Privacy Policy

Effective Date: April 15, 2026

Introduction

Welcome to Atlas PCB (“we”, “us”, or “our”). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website https://www.atlaspcb.com and use our services (collectively, the “Services”).

We are committed to protecting your privacy and ensuring transparency about our data practices. We do not and will not sell your personal information.

Data Controller: Atlas PCB, Hong Kong SAR, China.

By using our Services, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use our Services.

I. What Personal Information We Collect

1. Account Registration Information

When you create an account, we collect your name, email address, password (stored encrypted), and IP address. We generate a unique customer ID for order management.

2. Profile Information

You may provide company name, job title, industry, and phone number to enhance your account.

3. Delivery Information

To ship your orders, we collect recipient name, phone number, shipping address, city, state/province, postal code, and country.

4. Payment Information

Payments are processed through Stripe, a PCI-DSS Level 1 compliant payment processor. We do not store your full credit card number, CVV, or bank account details. We receive only a transaction reference, last four digits of your card, and payment status.

5. Design Files

When you upload Gerber files, BOM lists, or other PCB design files for manufacturing, we store these securely for order fulfillment. Your design files are treated as confidential — see our Terms of Service for details.

6. Communication Data

When you contact our support team via email or live chat, we collect the content of those communications to assist you.

7. Usage Data

We automatically collect technical data including: IP address, browser type and version, operating system, referring URLs, pages visited, time and date of visits, time spent on pages, and device identifiers.

II. Cookies and Similar Technologies

We use cookies and similar tracking technologies to improve your experience. See our Cookie Policy for full details.

Cookie Categories:

Analytics cookies are only activated after you provide consent via our cookie banner, in compliance with GDPR and ePrivacy regulations.

III. How We Use Your Personal Information

We use your information for the following purposes:

• Order Fulfillment: Processing orders, manufacturing PCBs, shipping, and delivery tracking
• Account Management: Creating and maintaining your account
• Customer Support: Responding to inquiries and resolving issues
• Service Improvement: Analyzing usage to improve our website and services
• Communication: Sending order updates, shipping notifications, and (with your consent) marketing communications
• Legal Compliance: Fulfilling legal obligations, including export control regulations
• Security: Detecting and preventing fraud, unauthorized access, and other security threats

Legal Bases for Processing (GDPR):

• Contract performance: Processing orders and providing services you requested
• Legitimate interests: Improving services, security, fraud prevention
• Consent: Marketing communications, analytics cookies
• Legal obligation: Tax records, export compliance, responding to lawful requests

IV. How We Share Your Personal Information

We may share your information with:

• Shipping Partners: DHL, FedEx, UPS, EMS, SF Express — delivery address and contact information for shipment
• Payment Processor: Stripe — payment processing only
• Analytics Provider: Google Analytics — anonymized usage data (only with your consent)
• Manufacturing Partners: Our certified factory network in China — order specifications and shipping details necessary for production
• Legal Authorities: When required by law, court order, or to protect our rights

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

V. Cross-Border Data Transfers

Your information is processed and stored in servers located in Hong Kong SAR and mainland China. If you are located outside these regions (including the EU, US, or other jurisdictions), your data will be transferred internationally.

We ensure adequate protection through:

• Standard Contractual Clauses (SCCs) where required by GDPR
• Data processing agreements with all service providers
• Technical and organizational security measures

By using our Services, you acknowledge and consent to such transfers.

VI. Your Rights

Depending on your location, you may have the following rights:

For All Users

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Data Portability: Receive your data in a structured, machine-readable format

Additional Rights for EU/EEA Users (GDPR)

• Right to Object: Object to processing based on legitimate interests
• Right to Restrict Processing: Request limitation of processing
• Right to Withdraw Consent: Withdraw consent at any time without affecting prior processing
• Right to Lodge a Complaint: File a complaint with your local Data Protection Authority

Additional Rights for California Residents (CCPA/CPRA)

• Right to Know: What personal information we collect and how we use it
• Right to Delete: Request deletion of personal information
• Right to Opt-Out of Sale: We do not sell personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

Additional Rights for Brazilian Users (LGPD)

• Right to Confirmation: Confirm whether we process your data
• Right to Access: Access your personal data
• Right to Correction: Correct incomplete, inaccurate, or outdated data
• Right to Anonymization, Blocking, or Deletion: Of unnecessary or excessive data
• Right to Information: About third parties with whom we share data

To exercise any of these rights, contact us at privacy@atlaspcb.com. We will respond within 30 days (or within the timeframe required by applicable law).

VII. Protection of Personal Information

We implement industry-standard security measures including:

• SSL/TLS encryption for all data in transit
• Encrypted password storage (bcrypt hashing)
• PCI-DSS compliant payment processing via Stripe
• Access controls limiting employee access to personal data
• Regular security assessments
• Secure file storage for design files

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

VIII. Your Choices and Controls

• Marketing Emails: Unsubscribe via the link in any marketing email, or contact us
• Cookies: Manage preferences via our cookie consent banner or your browser settings
• Account Data: Update or delete your profile information in your account settings
• Design Files: Request deletion of uploaded design files after order completion

IX. Third-Party Tracking and Online Advertising

We use Google Analytics 4 (GA4) to understand how visitors use our website. GA4 collects anonymized data including page views, session duration, and general geographic location. This data is only collected after you consent via our cookie banner.

We do not currently use targeted advertising or remarketing services.

X. Additional Information for California Consumers

Under the CCPA/CPRA, California residents have additional rights as described in Section VI above.

Categories of personal information collected in the past 12 months:

• Identifiers (name, email, IP address)
• Commercial information (order history, delivery addresses)
• Internet activity (browsing history on our site)
• Geolocation data (general, derived from IP address)

We do not sell personal information. We do not use or share sensitive personal information for purposes other than those permitted by the CCPA.

XI. Children’s Privacy

Our Services are not directed at individuals under 16 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us at privacy@atlaspcb.com and we will promptly delete it.

XII. Data Retention

We retain your personal data for as long as necessary to:

• Provide our Services and fulfill orders
• Comply with legal obligations (tax records: 7 years)
• Resolve disputes and enforce agreements
• Maintain security and fraud prevention records

Design files are retained for 12 months after order completion to facilitate reorders, unless you request earlier deletion.

When data is no longer needed, it is securely deleted or anonymized.

XIII. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via:

• A notice on our website
• Email notification to registered users

The “Effective Date” at the top reflects the latest revision. Continued use of our Services after changes constitutes acceptance.

XIV. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights:

• Email: privacy@atlaspcb.com
• General Support: support@atlaspcb.com
• Website: https://www.atlaspcb.com/contact

For EU-specific inquiries, you may also contact your local Data Protection Authority.