Privacy Policy

Last Updated: December 22, 2025

Introduction

Embedded System Design LLC ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website embeddedsystemdesigns.com and use our services.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site or use our services.

Information We Collect

We collect information that you provide directly to us, information we obtain automatically when you use our services, and information from third-party sources.

Personal Information You Provide

Information you voluntarily provide when using our services

Contact Information: Name, email address, phone number, company name
Project Information: Project details, technical requirements, specifications
Account Information: Username, password (encrypted using Argon2), profile information
Communication Data: Messages, inquiries, feedback you send us

Note: We do not collect or store payment information. All payment processing is handled by third-party payment processors.

Information Collected Automatically

Technical data collected when you visit our website

Device Information: IP address, browser type, operating system, device type
Usage Data: Pages visited, time spent, click patterns, referral source
Cookies: See our Cookie Policy for details
Log Data: Server logs, error reports, performance metrics

Information from Third Parties

Data we may receive from external sources

Analytics Providers: Google Analytics (aggregated usage statistics)
Social Media: If you interact with us on social platforms
Business Partners: Information shared by collaborating organizations

How We Use Your Information

We use the information we collect for the following purposes:

Provide and Improve Services

Respond to your inquiries and project requests
Deliver our embedded systems design services
Improve website functionality and user experience
Develop new features and services

Communication

Send project updates and technical documentation
Respond to support requests and inquiries
Send administrative information (policy updates, service changes)
Marketing communications (with your consent, opt-out available)

Security and Legal Compliance

Protect against fraud, abuse, and security threats
Comply with legal obligations and regulations
Enforce our terms of service and policies
Resolve disputes and troubleshoot problems

Analytics and Research

Analyze website traffic and user behavior
Understand customer needs and preferences
Conduct market research and surveys
Measure marketing campaign effectiveness

Legal Basis for Processing (GDPR)

If you are from the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the data and context:

Contract Performance: Processing necessary to provide services you requested
Legitimate Interests: Improve services, prevent fraud, protect security
Consent: Marketing communications, optional cookies (you can withdraw anytime)
Legal Obligation: Comply with laws and regulations

How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers

We share data with third-party vendors who perform services on our behalf (hosting, analytics, email delivery). These providers are contractually obligated to protect your data and only use it for specified purposes.

Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information is transferred and becomes subject to a different privacy policy.

Legal Requirements

We may disclose your information if required by law, court order, or governmental request, or to protect our rights, property, or safety, or that of others.

With Your Consent

We may share your information with other parties when you explicitly consent to such sharing.

Data Security

How We Protect Your Information

We implement industry-standard security measures to protect your personal information:

Encryption: TLS/SSL encryption for data in transit, AES encryption for data at rest
Access Controls: Restricted access to personal data, role-based permissions
Secure Hosting: Data stored on secure servers with regular backups
Password Security: Passwords encrypted using Argon2 (winner of the Password Hashing Competition)
Regular Audits: Security assessments and vulnerability scans
CSRF Protection: Protection against cross-site request forgery attacks
Content Security Policy: Prevents XSS and injection attacks
Rate Limiting: Protection against brute force and DDoS attacks

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required by law:

Account Data: Retained while your account is active, plus 30 days after deletion
Project Data: Retained for the duration of the project plus 7 years for legal/accounting purposes
Communication Data: Retained for up to 3 years unless deletion is requested
Analytics Data: Aggregated data retained indefinitely, individual data for 26 months (Google Analytics)
Security Logs: Retained for up to 1 year for security and fraud prevention

Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

Right to Access

Request a copy of the personal information we hold about you.

Right to Rectification

Request correction of inaccurate or incomplete information.

Right to Erasure (Right to be Forgotten)

Request deletion of your personal data, subject to legal obligations.

Right to Restrict Processing

Request that we limit how we use your information.

Right to Data Portability

Request your data in a structured, machine-readable format.

Right to Object

Object to processing based on legitimate interests or for direct marketing.

Right to Withdraw Consent

Withdraw consent for processing at any time (doesn't affect prior lawful processing).

Right to Lodge a Complaint

File a complaint with your local data protection authority.

To exercise these rights, please contact us at privacy@embeddedsystemdesigns.com. We will respond to your request within 30 days.

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to Know: What personal information we collect, use, and share
Right to Delete: Request deletion of your personal information
Right to Opt-Out: We do not sell personal information
Right to Non-Discrimination: We will not discriminate against you for exercising your rights

No Sale of Data

We do not sell your personal information to third parties.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will delete such information.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

We ensure appropriate safeguards are in place for international transfers, including:

Standard Contractual Clauses approved by the European Commission
Adequacy decisions by relevant authorities
Data processing agreements with service providers

Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Embedded System Design LLC

Data Protection Officer

privacy@embeddedsystemdesigns.com

https://embeddedsystemdesigns.com

We will respond to your inquiry within 30 days.

Related Policies

Cookie Policy