This Privacy Notice explains how Aftermarket Automation LLC (doing business as Aftermarket Automation) ("we," "us," or "our") collects, uses, discloses, retains, and protects personal information when you use our website or communicate with us. It applies when you:
Visit aftermarketautomation.com or another website of ours that links to this notice
Submit our contact form, email us, or otherwise ask us about a project or our services
Questions or concerns? Email legal@aftermarketautomation.com. The same address is used for requests to access, correct, or delete personal information.
SUMMARY OF KEY POINTS
This summary provides the main points. The numbered sections below provide more detail.
Information you submit. The contact form asks for your name, work email, an optional company name, a project category, and project details. We also process information you choose to provide in later correspondence.
Website analytics. We use Cloudflare Web Analytics for basic, aggregate usage and performance information. It does not use cookies or local storage, fingerprint individual visitors, or collect or use visitors’ personal data for analytics. We do not use Google Analytics.
Sensitive or confidential information. We do not ask for sensitive personal information through the website. Please do not include confidential information, credentials, financial information, government identifiers, health information, or other sensitive information in the contact form.
How we use information. We use submitted information to understand and respond to inquiries, discuss requested services, maintain project history and customer relationships, protect the website, and meet legal obligations.
How we disclose information. We do not sell personal information or share it for cross-context behavioral advertising. We may disclose information to service providers that operate the website, transmit or store form submissions and email, or support our business, and when disclosure is required by law.
Your choices. Depending on applicable law, you may have rights to access, correct, obtain, or delete personal information. To exercise those rights, email legal@aftermarketautomation.com.
1. WHAT INFORMATION DO WE COLLECT?
Personal information you disclose to us
In short: We collect the information you choose to provide when you contact us.
When you use the website contact form, we collect:
Your name
Your work email address
Your company name, if you provide it
The project category you select
The project details you enter in the message field
If you continue the conversation by email or another agreed channel, we may also collect information you provide in that correspondence, such as a phone number, job title, scheduling information, or additional project context. We do not collect those items through the website form itself.
Sensitive and confidential information. We do not ask for sensitive personal information through the website. Do not use the contact form to send passwords, access credentials, financial account information, government identifiers, health information, export-controlled material, trade secrets, or other confidential information. We will arrange an appropriate disclosure process if a project requires it.
Information automatically collected
In short: Limited technical information is processed to deliver and protect the website; the analytics available to us are basic and anonymous.
Cloudflare processes limited network and request information needed to deliver and secure the website, such as an IP address, requested URL, timestamp, browser or user-agent information, and security signals. We do not use this technical information to build visitor profiles or target advertising.
We use Cloudflare Turnstile to protect the contact form from automated abuse. Turnstile processes network, device, browser, and security signals to distinguish legitimate visitors from bots. Cloudflare describes this processing in its Turnstile Privacy Addendum.
Cloudflare Web Analytics provides us with aggregate usage and performance measurements. According to Cloudflare, this analytics service does not use cookies or local storage, does not fingerprint individuals, and does not collect or use visitors’ personal data for analytics. We do not use Google Analytics.
2. HOW DO WE PROCESS YOUR INFORMATION?
In short: We use personal information to respond to you, evaluate and provide requested services, operate and protect the website, maintain appropriate business records, and comply with law.
Depending on how you interact with us, we may use personal information:
To respond to an inquiry. We use your contact and project information to understand your request, reply, ask follow-up questions, and determine whether we can help.
To discuss or provide services. We may use your information to prepare an estimate or proposal, take steps at your request before entering into an agreement, and provide services you request.
To maintain business records. We may retain correspondence, decisions, agreements, and related records needed to manage a current or potential business relationship.
To support future maintenance and customer relationships. If an inquiry becomes a project, we may retain customer and project records, including project files received from or created for the customer, source and configuration files, documentation, test and delivery records, and project communications. These records help us maintain project history, respond to later questions, and provide maintenance or follow-on support.
To operate and protect the website. We process limited technical information to deliver the site, diagnose faults, prevent abuse, and maintain security.
