1. Introduction

Centon Electronics Inc. ("Centon," "we," "our," or "us") operates the website at www.centon.com. This Privacy & Security Policy explains what personal information we collect, how we use it, how we share it, and the rights you have over it. By using centon.com, you agree to the practices described here.

If you have questions, email us at csupport@centon.com.

2. Information we collect

Information you provide

When you contact us, place an order, request a quote, or sign up for email updates, we may collect:

• Name, company name, and job title
• Email address, phone number, and mailing or shipping address
• Order and payment information (payment details are processed by our payment processors; we do not store full payment card numbers on our systems)
• Product interests, samples requested, and correspondence you send us

Information collected automatically

When you visit centon.com, we automatically collect:

• IP address and approximate geographic location
• Browser type, device type, and operating system
• Pages visited, referring and exit pages, and time stamps
• Click behavior and interactions used to measure site performance

This information is collected through cookies, web beacons, and similar tracking technologies. See Cookies & tracking for details.

Information from third parties

We may receive information about you from:

• Advertising partners (Google, Meta, LinkedIn, TikTok) — aggregated audience data, conversion events, and remarketing signals
• Shipping carriers — delivery status and confirmations
• Payment processors — transaction authorizations and fraud signals

3. How we use your information

We use personal information for the following purposes:

• To fulfill orders and deliver products
• To respond to inquiries, quote requests, and customer support needs
• To send transactional communications (order confirmations, shipping updates, warranty notices)
• To send marketing email communications where you have consented or where permitted by law
• To analyze site performance, debug issues, and improve the user experience
• To serve and measure targeted advertising on other platforms
• To comply with legal obligations (tax, accounting, export control, warranty records)
• To protect against fraud, unauthorized access, and abuse

4. How we share your information

Service providers

We share information with service providers that help us operate our business, under contract and only for the purposes we specify:

• Shopify — e-commerce platform, hosting, and analytics
• Shipping carriers — UPS, FedEx, USPS, DHL, and other carriers as needed for delivery
• Payment processors — Shopify Payments, PayPal, and other processors handling transactions
• Email platform — Shopify Email for transactional and marketing messages

Advertising partners

We share certain personal information with advertising platforms to measure advertising performance and serve targeted advertising. These partners include Google (Analytics and Ads), Meta (Facebook Pixel), LinkedIn (Insight Tag), and TikTok (Pixel). Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), this sharing may constitute a "sale" or "sharing" of personal information for cross-context behavioral advertising. You have the right to opt out — see Your privacy rights.

Legal and compliance

We may disclose personal information when required by law, in response to valid legal process (subpoena, warrant, court order), to protect our rights or property, to investigate fraud, or in connection with a merger, acquisition, or sale of assets.

5. Cookies & tracking technologies

Cookies are small text files stored on your device when you visit a website. We use cookies and similar technologies (web beacons, pixels, local storage) for the following purposes:

• Strictly necessary cookies — required for site functionality such as shopping cart, checkout, and login. These cannot be disabled.
• Performance and analytics cookies — Google Analytics and Shopify analytics, used to measure site usage and improve performance.
• Advertising cookies — Google Ads, Meta Pixel, LinkedIn Insight Tag, and TikTok Pixel, used for retargeting and ad measurement.

You can manage cookies through your browser settings. You can opt out of Google Analytics at tools.google.com/dlpage/gaoptout. You can opt out of interest-based advertising from participating companies at:

• Network Advertising Initiative: optout.networkadvertising.org
• Digital Advertising Alliance: optout.aboutads.info
• European Interactive Digital Advertising Alliance: youronlinechoices.eu

Global Privacy Control (GPC). We honor the GPC browser signal as an opt-out request for users in jurisdictions that recognize it, including California. If your browser sends a GPC signal, we treat it as an opt-out of sale or sharing of personal information for cross-context behavioral advertising.

