Privacy Notice

PhoScale ("PhoScale", "we", "us") respects your privacy. This Privacy Notice explains what personal information we collect through the PhoScale websites (including phoscale.com and its subdomains, the "Sites"), how we use and share it, and the choices and rights you have. By using the Sites you acknowledge the practices described here.

1. What personal information do we collect?

We only collect what we need to run a B2B supply business. Depending on how you interact with the Sites, this may include:

• Contact and company information you submit through our web forms — for example your name, work email, phone number, company, country and message when you request a quote (RFQ), contact us, ask a compatibility question, apply to the channel partner program, request samples at an event, or apply for a job (including a LinkedIn or resume link you choose to share).
• Website usage and log data — IP address, browser type, pages visited and similar technical log information collected automatically by our servers and our infrastructure providers for security and operations. For form abuse prevention we store a truncated, one-way hash of your IP address rather than the raw address.
• Cookies and similar technologies — see section 3 below.

We do not operate customer accounts on the Sites, do not process online payments here, and do not ask for government identifiers or other sensitive personal information.

2. How do we use personal information?

• To respond to your inquiries, prepare quotations, and follow up on RFQs and sample requests;
• To evaluate job applications and communicate with candidates;
• To operate our channel partner program;
• To send business communications relevant to your inquiry — for example pricing, lead times and product updates. You can opt out of non-essential emails at any time;
• To operate, secure and improve the Sites, including preventing spam and abuse;
• To comply with applicable laws, and to protect our rights and those of our customers;
• In connection with a corporate transaction (such as a merger or acquisition), where permitted by law.

3. Cookies and similar technologies

The Sites use a small number of cookies, in two categories:

• Strictly necessary cookies — required for the Sites to function and always active: your session cookie (SULUSESSID, which also keeps your RFQ list), CSRF tokens that protect our forms, and cookies set by Cloudflare for security and bot protection (including Cloudflare Turnstile on our forms). These cannot be switched off through our settings; you may block them in your browser, but parts of the Sites will then not work.
• Advertising / sale-or-sharing related cookies — PhoScale does not currently use advertising, analytics-for-advertising or cross-site tracking cookies. Should we introduce any in the future, the "Opt Out of Sale of Sharing/Targeted Advertising" preference in our cookie settings will apply to them. You can open the settings at any time from the cookie banner's "Customize Settings" button.

4. Do we share personal information with third parties?

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share personal information only with:

• Service providers that host and protect the Sites and our data — currently Amazon Web Services (hosting) and Cloudflare (content delivery, security and bot protection) — under terms that limit their use of the data to providing services to us;
• Our affiliates and team members who handle sales, supply-chain and recruiting, strictly for the purposes described in section 2;
• Authorities or other parties where required by law, for example to comply with a legal obligation or to protect rights, safety and property.

5. How do we secure and retain personal information?

We use administrative, technical and physical safeguards appropriate to the nature of the data, including encryption in transit (HTTPS/TLS), access controls, and abuse protections on our forms. We retain personal information only as long as needed for the purposes above — typically the life of the business relationship or inquiry plus any period required by law — and then delete or anonymize it.

6. International transfers

The Sites are hosted in the United States. Because our supply-chain and support teams operate internationally (including in Asia), your inquiry details may be processed outside your home country. Where required, we use appropriate safeguards so that personal information remains protected to the standard described in this notice.

7. Children

The Sites are business-to-business services and are not directed to children under 16. We do not knowingly collect personal information from children.

8. Your privacy choices and rights

Depending on where you live (for example under the California Consumer Privacy Act, CCPA/CPRA, or the EU/UK GDPR), you may have the right to:

• Access / portability — request a copy of the personal information we hold about you;
• Correction — ask us to correct inaccurate information;
• Deletion — ask us to delete your information, subject to legal exceptions;
• Opt out of "sale" or "sharing" / targeted advertising — use the "Opt Out of Sale of Sharing/Targeted Advertising" toggle in our cookie settings ("Customize Settings" in the cookie banner), or contact us using the details below;
• Non-discrimination — we will not discriminate against you for exercising these rights.

To exercise any of these rights, email us at [email protected]. We may need to verify your identity (for example by matching the email address you used with us) before acting on a request, and we will respond within the timeframe required by applicable law.

9. Changes to this notice

We may update this Privacy Notice from time to time. Material changes will be posted on this page with an updated "Last updated" date, and where required by law we will provide additional notice.

10. How to contact us

Questions about this notice or our privacy practices:

• Email: [email protected]
• Recruiting-related privacy questions: [email protected]