To understand site usage. We use anonymous, aggregate Cloudflare Web Analytics measurements to understand traffic and performance and improve the website.
To comply with law and protect rights. We may process information to meet legal, accounting, tax, security, or regulatory obligations and to establish, exercise, or defend legal claims.
3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?
In short: Where applicable law requires a legal basis, we rely on the basis that fits the particular purpose and interaction.
If the GDPR, UK GDPR, or similar law applies, we may rely on:
Steps before a contract or performance of a contract when you ask us to evaluate a project, provide a proposal, or perform agreed services.
Legitimate interests in responding to business inquiries, operating and securing the website, maintaining proportionate business records, and improving our services, provided those interests are not overridden by your rights and interests.
Legal obligations when processing is necessary to comply with applicable law, regulation, court process, or recordkeeping requirements.
Consent when we specifically request it. You may withdraw consent at any time, but withdrawal does not affect processing already completed or processing based on another lawful basis.
If Canadian privacy law applies, we rely on express or implied consent where required and on other grounds permitted by applicable law.
4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
In short: We disclose personal information only when needed to operate the website and business, provide requested services, comply with law, or complete a business transaction.
We may disclose information to:
Website and communications providers. Cloudflare provides website delivery, security, and anonymous web analytics. A configured form-processing service, email provider, hosting provider, or storage provider may process contact submissions and correspondence so they can be delivered to us and retained for the purposes described in this notice.
Professional advisers and authorities. We may disclose information to legal, accounting, insurance, security, or other professional advisers, or to courts, regulators, law enforcement, and government authorities when reasonably necessary or legally required.
Business transaction participants. We may disclose or transfer information in connection with a proposed or completed merger, financing, reorganization, sale of assets, acquisition, or similar transaction, subject to appropriate confidentiality and legal requirements.
We do not sell personal information. We do not share personal information for cross-context behavioral advertising, and we do not use advertising networks to profile website visitors.
5. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?
In short: We may transfer, store, and process your information in countries other than your own.
We are based in the United States, and our service providers may process information in the United States and other countries where they operate. Those countries may have data protection laws that differ from the laws where you live.
When applicable law requires safeguards for an international transfer, we use an approved transfer mechanism or rely on another legally permitted basis. You may contact us for more information about safeguards relevant to your information.
6. HOW LONG DO WE KEEP YOUR INFORMATION?
In short: We keep information for as long as needed for the purposes in this notice, including future project maintenance and customer support, unless a different period is required by contract or law.
We keep contact-form submissions and related correspondence while we respond to an inquiry, evaluate or provide requested services, and maintain an active or reasonably anticipated business relationship. After that, we retain information only as long as reasonably needed for legitimate business records, security, dispute resolution, enforcement of agreements, and legal, tax, accounting, or regulatory requirements.
Project completion does not automatically end the retention period. We may retain project and customer records for as long as they remain reasonably useful for equipment or software maintenance, service history, future modifications, troubleshooting, follow-on work, and the ongoing customer relationship. To the extent those records contain personal information, this notice applies to that information. A request concerning personal information does not require deletion of technical project files that do not identify a person.
We determine the retention period from the nature and sensitivity of the information, the purpose for which it was collected, the status of the inquiry or business relationship, the risk of harm from unauthorized use, and applicable legal requirements.
When information is no longer needed, we delete or de-identify it. Information in backups may remain until the applicable backup is overwritten or expires, but it is not used for other purposes while awaiting deletion.
7. HOW DO WE KEEP YOUR INFORMATION SAFE?
In short: We aim to protect your personal information through a system of organizational and technical security measures.
We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.
8. DO WE COLLECT INFORMATION FROM MINORS?
In short: We do not knowingly collect data from or market to children under 18 years of age.
We do not knowingly collect, solicit data from, or market to children under 18 years of age or the equivalent age specified by law in their jurisdiction, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 or the applicable age in your jurisdiction, or that you are the parent or guardian of such a minor and consent to the minor dependent’s use of the Services. If we learn that personal information from a user below the applicable age has been collected, we will take reasonable measures to promptly delete that data from our records. If you become aware of any such data we may have collected, please contact us at legal@aftermarketautomation.com.
9. WHAT ARE YOUR PRIVACY RIGHTS?
In short: Depending on your country, province, or state of residence, you may have rights that provide greater access to and control over your personal information.
In some regions, including the European Economic Area (EEA), United Kingdom (UK), Switzerland, and Canada, you have certain rights under applicable data protection laws. These may include rights to access and obtain a copy of personal information, request correction or deletion, restrict or object to processing, and request data portability where applicable. We do not use personal information for solely automated decisions that produce legal or similarly significant effects.
To exercise these rights, email legal@aftermarketautomation.com. We will consider and respond to requests in accordance with applicable data protection laws.
If you are located in the UK and are unhappy with how we have handled your personal information, you can make a complaint directly to us by emailing legal@aftermarketautomation.com. We will investigate and respond within the period required by applicable law.
If you are not satisfied with our final response, you can refer your complaint to the UK Information Commissioner's Office. If you are located in the EEA or UK and believe we are unlawfully processing your personal information, you may also complain to your Member State data protection authority or the UK data protection authority. If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.
Withdrawing your consent. If we rely on your consent to process your personal information, you have the right to withdraw that consent at any time by emailing legal@aftermarketautomation.com. Withdrawal will not affect the lawfulness of processing completed before withdrawal or, where applicable law allows, processing based on lawful grounds other than consent.
10. CONTROLS FOR DO-NOT-TRACK FEATURES
Some browsers and devices provide a Do-Not-Track ("DNT") setting. No uniform legal or technical standard for DNT has been adopted, so the website does not currently respond differently when it receives a DNT signal. The website does not use cookies or advertising trackers, and we do not sell personal information or share it for cross-context behavioral advertising. If a standard we must follow is adopted, we will update this notice and our practices as required.
11. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
In short: Residents of certain US states may have rights to know, access, correct, obtain, or delete personal information and to opt out of certain uses. The rights available to you depend on the law that applies.
Categories of Personal Information We Collect
The table below explains the categories of personal information that may be collected or processed in connection with the website and project inquiries. A "Yes" does not mean that every example in the category is collected or that the category applies to every visitor.
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Name and work email submitted through the contact form; IP address and similar online identifiers may be processed for website delivery and security | YES |
| B. Personal information as defined in the California Customer Records statute | Name and business contact information submitted through the form or later correspondence | YES |
| C. Protected classification characteristics under state or federal law | Characteristics such as age, race, national origin, marital status, or similar demographic information; we do not request this information | NO |
| D. Commercial information | The project category selected and information about services considered or requested | YES |
| E. Biometric information | Fingerprints and voiceprints | NO |
| F. Internet or other similar network activity | Limited website request, performance, and security data processed by Cloudflare; the analytics reports available to us are aggregate and anonymous | LIMITED |
| G. Geolocation data | We do not request or collect precise device location as personal information | NO |
| H. Audio, electronic, sensory, or similar information | The website form does not accept image, audio, video, or other file uploads | NO |
| I. Professional or employment-related information | Company name, work email, and professional or project context you choose to provide | YES |
| J. Education Information | Student records and directory information | NO |
| K. Inferences drawn from collected personal information | We do not create behavioral profiles or infer personal characteristics from website use | NO |
| L. Sensitive personal information | We do not request sensitive personal information and instruct visitors not to submit it through the contact form | NOT REQUESTED |
Sources of Personal Information
We collect personal information directly from you when you submit the contact form or communicate with us. Cloudflare processes limited technical data when your device requests the website. We do not purchase personal information or obtain contact lists from data brokers.
How We Use and Share Personal Information
Sections 2 and 4 describe our purposes and disclosures. Depending on the service involved, categories A, B, D, F, and I may be disclosed to service providers for website delivery and security, form and email transmission, hosting, storage, and related operational support.
