Privacy Policy

These policies govern the collection, use, and protection of information on our website. By visiting or using this website, you agree to the terms set out below. All content, materials, trademarks, and intellectual property on this website are owned by us and may not be reproduced, distributed, or used without our express written consent.

1.  Privacy Policy

Last updated: June 15, 2026

1.1  Who We Are

This website is operated by Cambridge Research & Development, Inc (referred to throughout as “we,” “us,” or “our”). We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about this policy, or your personal data, please contact us using the information provided in the Contact section below.

1.2  What Information We Collect

We collect only the minimum personal information necessary to operate this website. Specifically, we may collect the following:

  • Contact Form Submissions: When you voluntarily complete and submit our contact form, we collect the information you provide, which may include your name, email address, and the content of your message.
  • Automatically Collected Data: We automatically collect certain technical information when you visit our website, including your IP address, browser type and version, operating system, referring URLs, pages visited, and the date and time of your visit. This data is collected via Google Analytics (see Section 1.5).

We do not collect any financial information, government identification numbers, or sensitive personal data. We do not offer file uploads or downloads, and no user-generated files or documents are transmitted through this website.

1.3  How We Use Your Information

We use the information we collect for the following purposes:

  • To respond to your enquiries submitted through the contact form.
  • To improve and maintain our website by understanding how visitors use it.
  • To monitor website performance, detect errors, and maintain security.
  • To comply with legal obligations.

We do not sell, rent, trade, or otherwise share your personal information with third parties for their own marketing purposes.

1.4  Legal Basis for Processing (Where Applicable)

Where applicable under data protection law, we process your personal data on the following legal bases:

  • Legitimate Interests: We have a legitimate interest in understanding how our website is used in order to improve it and to ensure its security.
  • Consent: Where you voluntarily submit information through our contact form, you consent to us processing that information to respond to you.
  • Legal Obligation: We may process data where required to do so by law.
1.5  Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC (“Google”), to help us understand how our website is used. Google Analytics uses cookies (small text files placed on your device) to collect standard internet log information and visitor behaviour information anonymously.

The information generated by Google Analytics cookies about your use of this website is transmitted to and stored by Google on servers in the United States. Google uses this information to compile reports on website activity and to provide other services related to website and internet usage.

Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google.

You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on, available at: https://tools.google.com/dlpage/gaoptout

1.6  Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.

  • Contact form submissions are retained for a reasonable period to allow us to respond and maintain records of communications, after which they are securely deleted.
  • Google Analytics data is retained in accordance with Google’s own data retention policies.
1.7  Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is entirely secure, and we cannot guarantee absolute security.

1.8  Your Rights

Depending on your location, you may have certain rights in relation to your personal data. These may include the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate or incomplete data.
  • Request deletion of your personal data.
  • Object to or restrict the processing of your data.
  • Lodge a complaint with a relevant data protection authority.

To exercise any of these rights, please contact us. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

1.9  Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party sites you visit.

1.10  Contact

If you have questions about this Privacy Policy or wish to exercise any of your rights, please contact us through the contact form on this website.

2.  Cookie Policy

Last updated: June 15, 2026

2.1  What Are Cookies?

Cookies are small text files that are placed on your device (computer, tablet, or mobile phone) when you visit a website. They are widely used to make websites work more efficiently and to provide information to website owners.

2.2  How We Use Cookies

This website uses a limited set of cookies. We do not use cookies for advertising, profiling, or to track you across other websites. The cookies used on this website fall into the following categories:

2.3  Types of Cookies We Use

Strictly Necessary Cookies

These cookies are essential for the website to function properly. They enable basic features such as page navigation and access to secure areas. The website cannot function properly without these cookies, and they cannot be disabled.

Analytics Cookies (Google Analytics)

We use Google Analytics cookies to collect anonymized statistical information about how visitors use our website. This helps us understand traffic patterns, popular content, and areas for improvement. These cookies do not identify you personally.

The primary cookies set by Google Analytics include:

  • _ga — Used to distinguish users. Expires after 2 years.
  • _ga_<container-id> — Used to persist session state. Expires after 2 years.
  • _gid — Used to distinguish users. Expires after 24 hours.
  • _gat — Used to throttle request rates. Expires after 1 minute.

These cookies collect information such as: the number of visitors to the website, the pages visited, how long visitors spend on the website, and from which websites visitors arrive.

2.4  Cookies We Do Not Use

We do not use:

  • Advertising or targeting cookies
  • Social media tracking cookies
  • Cookies that track your activity across other websites
  • Cookies that store sensitive personal information
2.5  Managing Cookies

You can control and manage cookies in several ways:

  • Browser Settings: Most web browsers allow you to view, block, or delete cookies through their settings or preferences menu. Refer to your browser’s help documentation for instructions.
  • Google Analytics Opt-Out: You can prevent Google Analytics from collecting data about your visit by installing the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout.

