Privacy policy
Last updated: 22 August 2026 · GDPR / UK GDPR
This policy is written for business contacts in the United States, the EEA, the United Kingdom and Switzerland. It is not legal advice. Related: Legal notice · EU / UK supply · Terms of sale.
1. Controller
The controller of personal data collected through this website is InfraSpec Optics (“we”, “us”), an infrared optics manufacturer and distributor based in Florida, United States. Legal entity name, registered address and tax identifiers appear on quotations and commercial invoices. Privacy and data-subject requests: sales@infraspecoptics.com.
We are not established in the EEA. We have not appointed an EU Article 27 representative. EEA, UK and Swiss requests are handled from Florida, normally within one month.
2. What we collect
- Contact formName · company · email · message
- Quote formName · company · email · phone · specifications · files
- Business details you sendVAT / EORI · ship-to · end use (for export)
- Server logsIP · user agent · timestamp
- AnalyticsOnly if you accept and IDs are configured
We do not sell personal data. We do not use it for advertising or profiling. We do not make automated decisions with legal or similarly significant effects.
3. Legal bases (GDPR / UK GDPR)
- Art. 6(1)(b)Quotes, orders, delivery, warranty — contract / pre-contract
- Art. 6(1)(c)Tax, export screening, accounting — legal obligation
- Art. 6(1)(f)Site security, answering B2B enquiries, defending claims — legitimate interests
- Art. 6(1)(a)Optional analytics cookies — consent, if enabled
4. Drawings and technical files
Files uploaded with a quote are treated as commercially confidential. They are used only to prepare your quotation and quality records. If you need an NDA first, say so before you upload.
5. Recipients and transfers
Hosting and form processing: Netlify (United States). Inbound mail: Google (Gmail). Freight, insurance and export-screening providers only when an order ships. These processors act on our instructions. Transfers from the EEA/UK to the United States rely on Standard Contractual Clauses or another Chapter V mechanism as required.
6. Retention
- Unconverted RFQsUp to 24 months, then delete or anonymise
- Orders / invoicesAs required by US tax and commercial law (typically 7 years)
- Server logsShort period for security
You may ask us to erase data that we are not required to keep.
7. Cookies
Strictly necessary cookies (theme preference in local storage, security) do not require consent. Optional analytics (Google Analytics / Meta Pixel) are off until measurement IDs are configured and you accept the banner. You can refuse analytics and still use the site, quote form and all product pages.
8. Your rights (EEA / UK / CH)
You may request access, correction, erasure, restriction, objection, and portability, and you may withdraw consent for analytics. Email sales@infraspecoptics.com. You may lodge a complaint with your supervisory authority (for example CNIL, ICO, BfDI, AEPD, Garante). We respond within one month.
9. Security
The site is served over HTTPS with HSTS, a content security policy and standard hardening headers. No transmission over the internet is completely secure.
10. Children
This site is for professional buyers and engineers. It is not directed at children.
11. Changes
The date at the top is the current version. Material changes will be posted here.