We do not sell personal information, share it for cross-context behavioral advertising, or use it for automated decisions that produce legal or similarly significant effects.
Your Rights
You have rights under certain US state data protection laws. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law. These rights include:
Right to know whether or not we are processing your personal data
Right to access your personal data
Right to correct inaccuracies in your personal data
Right to request the deletion of your personal data
Right to obtain a copy of the personal data you previously shared with us
Right to non-discrimination for exercising your rights
Right to opt out of the processing of your personal data if it is used for targeted advertising (or sharing as defined under California’s privacy law), the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects ("profiling")
Depending on the state where you live, you may also have the right to request the categories or specific third parties to which personal data was disclosed, limit certain uses of sensitive personal data, or appeal a decision on your request. We do not intentionally collect sensitive personal data, sell personal data, use it for targeted advertising, or use it for profiling that produces legal or similarly significant effects.
How to Exercise Your Rights
To exercise these rights, email us at legal@aftermarketautomation.com.
Under certain US state data protection laws, you can designate an authorized agent to make a request on your behalf. We may deny a request from an authorized agent that does not submit proof that they have been validly authorized to act on your behalf in accordance with applicable laws.
Request Verification
Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have the information in our system. We will only use personal information provided in your request to verify your identity or authority to make the request. However, if we cannot verify your identity from the information already maintained by us, we may request that you provide additional information for the purposes of verifying your identity and for security or fraud-prevention purposes.
If you submit the request through an authorized agent, we may need to collect additional information to verify your identity before processing your request and the agent will need to provide a written and signed permission from you to submit such request on your behalf.
Appeals
Under certain US state data protection laws, if we decline to take action regarding your request, you may appeal our decision by emailing us at legal@aftermarketautomation.com. We will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If your appeal is denied, you may submit a complaint to your state attorney general.
California "Shine The Light" Law
We do not disclose personal information to third parties for their own direct-marketing purposes. California residents may submit a request concerning disclosures covered by California Civil Code Section 1798.83 by emailing legal@aftermarketautomation.com.
12. DO OTHER REGIONS HAVE SPECIFIC PRIVACY RIGHTS?
In short: You may have additional rights based on the country where you reside.
Australia and New Zealand
We collect and process your personal information under the obligations and conditions established by Australia's Privacy Act 1988 and New Zealand's Privacy Act 2020. This Privacy Notice describes what personal information we collect, the sources and purposes of collection, and other recipients of personal information.
If you do not provide personal information necessary for its applicable purpose, it may affect our ability to:
Offer the products or services you request
Respond to or assist with your requests
You may request access to or correction of your personal information by emailing legal@aftermarketautomation.com. If you believe we are unlawfully processing your personal information, you may submit a complaint to the Office of the Australian Information Commissioner or the Office of the New Zealand Privacy Commissioner, as applicable.
Republic of South Africa
You may request access to or correction of your personal information by emailing legal@aftermarketautomation.com.
If you are not satisfied with how we address a complaint regarding our processing of personal information, you may contact the Information Regulator of South Africa. General enquiries may be sent to enquiries@inforegulator.org.za. Complaints using POPIA/PAIA Form 5 may be sent to PAIAComplaints@inforegulator.org.za or POPIAComplaints@inforegulator.org.za.
13. DO WE MAKE UPDATES TO THIS NOTICE?
In short: Yes, we will update this notice as necessary to stay compliant with relevant laws.
We may update this Privacy Notice from time to time. The current version is identified by the "Last updated" date at the top of the page. If we make material changes, we may provide additional notice on the website or contact affected people when appropriate and legally required.
14. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
If you have questions or comments about this notice, email us at legal@aftermarketautomation.com.
15. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?
Depending on applicable law, you may have the right to request access to personal information we hold about you, obtain information about how it has been processed, correct inaccuracies, receive a copy, or request deletion. Where applicable law permits, these rights may be limited when information must be retained for an active or reasonably anticipated project, future maintenance and support, security, contractual or legal obligations, dispute resolution, or legal claims. To submit a request, email legal@aftermarketautomation.com.