Please be aware that disabling certain cookies may affect the functionality of this website.

2.6  Cookie Consent

By continuing to use this website, you consent to our use of cookies as described in this Cookie Policy. Where required by law, we will seek your explicit consent before placing non-essential cookies on your device.

2.7  Changes to This Cookie Policy

We may update this Cookie Policy from time to time to reflect changes in technology, law, or our practices. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

3.  GDPR Compliance Policy

Last updated: June 15, 2026

3.1  Overview

This section describes how we comply with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and, where applicable, the UK GDPR as retained in UK law. We are committed to ensuring that any personal data we process is handled lawfully, transparently, and with respect for individuals’ rights.

3.2  Data Controller

We act as the data controller for personal data collected through this website. As data controller, we determine the purposes and means by which personal data is processed. If you wish to contact us regarding your data or this policy, please use the contact form on this website.

3.3  Personal Data We Process

As described in Section 1.2 of this document, we process only minimal personal data, specifically:

  • Information voluntarily submitted via the website contact form (e.g. name, email address, message content).
  • Technical data collected automatically via Google Analytics (e.g. anonymized IP address, browser type, pages visited).

We do not process special categories of personal data (such as health data, racial or ethnic origin, religious beliefs, or biometric data).

3.4  Lawful Bases for Processing

We process personal data only where we have a valid lawful basis under Article 6 of the GDPR. The lawful bases we rely on are:

  • Article 6(1)(a) — Consent: Processing contact form submissions, where you have freely given your consent by submitting the form.
  • Article 6(1)(f) — Legitimate Interests: Processing anonymized analytics data to understand and improve website performance, where our interests are not overridden by your rights and freedoms.
  • Article 6(1)(c) — Legal Obligation: Processing data where we are required to do so under applicable law.
3.5  Data Subject Rights

Under the GDPR, individuals in the European Economic Area (EEA) and, where applicable, the United Kingdom have the following rights:

  • Right of Access (Article 15): You have the right to request a copy of the personal data we hold about you.
  • Right to Rectification (Article 16): You have the right to request that inaccurate or incomplete personal data be corrected.
  • Right to Erasure (Article 17): You have the right to request deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent.
  • Right to Restriction of Processing (Article 18): You have the right to request that we restrict processing of your personal data in certain circumstances.
  • Right to Data Portability (Article 20): Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
  • Right to Object (Article 21): You have the right to object to processing carried out on the basis of legitimate interests. Where you object, we will cease processing unless we can demonstrate compelling legitimate grounds which override your interests.
  • Right to Withdraw Consent (Article 7(3)): Where processing is based on consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact us via the contact form on this website. We will respond within one calendar month, as required under the GDPR. We will not charge a fee for handling your request unless it is manifestly unfounded or excessive.

3.6  International Data Transfers

Google Analytics may transfer data to servers located in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, which provides a lawful mechanism for data transfers from the EEA to the United States. You can review Google’s privacy and data handling practices at https://policies.google.com/privacy.

3.7  Data Retention

We retain personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by law. Contact form submissions are retained for a reasonable period to allow us to respond and maintain records, after which data is securely deleted. For details on Google Analytics data retention, please refer to Google’s own privacy policy.

3.8  Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, in accordance with Article 32 of the GDPR. These measures are designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

3.9  Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, as required under Article 33 of the GDPR. Where the breach is likely to result in a high risk to affected individuals, we will also notify those individuals without undue delay.

3.10  Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with applicable data protection law, you have the right to lodge a complaint with your local supervisory authority. In the European Union, the relevant authority is the data protection authority in your country of residence. In the United Kingdom, the relevant authority is the Information Commissioner’s Office (ICO), which can be contacted at https://ico.org.uk.

3.11  Intellectual Property Notice

All content on this website — including but not limited to text, graphics, logos, design elements, and any other materials — is owned by us and protected under applicable copyright, trademark, and intellectual property laws. This content may not be reproduced, distributed, published, transmitted, modified, or otherwise used without our prior express written consent. Unauthorized use of any content on this website may give rise to a claim for damages and may constitute a criminal offence.

3.12  Policy Updates

We may update this GDPR Compliance Policy periodically to reflect changes in law, technology, or our data processing activities. Material changes will be notified via a prominent notice on this website. The effective date at the top of this policy will always reflect the date of the most recent revision. We encourage you to review this policy periodically.