This Privacy Policy explains how ACRIPOINT, LLC handles information when you visit our website, contact our fitting room, or engage us for computer integrated systems design services.
Developer and operator: AcriPoint, the design team of ACRIPOINT, LLC, 100 Ottawa Ave SW, Grand Rapids, 49503-5087, United States (US).
1. Introduction
ACRIPOINT, LLC respects the privacy of every person who visits our website or works with our team. This Privacy Policy describes the information we collect, the reasons we collect it, the ways we use and share it, and the choices available to you. It applies to our website at acripoint.mom and to the consulting and integration services we provide. AcriPoint is the internal design team that operates under ACRIPOINT, LLC, and that team is responsible for the practices described here. We have written this policy in plain language on purpose. A privacy notice should be readable by the person it protects, not only by a lawyer.
We are a computer integrated systems design firm based in Grand Rapids, Michigan. We build vision platforms, imaging pipelines and clinical integrations, and we handle information with the same care that we bring to calibration. When we ask for information, we try to ask for the least amount necessary and to explain what we will do with it. When you send us a message through our contact form, you are trusting us with your details, and we treat that trust as a technical requirement rather than a courtesy.
2. Scope of This Policy
This policy covers information collected through our website, through email and telephone contact with our team, and through the ordinary course of delivering services to clients. It does not cover information that you provide to a third party service that we do not control, even if we helped to integrate that service into a client platform. It also does not cover the internal practices of a client organization, because each client remains responsible for the information it holds in its own systems.
Where we act as a service provider or processor for a client, the client is the controller of the information and our handling is governed by the agreement between us. In those situations, a person who wishes to exercise a privacy right should contact the client organization first. We support our clients in responding to those requests, but we cannot act unilaterally on data that belongs to their systems.
3. Information We Collect
We collect information in a few defined categories. The first category is contact information, such as the name, email address, telephone number and organization you provide when you send an inquiry. The second category is message content, meaning the subject and body of what you write to us, together with any attachments you choose to include. The third category is technical information generated by your visit, such as the type of browser and device you use, the pages you view and the approximate region from which you connect. The fourth category is business information exchanged during an engagement, which may include project requirements, system documentation and correspondence.
We do not ask for more than we need. We do not request financial account numbers through this website. We do not request government identification numbers through this website. If a project later requires access to sensitive material, we handle that access under a separate written agreement with appropriate safeguards, and we document the scope of that access before it begins. For most website visitors, the total information we hold is limited to a message and the address it came from.
4. Sources of Information
Most of the information we hold comes directly from you. You give it to us when you complete the contact form, send an email, place a telephone call, or exchange documents during a project. A second source is automatic collection by our web server, which records basic request data such as the time of a visit and the page requested for the purpose of operating the site and detecting abuse. A third source is our clients, who provide the information needed to deliver an engagement, such as system documentation and the names of people who will participate in the work.
We do not purchase personal information from data brokers. We do not build advertising profiles of visitors. We do not import contact lists from unrelated sources into our systems. If we ever wish to use a new source of information, we will update this policy before doing so and we will limit that use to the purpose we disclose.
5. How We Use Information
We use information to respond to inquiries, to prepare proposals, to deliver and support the services we provide, to maintain the security and reliability of our website, to comply with legal obligations, and to improve how we work. When you contact us about a project, we use your details to answer you and to keep a record of the conversation so that later discussions start from a shared understanding. When we deliver an engagement, we use the information a client provides to perform that engagement and to produce the documentation that goes with it.
We may also use aggregated or de-identified information to understand which pages are useful and which parts of our site need improvement. Aggregated information is combined across many visitors and does not identify any single person. We do not use personal information to make automated decisions that produce legal effects. We do not sell personal information, and we do not use it to train advertising models.
6. Lawful Basis for Processing
Where the law requires a lawful basis for processing, we rely on several. We process information to perform a contract when you engage us, and to take steps at your request before a contract is formed. We rely on our legitimate interests when we operate and secure our website, respond to business inquiries and improve our services, provided those interests are not outweighed by your rights. We rely on consent where we ask for it, such as when you choose to receive occasional updates, and you may withdraw that consent at any time. We also process information to comply with legal and regulatory obligations that apply to our business.