6. Your privacy rights

California residents (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act and California Privacy Rights Act:

• Right to know what personal information we collect, use, disclose, and sell or share
• Right to delete personal information we have collected from you
• Right to correct inaccurate personal information
• Right to opt out of the sale or sharing of personal information for cross-context behavioral advertising
• Right to limit the use and disclosure of sensitive personal information
• Right to non-discrimination for exercising any of these rights

We do not knowingly sell or share personal information of consumers under 16 years of age without consent.

The categories of personal information we collect under CCPA categories include: identifiers (name, email, IP address), commercial information (orders, products purchased), internet or electronic network activity (browsing, site interaction, ad interaction), approximate geolocation, and inferences drawn from the above.

EU and UK residents (GDPR / UK GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation and UK GDPR:

• Right of access to your personal data
• Right to rectification of inaccurate or incomplete data
• Right to erasure ("right to be forgotten")
• Right to restrict processing of your data
• Right to data portability — receive your data in a machine-readable format
• Right to object to processing based on legitimate interests, including direct marketing
• Right to withdraw consent at any time where processing is based on consent
• Right to lodge a complaint with a supervisory authority in your country of residence

The lawful bases we rely on for processing include: performance of a contract (order fulfillment, warranty), legitimate interests (site security, fraud prevention, product improvement), consent (marketing communications and non-essential cookies), and legal obligations (tax, accounting, and regulatory compliance).

Data controller: Centon Electronics Inc., 27 Journey, Suite 100, Aliso Viejo, CA 92656, USA.

Other U.S. state residents

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and other states with comprehensive consumer privacy laws have similar rights, including access, deletion, correction, and opt-out of targeted advertising. To exercise these rights, contact us at csupport@centon.com.

How to submit a privacy request

To exercise any of the rights above, email csupport@centon.com with "Privacy Request" in the subject line. Please include:

• Your name and email address
• The nature of your request (know, delete, correct, opt-out, etc.)
• The state or country where you reside

We may ask you to confirm information you have previously provided (such as recent order details) to verify your identity before processing the request. We will respond within the timeframes required by applicable law — generally 45 days for CCPA requests and 30 days for GDPR requests. Authorized agents may submit requests on your behalf with written proof of authorization.

7. Children's privacy

Centon Electronics does not knowingly collect personal information from children under the age of 13 (or under 16 for residents of the European Economic Area and United Kingdom). If we become aware that we have collected personal information from a child without verifiable parental consent, we will delete it as soon as reasonably possible. Parents or guardians who believe their child has provided us with personal information should contact us at csupport@centon.com.

8. Data retention

We retain personal information only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. Typical retention periods:

• Order and customer records — 7 years, for tax, accounting, and warranty purposes
• Marketing contacts — until you unsubscribe
• Support correspondence — 2 years
• Website analytics — aggregated data retained indefinitely; raw identifiers retained per Google Analytics and Shopify defaults
• Server log files — approximately 90 days

9. International data transfers

Centon Electronics is headquartered in the United States. If you access centon.com from outside the U.S., your personal information will be transferred to, stored, and processed in the U.S. and in other countries where our service providers operate. Data protection laws in these countries may differ from those in your country of residence.

For transfers of personal data from the European Economic Area, United Kingdom, or Switzerland to the United States, we rely on appropriate safeguards as required by applicable law, including the European Commission's Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum, where applicable.

10. Data security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, alteration, or disclosure. These include encryption in transit (TLS/HTTPS), restricted access controls, and working with PCI-compliant payment processors. However, no system is completely secure, and we cannot guarantee absolute security. In the event of a security incident affecting your personal information, we will notify you in accordance with applicable law.

11. Third-party links

centon.com may contain links to third-party websites and services that are not owned or controlled by Centon Electronics. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal information.

12. Changes to this policy

We may update this Privacy & Security Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be posted on this page with an updated "Last updated" date at the top. Where required by law, we will provide additional notice (such as email notification or a banner on our site). Your continued use of centon.com after a change constitutes your acceptance of the updated policy.

13. Contact us

For privacy questions, requests, or complaints:

Centon Electronics Inc.
27 Journey, Suite 100
Aliso Viejo, CA 92656, USA
Email: csupport@centon.com
Phone: +1 (800) 234-9292