Privacy Policy
Effective date: October 4, 2026
Last updated: October 4, 2026
Company established: September 30, 2026
1. What this policy covers
This Privacy Policy explains how Halden Circuitry handles information associated with its website, prospective client communications and administration of its remote information technology services. The services concern business application integration planning, workflow organization, interoperability reviews and technical documentation. The policy is intended to help visitors understand the information involved and the choices available to them.
The website is hosted on Shopify. Shopify and any separately configured applications can handle website activity under their own roles and settings. This policy describes the custom website sections supplied for Halden Circuitry and the general purposes for business communications. Additional processing performed for a client’s own systems is governed by the written engagement terms and, where needed, a data processing agreement.
This policy does not claim that every visitor has the same statutory rights or that the company falls within every privacy law’s scope. Rights and obligations depend on the applicable law, the person’s location, the type of information and the actual processing involved.
2. Information supplied in communications
If you contact Halden Circuitry using your own email service or another agreed communication channel, the information may include your name, business contact details, organization, applications in use, project objective and the content of the message. A proposal or engagement may also require the identity of an authorized business representative, invoice details, scope approvals and records of project discussions.
You should provide only the information needed to understand the request. Initial communications should not contain passwords, access tokens, full payment card numbers, government identification documents, sensitive personal records or unredacted production datasets. Where a project needs confidential records or application access, the relevant method and safeguards are agreed separately.
If you provide another person’s business contact details, you should have a lawful reason to do so and should make that person aware of the context. Halden Circuitry does not request personal information unrelated to the services merely because it could be useful for general marketing.
3. The current website request form
The request form in the custom website sections currently validates the entered fields in the visitor’s browser and displays an on-screen confirmation. In this configuration, the form does not transmit the entered fields to Halden Circuitry, Shopify’s contact form service, an email service or a customer relationship management system. The custom form does not save its entered fields in cookies, browser local storage or browser session storage.
The appearance of the on-screen confirmation therefore does not establish that a message has been delivered to the company. For a communication that requires a response, write to projects@haldencircuitry.com using your own email application or use another communication method separately agreed with the company. The email address is displayed as ordinary text on the website.
If the form is later connected to a sending or storage service, this policy must be updated to describe the actual collection, recipients, purposes and retention of those submissions. Browser autofill or password manager functions are controlled by the visitor’s own browser or provider and are separate from the custom form’s behavior.
4. Website and device activity
When a website is accessed, its hosting infrastructure can receive technical information such as an IP address, browser type, approximate location inferred from an IP address, requested pages, timestamps, referring page and security-related events. This information can support delivery of the page, operation of the platform, diagnostics and protection against misuse.
The custom Halden Circuitry sections do not install advertising pixels or independent analytics scripts. The supplied fonts and section images are served through the store’s Shopify-hosted files, rather than through an external font-loading service. A normal request for a hosted image or font can still be visible to the hosting provider as a technical request.
The Shopify store, its theme and separately installed applications may use cookies or similar technologies beyond the supplied custom sections. Their actual behavior depends on store settings and installed features. The Cookie Policy explains the categories and the distinction between the supplied sections and the wider store environment.
5. Purposes for using information
Information received in business communications is used to understand an inquiry, decide whether the requested work fits the services, prepare a proposal, coordinate an agreed engagement, supply deliverables and respond to questions or service concerns. Project administration can require billing records, scope approvals, milestone communications and documentation of agreed changes.
Technical website information can be used by the relevant platform to deliver content, maintain availability, investigate errors, secure the service and address misuse. If optional analytics or marketing tools are enabled separately, the operator must provide appropriate notices and controls for those purposes. Such optional processing is not added by the custom code supplied for this website.
Halden Circuitry does not need personal data to make general information about its service offerings available. Information should not be repurposed for an unrelated activity merely because it was provided during an integration discussion.
6. Legal bases where they apply
Where a privacy law requires a legal basis, the relevant basis depends on the activity. Responding to a requested proposal or delivering an agreed engagement may be necessary to take steps toward, or perform, a contract. Basic business administration, maintaining security and answering ordinary inquiries may involve legitimate business interests where that basis is available and the person’s interests and rights are considered.
Accounting and other records may be kept to comply with applicable legal obligations. Consent may be relevant to optional marketing communications or optional technologies where consent is required. A business inquiry is not treated as consent to unrelated marketing. Where processing relies on consent, withdrawal applies prospectively and does not make earlier lawful processing unlawful.
These descriptions are conditional on the relevant legal regime. They do not assert that a single basis applies to all information or authorize a use that would otherwise be prohibited by law.
7. Providers and other recipients
A business communication may be handled by the email, document storage, meeting or invoicing provider used for the engagement. A provider should receive only the information needed for its role and should be subject to appropriate contractual or other restrictions. The exact tools used for confidential project work are agreed in that project’s arrangements rather than implied by a website illustration.
Shopify operates the hosting platform and can process technical website information for platform functions. Separately installed store applications can process information according to their configured features; these should be reviewed before activation. Payment providers may receive payment information if a paid engagement uses their services. The website request form itself does not collect payment information.
