google Workspace supports our business email and related communications.
• Order Fulfillment: Logistics carriers, financial institutions, payment providers, customs agents, and similar providers receive information required to process or deliver an order.
• Manufacturing and Professional Support: Confidentiality-bound manufacturing support providers, consultants, auditors, insurers, and legal or professional advisers may receive information necessary for their assigned work.
• Legal Requirements and Rights Protection: We may disclose information when required by law, legal process, or a valid government request, or when reasonably necessary to protect rights, safety, property, agreements, or legal claims.
• Corporate Transactions: Information may be disclosed under appropriate safeguards in connection with a merger, acquisition, financing, restructuring, sale of assets, or similar business transaction.

Service providers are authorized to process personal information only for the services they provide to ApexProto and must protect it under applicable contractual and legal obligations.

6. Cookies and Security Technologies

ApexProto does not currently use Google Analytics, advertising trackers, or marketing cookies. The website and its providers may use cookies, local storage, request logs, and similar technologies that are necessary for hosting, security, session integrity, fraud prevention, and reliable operation.

The Get a Quote form uses Cloudflare Turnstile to distinguish legitimate submissions from automated abuse. Turnstile may process browser, device, interaction, and network signals and generates a short-lived verification token. The ApexProto application sends that token to Cloudflare for verification but does not write it to a database, application log, or quote-notification email.

If we introduce non-essential analytics, advertising, or similar technologies, we will update this policy and provide consent or choice mechanisms where required. Browser settings may allow you to restrict certain technologies, although disabling essential functions may affect website operation.

7. Marketing Communications

We may send relevant B2B information about ApexProto capabilities, services, events, or company updates to existing customers, people who have requested a quote or otherwise contacted us, trade-show contacts, and individuals who voluntarily subscribe. We use consent where required and otherwise rely on an applicable lawful basis for business-to-business communication.

You can opt out at any time by using the unsubscribe method provided in a marketing email or contacting [email protected]. We may retain the minimum information necessary on a suppression list so that we can honor your choice. Service messages concerning quotes, orders, quality, delivery, security, or support are not marketing communications.

8. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy. The applicable period depends on factors such as the status of a quote or contract, the duration of the customer or supplier relationship, quality and traceability requirements, tax and accounting rules, applicable statutes of limitation, legal claims, NDA terms, security needs, and backup cycles.

When information is no longer required, we delete it, anonymize it, or place it beyond active use in accordance with our retention practices. We retain only the minimum information needed to record and honor a marketing opt-out.

9. Data Security

We use reasonable technical, administrative, and physical safeguards designed to protect personal information and confidential project data. These measures include encrypted transmission using TLS, access and permission controls, confidentiality obligations, service-provider review, and operational procedures appropriate to the nature of the information. CAD files, drawings, and project requirements are handled as confidential commercial information.

No internet transmission or electronic storage system can be guaranteed completely secure. If you believe information provided to ApexProto may have been compromised, please contact us promptly.

10. International Data Transfers

ApexProto serves customers internationally and uses service providers that may process information in countries or regions outside your place of residence. Data protection laws in those locations may differ from those in your jurisdiction.

Where required for transfers from the European Economic Area, United Kingdom, or another jurisdiction with transfer restrictions, we rely on recognized safeguards such as an adequacy decision, standard contractual clauses, or another lawful transfer mechanism. Confidential project information remains subject to the protections described in this policy and any applicable NDA.

11. Your Privacy Rights

Depending on your location and applicable law, you may have the right to request access to personal information, correct inaccurate information, request deletion, restrict or object to processing, receive portable data, withdraw consent, or opt out of marketing communications. Withdrawing consent does not affect processing that was lawful before withdrawal.

Residents of the European Economic Area or United Kingdom may also have the right to lodge a complaint with their local data protection authority. We encourage you to contact us first so that we can address your concern.

To exercise a privacy right, email [email protected]. We may request information reasonably necessary to verify your identity, authority, and the scope of the request. Rights may be limited by contractual requirements, legal retention duties, the rights of others, or other exceptions permitted by law.

12. California Privacy Notice

If the California Consumer Privacy Act, as amended (CCPA), applies to your personal information, you may have the right to know the categories, sources, purposes, and recipients of personal information; request access to specific information; request deletion or correction; opt out of the sale or sharing of personal information; limit certain uses of sensitive personal information; and receive equal service and pricing when exercising your rights.

ApexProto does not sell personal information or share it for cross-context behavioral advertising. We do not use or disclose sensitive personal information to infer characteristics beyond purposes permitted by applicable law.

You or an authorized agent may submit a request through [email protected]. We may verify identity, residency, and an agent’s authority before completing a request, subject to the procedures and exceptions permitted by the CCPA.

13. Children, External Links, Policy Changes, and Contact