AstroPCB

Privacy Policy

Effective Date: September 20, 2026

This Privacy Policy explains how AstroPCB (“we”, “us”, or “our”) collects, uses, discloses, and safeguards your personal information when you visit https://astropcb.com and use our services.

We are committed to protecting your privacy and ensuring transparency. We do not and will not sell your personal information.

By using our services, you consent to the practices described in this Privacy Policy.

1. What We Collect

Account Information

Name, email address, encrypted password, and IP address when you create an account.

Profile Information

Company name, phone number, and other details you optionally provide.

Delivery Information

Recipient name, phone number, shipping address, city, state, postal code, and country.

Payment Information

Payments are processed through PayPal (PCI-DSS Level 1 compliant). We do not store your full credit card number, CVV, or bank account details. We receive only a transaction reference and payment status.

Design Files

Gerber files and other PCB design files you upload are stored securely for order fulfillment and treated as confidential.

Communication Data

Content of email or chat communications when you contact our support team.

Usage Data

IP address, browser type, operating system, pages visited, time of visits, and device identifiers — collected automatically.

2. Cookies

We use cookies and similar technologies to improve your experience. Analytics cookies are only activated after you provide consent. See our Cookie Policy for full details.

3. How We Use Your Information

  • Order Fulfillment: Processing orders, manufacturing, shipping, and delivery tracking
  • Account Management: Creating and maintaining your account
  • Customer Support: Responding to inquiries
  • Service Improvement: Analyzing usage to improve our website
  • Communication: Order updates, shipping notifications, and (with consent) marketing
  • Legal Compliance: Fulfilling legal obligations including export control
  • Security: Detecting and preventing fraud

Legal Bases (GDPR)

  • Contract performance: Processing orders and providing services
  • Legitimate interests: Improving services, security, fraud prevention
  • Consent: Marketing communications, analytics cookies
  • Legal obligation: Tax records, export compliance

4. Who We Share With

  • Shipping Partners: DHL, FedEx, UPS, EMS, SF Express — delivery address and contact for shipment
  • Payment Processor: PayPal — payment processing only
  • Analytics: Google Analytics — anonymized usage data (only with consent)
  • Manufacturing Partners: Our certified factory network — order specifications necessary for production
  • Legal Authorities: When required by law

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5. Cross-Border Data Transfers

Your information may be processed in servers located in the EU (AWS eu-west-1). If data is transferred internationally, we ensure adequate protection through Standard Contractual Clauses (SCCs), data processing agreements, and technical security measures.

6. Your Rights

All Users

  • Access: Request a copy of your personal data
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your personal data
  • Data Portability: Receive your data in a machine-readable format

EU/EEA Users (GDPR)

  • Right to object to processing based on legitimate interests
  • Right to restrict processing
  • Right to withdraw consent at any time
  • Right to lodge a complaint with your local Data Protection Authority

California Residents (CCPA/CPRA)

  • Right to know what personal information we collect
  • Right to delete personal information
  • Right to opt-out of sale (we do not sell personal information)
  • Right to non-discrimination

To exercise your rights, email rfq@astropcb.com. We respond within 30 days.

7. Data Security

  • SSL/TLS encryption for all data in transit
  • Encrypted password storage
  • PCI-DSS compliant payment processing via PayPal
  • Access controls limiting employee access to personal data
  • AWS infrastructure with encryption at rest

8. Data Retention

We retain personal data for as long as necessary to provide services, comply with legal obligations (tax records: 7 years), resolve disputes, and enforce agreements. You may request deletion at any time, subject to legal retention requirements.

9. Children’s Privacy

Our services are not directed at individuals under 16 years of age. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy periodically. The effective date at the top shows the latest revision. Material changes will be communicated via website notice or email.

For privacy questions: