Privacy & Data Handling Policy

Who we are

Arradiance LLC (“Arradiance,” “we,” “our”) is the data controller for personal data submitted through this website.

Arradiance LLC
11A Beaver Brook Rd
Littleton, MA 01460, United States
Phone: (508) 202 0593
Privacy contact: corporate@arradiance.com

Scope of this policy

This policy explains how Arradiance handles personal data that you provide when you contact us through this website — typically by submitting our contact form to ask about our atomic layer deposition (ALD) and molecular layer deposition (MLD) systems, coating services, customer support, or other inquiries.

It is designed to be compliant with the European Union General Data Protection Regulation (GDPR) and the data-protection laws of the other jurisdictions where our customers operate.

What we collect

When you submit our contact form, we collect:

Your name (first and last)
Your email address
Your phone number
Your company or organization name, and optionally its website
Your job title (optional)
The type of organization you represent (university, commercial, government, etc.)
The purpose of your inquiry (product sales, customer support, or general)
The content of your message, including any technical details you choose to share about your application, equipment, or research

Depending on the purpose you choose, you may also be asked for additional information — for example, an Arradiance system model and serial number if you are contacting customer support, or your area of interest if you are contacting sales.

When you submit the form, our systems also automatically record technical information associated with your submission:

Your IP address and the approximate country it indicates
Your browser and device information (user-agent string)
The web address you came from (referrer) and the page on which you submitted the form
The date and time of your submission

We use this information to understand where inquiries originate, to prevent spam and abuse, and to maintain the security and integrity of our systems. It is retained under the schedule described below.

When you submit our contact form, we do not collect:

Special categories of personal data under GDPR Article 9 (such as race, religion, political views, health, or biometric data)

Why we collect it (lawful basis)

We process your personal data on one or more of the following lawful bases under the GDPR:

Your consent (GDPR Article 6(1)(a)) — given when you check the consent box on the contact form. You may withdraw this consent at any time (see Your rights).
Your consent for analytics and advertising (Article 6(1)(a)) — given when you accept cookies via our banner. This covers the analytics and advertising cookies described under Cookies and tracking and the hashed identifiers sent to Google under Enhanced conversions. You may withdraw it at any time using the “Cookie settings” link in the footer of any page.
Performance of a contract (Article 6(1)(b)) — to the extent we need to respond to your inquiry about purchasing or supporting our products and services.
Our legitimate interest (Article 6(1)(f)) — to respond to business-to-business inquiries from researchers, engineers, and procurement teams about our products, services, and technology.

How we use your information

In this section, “your information” means the personal data you submit through our contact form. The separate analytics and advertising cookies this website uses are described under “Cookies and tracking.”

We use the information you submit to:

Reply to your inquiry, often with technical, product, or pricing information
Provide customer support and service for Arradiance systems you operate
Coordinate quotations and follow up on sales opportunities
Operate, evaluate, and improve our products and services

We do not:

Sell, rent, or trade your personal data
Use the personal data you submit through the form to market or advertise to you — measuring whether one of our advertisements led to your inquiry is a separate, consent-based process described under Enhanced conversions
Subscribe you to mailing lists without your separate, explicit consent
Profile or score you using your inquiry data

Who has access to your information

Your information is accessible to:

Arradiance employees and contractors who need it to respond to your inquiry — typically sales, customer support, foundry, or administrative staff — under confidentiality obligations.
Netlify, Inc., which hosts this website and processes form submissions on our behalf. Netlify operates under a Data Processing Agreement aligned with GDPR requirements. See Netlify’s privacy policy.
Our transactional email provider, which processes the contents of your submission in order to deliver the notification to us, under a Data Processing Agreement.
Google LLC, which receives a hashed (one-way) form of your email address and phone number for advertising measurement — but only if you accept analytics and advertising cookies. See Enhanced conversions. Google processes this data under the Google Ads Data Processing Terms.

We do not sell, rent, or trade the personal data you submit through the form, and we do not share it with data brokers, social-media companies, or marketing platforms. One limited exception applies: if you accept analytics and advertising cookies, a hashed (one-way) form of your email address and phone number is sent to Google so we can measure which of our advertisements lead to genuine inquiries — see Enhanced conversions below. We never send Google the content of your message. The analytics and advertising cookies described under “Cookies and tracking” are provided by Google and operate only with your consent.

