Privacy Policy
Ravensafe — Electronic component & assembly design.
Effective: August 1, 2026
Last updated: August 1, 2026
Ravensafe designs and manufactures electronic components and assemblies for other businesses. This notice explains what personal information we handle, why we handle it, who we share it with, and the choices you have.
At a glance
We are — A business-to-business manufacturer. Most of the personal information we hold is work contact information for people at our customers, suppliers, and partners.
We never — Sell your personal information, share it for cross-context behavioral advertising, or use it for targeted advertising.
Your designs — Customer drawings, BOMs, and technical files are confidential business information handled under your agreement with us — not marketing data.
Your rights — Depending on where you live, you can ask us for a copy of your information, correct it, or have it deleted. See Your choices.
Ask us — privacy@ravensafe.com
Who we are
Ravensafe LLC is an electronic component and assembly design and manufacturing company headquartered at 25 Tucker Drive STE1, Leominster, MA 01453.
For personal information described in this notice, Ravensafe is the controller — the party that decides why and how the information is used — unless we tell you otherwise. Where we build products to a customer’s specification and handle personal information on that customer’s behalf, we act as a processor or service provider under our contract with them, and their privacy notice governs that information.
Questions about this notice go to privacy@ravensafe.com.
What this notice covers
This notice applies to personal information we handle when you:
- visit www.ravensafe.com or any other site or portal that links to this notice;
- contact us, request a quote, or submit a design or engineering inquiry;
- work with us as a customer, supplier, distributor, or partner contact;
- apply for a job with us;
- visit one of our facilities;
- meet us at a trade show or subscribe to updates.
It does not cover information practices of other companies whose sites we link to, or information you provide directly to our customers.
Information we collect
We collect only what we need to run a manufacturing business. The categories below use the terms required by California law; equivalent categories apply under other state laws.
| Category | Examples |
|---|---|
| Identifiers and contact details | Name, job title, employer, business email, business phone, business or shipping address, account or customer number |
| Commercial information | Quotes, orders, part numbers, purchase and payment history, support and warranty records, contract correspondence |
| Professional or employment information | Role, department, purchasing or engineering authority, supplier qualification records; for applicants, résumé, work history, education, references |
| Internet and device activity | IP address, browser and device type, operating system, referring page, pages viewed, time on page, approximate location derived from IP |
| Audio, visual, and electronic information | Facility CCTV footage, visitor logs, recorded support or design-review calls where we tell you in advance |
| Financial and payment information | Billing contact, bank or remittance details for supplier payment, tax identifiers, credit references |
| Compliance information | Information required for export control and sanctions screening, including name and, where a license or authorization requires it, citizenship or nationality |
| Inferences | Limited inferences about product interest drawn from your interactions with us, used to route inquiries to the right engineer or account manager |
Sensitive information
We do not seek out sensitive personal information. In two narrow situations we may handle it: citizenship or immigration status where an export-controlled program legally requires us to record it, and health or accessibility information you volunteer so we can accommodate a facility visit or an interview. We use this only for the stated purpose, do not use or disclose it to infer characteristics about you, and do not sell or share it.
Where we get it
- From you — quote requests, contact and support forms, contracts, emails and calls, event badge scans, subscription sign-ups, job applications, facility sign-in.
- Automatically — from your device when you use our website, through cookies and similar technologies described in Section 7.
- From your employer or ours — a colleague may give us your details as the technical or purchasing contact for a program.
- From third parties — distributors and sales representatives, referral partners, recruiting platforms and staffing agencies you have engaged, credit reference agencies, and denied-party and sanctions screening services we are required to use.
- From public sources — company websites, professional networking profiles, trade directories, and public registries, used to verify business contacts.
How and why we use it
We use personal information to:
- respond to inquiries, prepare quotes, and discuss design requirements;
- enter into and perform contracts — engineering, prototyping, production, delivery, invoicing, and support;
- manage supplier and distributor relationships, including qualification, purchasing, and responsible-sourcing due diligence such as conflict minerals declarations;
- provide warranty service, handle returns, and investigate quality issues;
- run and secure our website, detect fraud and misuse, and protect our networks and premises;
- meet legal obligations — tax and accounting, product safety and traceability, export control and sanctions screening, and responses to lawful requests;
- end product, capability, and event updates to business contacts, where permitted and always with a way to unsubscribe;
- assess job applications and manage our recruiting process;
- improve our products, services, and website through aggregated analysis;
- establish, exercise, or defend legal claims, and complete corporate transactions
Legal bases (EEA, UK, and Switzerland)
Where data protection law requires a legal basis, we rely on the following.
| Purpose | Legal basis |
|---|---|
| Quoting, contracting, delivery, support, invoicing | Performance of a contract, or steps taken at your request before entering one |
| Supplier management and due diligence | Legitimate interests in a lawful, responsible supply chain; legal obligations where required |
| Export control and sanctions screening; tax and records retention | Compliance with a legal obligation |
| Website operation, security, and fraud prevention | Legitimate interest in keeping our systems secure and functional |
| Analytics and non-essential cookies | Consent |
| Business-to-business marketing | Legitimate interests in promoting our services to relevant professionals, or consent where required |
| Recruitment | Steps prior to an employment contract; legitimate interests in assessing suitability |
| Legal claims and corporate transactions | Legitimate interests in protecting the business; legal obligation where applicable |
Where we rely on legitimate interests, we have weighed those interests against your rights and can explain that assessment on request. Where we rely on consent, you can withdraw it at any time without affecting what we did before you withdrew it.
Customer project data
Schematics, layouts, Gerber files, bills of material, test specifications, and similar technical files you send us are confidential business information. We handle them under your nondisclosure and supply agreements with us, use them only to quote and build what you asked for, and restrict access to the people who need it.
These files sometimes contain personal information incidentally — an engineer’s name in a title block, an approver’s initials on a revision. We treat that information under this notice and do not use it for marketing.
Please do not send us personal information you do not need us to have. If a design package must include personal data — for example, end-user records in a firmware image or test dataset — tell us before you transfer it so we can put the right controls and contract terms in place.
Cookies and analytics
Our website uses cookies and similar technologies in these categories:
Cookie categories
| Category | What it does | Can you turn it off? |
|---|---|---|
| Strictly necessary | Keeps the site working — page routing, form submission, load balancing, security and bot protection | No; the site will not function without these |
| Preferences | Remembers choices such as language, region, or units | Yes |
| Analytics | Tells us which pages are used and where visitors have trouble, using [e.g. Google Analytics 4 / Plausible / Matomo] | Yes |
| Advertising | We do not use advertising or cross-site tracking cookies. | — |
You can manage non-essential cookies through [our cookie banner / the “Cookie settings” link in the footer] and through your browser settings. Blocking cookies in your browser may affect how the site works.
Global Privacy Control. We treat a GPC or similar opt-out preference signal from your browser as a valid request to opt out of sale and sharing for that browser and device. Because browsers handle “Do Not Track” inconsistently, we do not respond to DNT headers separately.
When we share information
We do not sell personal information, and we do not share it for cross-context behavioral advertising. We disclose it only as follows:
- Service providers that work for us under contract — hosting and IT, ERP and CRM platforms, email and marketing tools, analytics, payment processors, auditors, and recruiting systems. They may use the information only to provide their service to us.
- Supply chain partners where necessary to fulfill your order — contract manufacturers, component suppliers, test houses, and freight and customs brokers, who need shipping and contact details to deliver.
- Professional advisors — lawyers, accountants, insurers, and consultants, under duties of confidentiality.
- Government and regulators where the law requires it, including export control, customs, product safety, and tax authorities, and in response to valid legal process.
- In a corporate transaction — a merger, acquisition, financing, or sale of assets, where information may transfer to the counterparty subject to this notice or a successor notice.
- With your direction — for example, when you ask us to coordinate with your distributor or design partner.
We do not disclose personal information to third parties for their own independent marketing.
International transfers
We operate internationally, and our suppliers, manufacturing partners, and other service providers may be located in several countries including the United States. Personal information may therefore be transferred to and processed in a country whose data protection laws differ from those where you live.
Where we transfer personal information out of the EEA, the UK, or Switzerland, we rely on an appropriate safeguard, normally the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, together with additional technical and organizational measures where our assessment shows they are needed. You can request a copy of the safeguard we use by writing to privacy@ravensafe.com
How long we keep it
We keep personal information only as long as we need it for the purpose we collected it, and then for as long as legal, tax, warranty, or traceability rules require. Manufacturing records often carry long retention periods for product safety and liability reasons.
Typical retention periods
| Information | Retained for |
|---|---|
| Inquiries and quotes that do not become orders | [24 months] from last contact |
| Customer and supplier contract and transaction records | Life of the relationship plus [7 years] |
| Production, traceability, and quality records | [10 years], or longer where a customer contract or regulation requires |
| Export control and sanctions screening records | [5 years] from the transaction |
| Marketing contacts and subscriptions | Until you unsubscribe, then a suppression record indefinitely so we do not contact you again |
| Website analytics | [14 months] |
| Unsuccessful job applications | [12 months], or longer with your consent to keep you on file |
| Facility CCTV | [30 days] unless retained for an incident |
When a retention period ends we delete the information or irreversibly anonymize it.
How we protect it
We maintain administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including access controls and least-privilege permissions, encryption of data in transit and of portable media, network monitoring, secure file transfer for customer technical packages, background-appropriate personnel screening, confidentiality obligations for staff and contractors, controlled site access, and an incident response process in compliance with NIST SP 800-171 and CMMC, SOC 2.
No system is completely secure, and we cannot guarantee the security of information you send us over the internet. Please do not send confidential technical files or sensitive personal information by unencrypted email — ask us for a secure transfer link instead. If a breach affects your personal information, we will notify you and the relevant regulator where the law requires it.
Your choices
Whatever your location, you can:
- Unsubscribe from our emails using the link in any message, or by writing to us. We will still send transactional messages about orders and support.