Information may also be disclosed where required by law, to respond to a valid legal process or to establish or defend legal rights. A relevant business transaction could require a controlled disclosure, subject to appropriate protections and any notice required by law. This policy does not authorize unrestricted publication of client information.
8. Sale, sharing and optional platform features
Halden Circuitry does not sell inquiry or project contact information in exchange for money as part of the services described on this website. Some privacy laws define “sale” or “sharing” more broadly than a monetary sale, including certain uses of advertising technology or platform data. The supplied custom sections do not implement that advertising functionality.
Shopify may offer optional features, including Shopify Network Intelligence, that use additional customer or activity data when enabled. Their applicability depends on the store’s actual settings. If such features are enabled, the store operator must review the required disclosures, lawful grounds and visitor controls before relying on this policy as a complete description of the store.
If applicable law provides a right to opt out of sale, sharing, targeted advertising or certain profiling, requests can be directed to the contact address below. Where the hosting platform recognizes a legally applicable privacy preference signal, its configured controls should be used consistently with that requirement.
9. Client system information
An engagement may involve business process maps, application configurations, screenshots, field descriptions, sample records and technical specifications. These materials can contain personal information belonging to the client’s employees, customers or other people. The client remains responsible for identifying lawful processing instructions and providing only the materials needed for the agreed work.
Where Halden Circuitry processes personal data on a client’s behalf, the client’s instructions and the applicable engagement or data processing agreement govern that processing. Redacted screenshots, fictional test records and limited-access demonstrations should be used where practical. Access should be limited in purpose and duration, and production changes should follow the agreed approval process.
A person seeking to exercise rights concerning information held in a client’s application should ordinarily contact that client first. Halden Circuitry will assist the relevant client as required by the applicable agreement and law rather than independently changing a client’s records without authority.
10. Retention and deletion
Information received directly in an inquiry is retained only for as long as reasonably needed to address the inquiry, manage any resulting engagement and satisfy relevant business or legal requirements. Factors include whether the inquiry led to a project, whether a concern remains unresolved, the need for invoice and accounting records, and any applicable claim or recordkeeping period.
Project materials and access arrangements should have a retention or handover plan appropriate to the engagement. Temporary access should be removed when it is no longer needed. A request to delete information will be assessed against the applicable rights and any legitimate or legally required reason to retain specific records. A retained record should not be used for an unrelated purpose merely because it cannot yet be deleted.
The current custom request form does not create a stored submission record. Information may still exist in the visitor’s own browser autofill, in their sent email folder or in records held by independently operated platform providers. Their deletion processes are separate.
11. Security and international processing
Reasonable safeguards should be used to protect business communications and project materials, with the measures appropriate to the data and the work involved. Examples include limiting access, using approved transfer methods, avoiding unnecessary sensitive records and managing temporary permissions. No website, email channel or storage system can be promised to be completely secure in every circumstance.
The company is based in the United States. Hosting and other providers may process information in countries where they operate. If an applicable law requires protections for an international transfer, the parties and relevant providers must arrange a valid transfer mechanism and other required safeguards for that processing. This policy does not represent that all information remains in a single location.
If you believe sensitive information was included in a communication by mistake or an agreed access method may have been compromised, contact Halden Circuitry promptly with a description of the issue. Do not send additional secret credentials in the report.
12. Rights, requests and complaints
Depending on applicable law, you may have rights to request access to personal information, correction, deletion, portability, restriction or objection. You may also have a right to withdraw consent, opt out of specified uses or appeal the handling of a rights request. These rights can be subject to statutory exceptions, verification requirements and the company’s actual role in the processing.
Send a request to projects@haldencircuitry.com, identify the right you want to exercise and describe the relevant communication or engagement. Reasonable information may be requested to verify identity or authority, but unnecessary identification documents should not be sent unsolicited. An authorized representative may need to provide evidence of authorization. Requests will be handled within the time required by applicable law.
If a request cannot be granted in full, the reason and any available review or appeal process will be explained where required. You may contact a relevant privacy authority or regulator where applicable. Exercising a lawful privacy right should not result in unlawful discrimination.
13. Children, external services and updates
The website and business consulting services are not directed at children under thirteen. The request form and paid engagements are intended for adults acting for themselves or for an organization. If a parent or guardian believes that a child’s information has been sent directly to the company without an appropriate basis, they may contact the address below so the matter can be assessed.
A person’s browser, email provider, application vendor or client organization may process information independently. Their privacy notices and controls apply to their own processing. A description of a business application on this website does not mean Halden Circuitry controls that application’s privacy practices.
This policy may be updated when communication tools, website features, services or legal requirements change. The last updated date identifies the current version. Material changes affecting existing information will be communicated where applicable law requires notice. The policy should be checked against the store’s actual settings whenever a new application, tracking tool or sending service is added.
Contact Halden Circuitry
For questions about this policy, an engagement, a privacy request or a service concern, use the contact details below. Please identify the relevant subject and provide enough information for the request to be understood. Do not include passwords, access tokens, payment card numbers or confidential production records in an initial message.
Email: projects@haldencircuitry.com
Address: 204 E Washington St, Iowa City, IA 52240
Phone: +1 712 938 0389