When we rely on legitimate interests, we consider the nature of the information, the expectation of the person concerned and the safeguards in place. We keep the assessment proportionate to the risk. If you object to processing based on legitimate interests, you may contact us and we will review the matter, unless we have a compelling reason that the law permits us to continue.
9. Service Providers
Like most modern businesses, we depend on a set of providers to operate. These include a web hosting provider that serves our pages, an email provider that carries our correspondence, and infrastructure providers that support the systems we build for clients. Each provider is chosen with attention to its security posture and its privacy commitments. We review providers before we adopt them and we limit their access to the information they genuinely need.
We require written agreements with our providers that set out confidentiality, security and deletion obligations. Where a provider processes information on our behalf, the agreement describes the subject matter, the duration, the purpose and the categories of information involved. We do not permit a provider to use our information for its own marketing, and we do not permit a provider to combine our information with information from other customers.
10. Data Retention
We keep information only for as long as we need it for the purposes described in this policy, and for as long as the law requires. Inquiry messages that do not lead to an engagement are generally retained for a limited period and then removed. Project records are retained for the duration of the relationship and for a defined period afterward, so that we can honor warranty, support and legal obligations. Security logs are retained for a shorter period, long enough to investigate incidents and no longer than necessary.
When information reaches the end of its retention period, we delete it or render it unreadable in a secure manner. Where information is held in backups, it is removed on the normal backup rotation cycle, and access to those backups is restricted to the small number of personnel who maintain them. If we cannot delete information because a legal hold applies, we isolate it and restrict its use until the hold is lifted.
11. Security Measures
We protect information with administrative, technical and physical safeguards. On the technical side, we use encryption in transit for our website, access controls that follow the principle of least privilege, logging that records administrative activity, and regular patching of the software we rely on. On the administrative side, we limit access to personnel who need it for their work, we require confidentiality commitments, and we review our practices as the systems we operate change.
No method of transmission or storage is perfectly secure, and we cannot promise absolute security. What we can promise is that we treat security as a continuing process rather than a single event. We monitor for unusual activity, we investigate alerts, and we maintain a written incident response path with defined owners. If a security incident affects your information, we will notify you and the relevant authorities as required by applicable law, and we will explain what happened in plain language.
12. Your Privacy Rights
Depending on where you live, you may have rights concerning your personal information. These commonly include the right to know what information we hold and how we use it, the right to request a copy, the right to ask for correction, the right to ask for deletion, the right to object to or restrict certain processing, and the right not to be discriminated against for exercising your rights. Some jurisdictions also provide a right to opt out of the sale or sharing of personal information, and we honor that right as a matter of principle even where the law does not require it, because we do not sell or share personal information for advertising anyway.
To exercise a right, contact us using the details in the contact section below. We will verify your request using information we already hold, so that we do not disclose information to the wrong person. We will respond within the period the applicable law allows. If we cannot fulfill a request, we will explain why and describe the appeal path available to you.
13. Access and Correction
You may ask us for a copy of the personal information we hold about you and an explanation of how it is used and shared. We will provide the information in a portable format where the law requires it. You may also ask us to correct information that is inaccurate or incomplete. When we correct information, we take reasonable steps to notify any party with whom we shared it, unless that is impossible or would involve disproportionate effort.
Some requests are limited by the rights of others. For example, we cannot disclose information that would reveal personal information about another person, or information that is protected by legal privilege. Where a limitation applies, we will explain it and provide as much of the requested information as we are able to release.
14. Deletion and Portability
You may ask us to delete personal information that we hold, subject to legal exceptions. We will assess the request against retention obligations, security needs and the rights of others, and we will act promptly. When deletion is not possible, we will explain the reason and, where the law permits, restrict the information to the purpose that requires its retention. We will confirm the outcome of a deletion request in writing.
Where a portability right applies, we will provide the information in a structured, commonly used and machine readable format, or transmit it to another organization where that is technically feasible. We will not charge a fee for the first request in a period where the law prohibits a fee, and we will be transparent about any cost for additional requests where a fee is permitted.
15. Privacy for Children
Our website and services are intended for businesses and professionals. We do not knowingly collect personal information from children. If you believe that a child has provided information to us, please contact us and we will take steps to remove it. If we learn that we have collected information from a child without the consent required by law, we will delete it promptly. We do not direct advertising to children and we do not knowingly create profiles of children.
Where one of our client engagements involves a platform that may be used by or on behalf of children, we work within the client compliance program and the applicable law, and we design the system so that the client can meet the obligations that rest with the client as controller. We expect any such engagement to be governed by a written agreement that addresses the special protections the situation demands.
16. International Transfers
We are based in the United States, and the information we collect is generally processed in the United States. If we transfer information across a border, we take steps to ensure that the information receives an adequate level of protection. Those steps may include contractual clauses approved for the purpose, a documented assessment of the transfer, and additional safeguards where the assessment calls for them.
When we rely on a service provider that operates in more than one country, we require the provider to honor the same protections regardless of where the information is handled. If you have questions about where your information is processed, or about the safeguards that apply to a transfer, you may contact us and we will explain the arrangements in current use.
17. California Privacy Notice
For residents of California, this section supplements the rest of the policy. In the preceding twelve months, we may have collected identifiers, contact details, commercial information related to inquiries, internet or network activity connected to a visit, and professional information provided during an engagement. We collect these categories for the business purposes described above, and we disclose them to service providers under contract. We do not sell personal information, and we do not share it for cross context behavioral advertising.
California residents may request to know the categories and specific pieces of information we hold, request deletion, and request correction. You may exercise these rights yourself or through an authorized agent. We will not discriminate against you for making a request. To submit a request, contact us using the details below, and we will verify your identity before acting. If you are an employee or applicant of a client organization, please direct your request to that organization, because we handle that information as a service provider.
18. Clinical and Sensitive Data
Some of our engagements involve clinical platforms, where the sensitivity of information is especially high. In those projects we act under a written agreement and we follow the client security program and the applicable health information rules. We limit access to the smallest set of personnel needed to perform the work, we log that access, and we remove it when the work is complete. We do not use clinical information for any purpose beyond the engagement.
We do not ask visitors to our website to submit health information, and we discourage it. If you need to discuss a clinical matter, contact us first and we will establish a secure channel before any sensitive detail is exchanged. Sending sensitive information through an ordinary web form is a risk that we prefer to remove before it exists.
19. Third Party Websites
Our website may link to websites that we do not operate. This policy does not apply to those websites, and we are not responsible for their privacy practices. We encourage you to read the privacy notice of any site you visit, particularly before you provide personal information. A link from our site does not mean that we endorse the content or the practices of the destination.
If we embed a tool from another provider, such as a map or a scheduling widget, that provider may collect information under its own policy. We try to keep embedded tools to a minimum, and we choose providers that respect privacy. If you would prefer not to interact with an embedded tool, you can reach us by email or telephone instead, using the details below.
20. Changes to This Policy
We may update this policy as our practices change or as the law requires. When we make a material change, we will revise the effective date at the top of this page and, where appropriate, provide additional notice. We encourage you to review this policy periodically so that you know how we protect information. Continued use of our website or services after an update means that you accept the revised policy, to the extent the law allows.
If a change would expand the use of information we already hold, we will explain the change and, where consent is required, request it before the new use begins. We keep earlier versions of this policy available on request so that you can see how our commitments have evolved over time. We believe that a privacy notice should be a living document that reflects real practice, not a static formality.
21. How to Contact Us
If you have questions about this Privacy Policy, or if you wish to exercise a privacy right, please contact us. We welcome the inquiry and we will respond within a reasonable time and within any period the law requires.
Company: ACRIPOINT, LLC
Address: 100 Ottawa Ave SW, Grand Rapids, 49503-5087, United States (US)
Email: hello@acripoint.mom
Phone: +17247902562
If you are not satisfied with our response, you may have the right to lodge a complaint with the privacy regulator in your jurisdiction. We would prefer the chance to resolve the matter with you directly first, and we will cooperate fully with any regulator that reviews a complaint.