- Update your details by contacting your account manager or privacy@ravensafe.com.
- Manage cookies as described in Section 7.
- Ask us a question about how we handle your information and get a substantive answer.
How to make a request
Email privacy@ravensafe.com with “Privacy request” in the subject line or write to the address in Section 21. Tell us what you want and enough detail for us to find your records.
We verify requests before acting on them, usually by matching the details you give us against what we already hold, and by confirming control of the email address on file. We may ask for more information for sensitive requests such as deletion. An authorized agent may act for you if you give them written permission and we can verify it.
We respond within 45 days and may extend once by another 45 days where the request is complex, telling you before we do. For EEA and UK requests we respond within one month, extendable by two further months. We do not charge for requests unless they are excessive or repetitive, and we will not treat you differently for making one.
US state privacy rights
If you live in a state with a comprehensive privacy law — including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Minnesota, Maryland, Tennessee, Indiana, Kentucky, and Rhode Island — you have some or all of these rights, subject to that state’s law:
- Know and access — what personal information we collected about you, the categories of sources, our purposes, the categories of third parties we disclosed it to, and a copy in a portable format.
- Correct inaccurate personal information.
- Delete personal information we hold about you, subject to exceptions such as completing a transaction, security, legal compliance, and internal uses compatible with your relationship with us.
- Opt out of sale, sharing for targeted or cross-context behavioral advertising, and profiling with legal or similarly significant effects. We do not do any of these, so there is nothing to opt out of, but you may still submit a request.
- Limit the use of sensitive personal information — we use it only for the narrow purposes in Section 3, which are permitted uses that do not require a limitation right.
- Appeal a decision. If we decline your request, you may appeal by replying to our decision or writing to privacy@ravensafe.com with “Appeal” in the subject. We will respond within the period your state’s law allows, and if we deny the appeal we will tell you how to contact your state attorney general.
- Non-discrimination — we will not deny you goods or services, charge different prices, or provide a different quality of service because you exercised a right.
California specifics
The categories of personal information we collected in the past 12 months, our purposes, and the categories of recipients are set out in Sections 3, 5, and 8, which serve as our notice at collection. We did not sell or share personal information in the past 12 months, and we do not have actual knowledge of selling or sharing the personal information of consumers under 16. California residents may also request the information described in California’s “Shine the Light” law; we do not disclose personal information to third parties for their direct marketing purposes.
Nevada. We do not sell personal information as Nevada law defines it. Nevada residents may still submit an opt-out to privacy@ravensafe.com.
EU, UK and Swiss rights
If the GDPR or UK GDPR applies to our handling of your information, you have the right to access it; to have it corrected; to have it erased; to restrict how we use it; to receive it in a portable format; to object to processing based on legitimate interests, including direct marketing at any time; and to withdraw consent where we rely on it.
To exercise any of these, contact privacy@ravensafe.com. You also have the right to complain to your data protection authority — in the UK, the Information Commissioner’s Office at: ico.org.uk We would appreciate the chance to address your concern first.
Job applicants
When you apply to work at Ravensafe we collect the information in your application and anything you tell us during the process — contact details, work history, education, certifications, references, right-to-work information, and results of any background or export-control screening we run where the role requires it and the law permits.
We use it to assess your application, communicate with you, and meet employment and immigration obligations. We share it with the hiring team, our applicant tracking provider, and where relevant a background screening vendor. We keep unsuccessful applications for [12 months] in case a suitable role opens, unless you ask us to delete them sooner.
Some roles support export-controlled programs. For those, US law may require us to record and verify citizenship or immigration status before granting access to technical data. We collect this only where legally required, keep it separate from general hiring records, and use it only for that purpose.
Visitors to our sites
Our facilities use visitor sign-in and CCTV for security, safety, and protection of customer property and controlled technology. Signage identifies monitored areas. We keep visitor logs for [24 months] and CCTV footage for [30 days] unless it is needed for an incident investigation or legal claim.
Children
Our website and products are directed at businesses, not children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, write to privacy@ravensafe.com and we will delete it.
Other companies’ sites
Our site links to distributors, standards bodies, industry associations, and social platforms. We do not control those sites and are not responsible for their privacy practices. Read their notices before giving them your information.
Automated decisions
We do not make decisions that produce legal or similarly significant effects about you using automated processing alone. Screening tools — for example, denied-party and sanctions checks — flag matches for a person to review; a human makes the decision.
Changes to this notice
We update this notice when our practices or the law change. The current version and its effective date are always at the top of this page. If a change materially affects ho
information, we will give you clear notice — by email or a prominent notice on our website — before it takes effect where the law requires. We keep prior versions and will provide one on request.
How to reach us
Privacy contact Ravensafe LLC
Attn: Privacy
25 Tucker Drive
Leominster, MA 01453
Email: privacy@ravensafe.com
Phone: +1 978 962-6868
If you are not satisfied with how we handled your request, you may contact your state attorney general, or your data protection authority in the EEA, UK, or Switzerland.