International transfers

Arradiance is based in the United States. If you contact us from outside the United States, your personal data will be transferred to and stored in the United States, and may be processed in other locations where our service providers operate.

Where personal data of individuals in the European Economic Area, the United Kingdom, or Switzerland is transferred outside those regions, we rely on safeguards such as the Standard Contractual Clauses approved by the European Commission, or other lawful transfer mechanisms permitted under the applicable law.

How long we keep it

We retain your personal data only as long as necessary for the purpose for which it was collected, in line with our internal retention schedule:

Inquiries that do not lead to a business relationship: deleted or anonymized within twenty-four (24) months of our last contact with you, unless you have asked to remain on file.
Customers and active commercial relationships: retained for the duration of the relationship and for up to seven (7) years thereafter, to support warranty, ongoing service, accounting, tax, and legal-recordkeeping obligations.
Where you exercise a right to erasure: deleted within thirty (30) days of a verified request, except where retention is required by law (for example, completed sales records under tax or export-control requirements).

Your rights

If your personal data is subject to the GDPR or to equivalent laws (such as the UK GDPR, the CCPA, or other comparable regimes), you have the right to:

Access — ask for a copy of the personal data we hold about you.
Rectify — ask us to correct inaccurate or incomplete information.
Erase (“right to be forgotten”) — ask us to delete your data, subject to legal retention requirements.
Restrict processing in certain circumstances.
Object to processing based on our legitimate interest.
Portability — receive your data in a structured, machine-readable format.
Withdraw consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
Lodge a complaint with your local supervisory authority. For EU residents, this is typically the data-protection authority in your member state.

To exercise any of these rights, please contact us using the details in Contact below. We will respond to verified requests within the time required by applicable law — generally within thirty (30) days under the GDPR.

Cookies and tracking

This website uses Google Analytics and Google Ads, which set cookies and process data (including device identifiers and IP address) to measure site traffic and support our advertising. For visitors in regions that require prior consent (such as the EU and UK), these analytics and advertising cookies are set only after you accept them via our cookie banner. If you accept and later change your mind, you can withdraw your consent at any time using the “Cookie settings” link in the footer of any page, which reopens the banner so you can decline. Cookies strictly necessary for the site to function are always allowed. We may also use Netlify’s server-side log data (such as IP address) for short-term security and abuse-prevention purposes. Google processes analytics and advertising data under its own terms; see Google’s privacy resources for how it uses this data.

Enhanced conversions

If you accept analytics and advertising cookies, we use a Google Ads feature called enhanced conversions to measure which of our advertisements lead to genuine inquiries. When you submit the contact form, your email address and phone number are converted in your browser into a one-way cryptographic hash (SHA-256) and transmitted to Google in that hashed form only.

Only your email address and phone number are used for this purpose. The content of your message, your name, your job title, and your company are never sent to Google for advertising measurement.
The values are hashed before they leave your browser — Google does not receive them in readable form, and we do not send Google a readable copy.
Nothing is sent unless you have accepted cookies. If you decline, or have not yet made a choice, no hashed data is transmitted.
You can withdraw your consent at any time using the “Cookie settings” link in the footer of any page.

Hashing is one-way — the original address cannot be recovered from the hash — but Google can compare the hash against its own records to recognise a signed-in Google account. This data is therefore pseudonymized rather than anonymous, and we treat it as personal data under the GDPR. The rights described under Your rights apply to it.

Security

We use reasonable technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction, including:

HTTPS encryption for all traffic between your browser and our website
Access controls limiting which Arradiance personnel can view inquiry data
Use of service providers (such as Netlify) with their own published security and compliance certifications
Periodic review of who has access and how data is handled internally

No transmission over the internet or storage system can be guaranteed to be 100% secure. We will notify affected individuals and the relevant supervisory authority of a personal-data breach where required by applicable law.

Children

This website is intended for business and research professionals. It is not directed to children. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us so that we can delete it.

Automated decision-making

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

Changes to this policy

We may update this policy from time to time to reflect changes in our practices, our service providers, or applicable law. The “Last updated” date at the top of this page shows when it was most recently revised. Material changes will be communicated to active customers through our usual channels.

Contact

For questions about this policy, to exercise any of your rights, or to raise a privacy concern, please contact:

Arradiance LLC
Attn: Privacy
11A Beaver Brook Rd
Littleton, MA 01460, USA
Phone: (508) 202 0593
Email: corporate@arradiance.com

Privacy & data handling