Privacy policy

1. Who we are

Superfactor is a design and engineering agency based in Princeton Junction, New Jersey, United States. We are responsible for the website information described here and decide how it is used.

This policy covers superfactor.com and website-related communications. Information we handle on a client’s behalf as part of a project is governed by the relevant client agreement and privacy arrangements. Other products or services may have their own notices.

2. Information we collect

• Information you give us. Our enquiry form asks for your first name, last name, email address, company or organization, services of interest and message. We also receive information you choose to share in later correspondence.
• Enquiry records. We record when a message was submitted, its source page and a submission reference so we can deliver it, respond and resolve delivery problems.
• Updates and offers. If you sign up, we send your email address, signup page and subscription consent to HubSpot to manage your subscription.
• Job applications. When you apply, we receive your name, email address, résumé or CV and application note, plus any portfolio or work samples link or LinkedIn profile you choose to provide.
• Website activity, with your permission. If you accept analytics, HubSpot can record page visits, interactions, session information and a visitor identifier. If you then submit an enquiry, we may associate that activity with your contact record.
• Cookie choices. We keep your selected permissions, the time and source of each decision, random browser and receipt identifiers, and the notice you were shown. These records do not contain your name, email or raw IP address. An enquiry may include references to its associated consent record.
• Technical and security information. Website infrastructure processes connection information such as IP addresses and request details. Our application uses protected hashes for temporary abuse-prevention counters. Restricted administrator access also creates authentication and session records.

You can browse without submitting an enquiry. Fields marked as required are needed to handle a form submission; optional fields can be left blank. Please do not include passwords, payment details or sensitive personal information in your message.

3. How we use information

We use enquiry information to acknowledge your message, understand what you need, respond, prepare proposals and manage our business relationship. We also use limited operational information to keep the website working, prevent misuse, investigate problems and maintain evidence of cookie choices.

We use application information to review your suitability for the role and communicate with you about your application.

When you request updates and offers, we use your email address with your consent to send occasional Superfactor news, thinking and special offers. You can unsubscribe at any time using the link in an email or by contacting us.

When you allow analytics, we use it to understand how visitors use our website and improve its content and experience. Sending an enquiry does not subscribe you to a newsletter or grant permission for analytics. We do not currently use advertising tags on this website.

Where a legal basis is required, we rely on consent for optional analytics; our legitimate interests in responding to business enquiries, maintaining relationships and protecting the website; steps you request before a contract or performance of that contract; and applicable legal obligations. We do not use this website to make solely automated decisions with legal or similarly significant effects on you.

4. Cookies and your choices

Essential storage supports security, remembers your preferences and records your decision. Optional analytics remains off until you choose Accept all and that choice has been saved. Essential only allows you to browse and send an enquiry without optional analytics.

You can change your choice using Manage Cookies in the footer. Withdrawing permission stops future analytics in your browser; it does not recall information already sent or automatically delete previous consent records. For the cookies used, expiry periods and withdrawal process, read our Cookie policy.

Google Tag Manager manages the loading of approved analytics tools after consent. Its presence does not mean Google Analytics or advertising tracking is enabled. A new integration does not automatically expand the purposes you have accepted.

5. Who receives information

Our team and the providers supporting our website and communications receive information needed for their work. These include:

• Amazon Web Services: website hosting, enquiry and consent storage, and email delivery through Amazon SES.
• HubSpot: contact records, enquiry details and submission history, newsletter subscriptions and consent, plus website analytics when you have permitted it.
• Google Tag Manager: delivery and management of consented website tags.
• Business email and professional support providers: correspondence and assistance with operating our business, where needed.

When you send an enquiry, its details are shared with our team and saved in our customer relationship system so we can follow up. This operational handling works even if you choose Essential only.

Job applications and résumé attachments are delivered through Amazon SES to careers@superfactor.com for our recruiting team. The application form does not add your application to our sales CRM.

We may also disclose relevant information when required by law, to respond to a lawful request, protect people or our legal rights, or as part of a business transfer subject to applicable privacy requirements.

6. How long we keep information

• Cookie preferences: six months (180 days) from each saved choice. After expiry, optional analytics requires a new choice.
• Consent audit records: three years (1,095 days) from each recorded decision. A later choice does not restart the retention period for an earlier one.
• Website enquiry records: the copy used by our website to deliver and recover your submission expires after 90 days. This does not automatically delete separate copies in HubSpot or our email accounts.
• Job application delivery records: the website keeps a delivery reference and protected submission fingerprint for 90 days to help prevent duplicate delivery. It does not store the application content or résumé in the website database. Applications remain in our recruiting email account under the correspondence retention described below.
• Correspondence and CRM records: these may be retained beyond 90 days. The period depends on whether your enquiry remains active, our ongoing relationship, relevant contractual or legal obligations, and any need to resolve a dispute. You can ask us about or request deletion of these records.
• Previously collected analytics: cookie or preference expiry does not automatically delete website activity already associated with a HubSpot contact. You can include this activity in an access or deletion request.
• Operational records: application abuse-prevention counters expire after 24 hours, delivery-failure metadata is retained for up to 14 days, and enquiry-processing diagnostic logs for 30 days. Administrative sessions last up to eight hours; unused sign-in links expire after 24 hours.

Automatic database deletion runs in the background, so expiry and physical deletion may not happen at the same moment. Recovery backups of our website databases may retain earlier copies for up to 35 days after active deletion. Withdrawal of analytics permission does not extend or restart these retention periods.

7. Storage and security

Our website enquiry and consent databases are hosted on Amazon Web Services in the United States. Service providers may also process information in other countries, where privacy laws can differ from those where you live. Contact us for information about the locations and transfer arrangements relevant to your data.

We use HTTPS, encrypted database storage and restricted administrative access to protect website records. No online service or storage system can be guaranteed completely secure.

8. Your privacy rights

Depending on applicable law, you may be entitled to access or receive a copy of your information, correct it, request deletion, restrict its use, or receive it in a portable format. You can withdraw consent at any time without changing the lawfulness of earlier consent-based processing.

Right to object: where applicable, you may object to processing based on legitimate interests, including direct marketing.

Send requests to hello@superfactor.com. We may need to verify your identity. We will respond within the applicable legal timeframe and explain any limits or reason we cannot fulfil a request. You may also complain to your local data-protection authority or appeal a decision where that right applies.

9. Other websites and children

Links to other websites are provided for convenience. Their operators are responsible for their own information practices; review their privacy notices when you leave our site.

Our website is intended for a business audience and is not directed to children. If you believe a child has provided personal information through it, contact us so we can review and address it.

10. Changes to this policy

We may update this policy as our website, services or data practices change. The date above identifies the current version. Where a change requires notice or a fresh consent choice, we will provide it. This policy does not grant permission for future optional tracking.

11. Contact us

For questions about this policy or your information, contact: