Last amendment. This Privacy Policy was last amended on 7th of July, 2025.  

Your privacy is important to us. Please read this Privacy Policy carefully because it contains important information about how handle your personal data.

What this Policy Covers

1. What personal data do we collect?
2. For what purposes do we use personal data?
3. Non-personal data
4. Your consent
5. Marketing communication and advertisements
6. Informational notices
7. Children’s privacy
8. Protection of personal data
9. Retention of personal data
10. Disclosure of personal data to third parties
11. Transfer of personal data outside the EEA
12. Your rights to manage your personal data
13. Third-party websites and applications
14. Cookies
15. Amendments
16. Contact 

1. GENERAL INFORMATION 

In this privacy and cookie policy (the “Privacy Policy”), we explain in detail the policies and procedures governing the collection and processing of individual users’ (“you” and “your”) personal data through the platform ACR (“ACR”), accessible at the following URL: 

The website https://acrdatasolutions.com (the “Website”); 

Applicable laws. The processing of your personal data is conducted in accordance with the applicable data protection laws, including Canadian Personal Information Protection and Electronic Documents Act (PIPEDA) and E.U. General Data Protection Regulation (GDPR). 

Definitions

In this Privacy Policy, you will encounter recurrent terms. We would like to explain to you what such terms mean:

• “Consent” means your freely given, specific, informed and unambiguous agreement to the processing of your personal data; 
• “Data controller” means the entity that determines the purposes and means of the processing of your personal data; 
• “Data processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the data controller; 
• “Personal data” means any information relating to a natural person who can be identified, directly or indirectly, by using such information (e.g., your name, address, email, phone number, and IP address); 
• “Processing” means the use of personal data in any manner, including, but not limited to, collection, storage, erasure, transfer, and disclosure of personal data. 

Responsible entity (data controller). The company that is responsible for collection and processing of your personal data through ACR is ACR Systems Inc. having a registered address at 201-15110-54A Ave. Surrey, BC Canada V3S 5X7 (the “Company”, “we”, “us”, and “our”). 

About ACR. ACR Systems is a Canadian-based technology company specializing in the design and manufacture of industrial-grade data loggers and monitoring solutions. With a legacy of innovation dating back to 1985, we serve a broad range of sectors including environmental monitoring, energy management, building automation, and scientific research. 

Term and termination. This Privacy Policy enters into force on the effective date indicated at the top of the Privacy Policy and remains valid until terminated or updated by us. 

2. WHAT PERSONAL DATA DO WE COLLECT?  

We comply with data minimization principles and we collect only a minimal amount of personal data that is necessary for ensuring your use of the ACR Systems website and ACR's products and services. The situations in which we collect your personal data and the types of the collected personal data are described below. 

Personal data we collect through the Website

• When you visit the Website, we collect your IP address.
• When you submit a contact form available on the Website, we collect your:
  • First and last names;
  • Company name;
  • Email address;
  • Phone number;
  • Country; and
  • Any other information that you decide to provide us in your message.sp;

E-commerce Payments. All online payments made through our website are securely processed by Shopify, a third-party e-commerce platform. ACR Systems Inc. does not store or have access to your credit card or payment information. Please refer to Shopify’s Privacy Policy for more details on how they manage your payment data. 

Sensitive data. We DO NOT collect, under any circumstances, any sensitive data from you, such as your health information, opinion about your religious and political beliefs, racial origins, membership of a professional or trade association, or information about your sexual orientation. 

Failure to provide personal data. If you fail to provide us with the personal data when requested, we may not be able to perform the requested operation and you may not be able to use the full functionality of ACR or receive our response.  

3. FOR WHAT PURPOSES DO WE USE PERSONAL DATA?  

We respect strict data protection principles. We collect and process your personal data only for specified and legitimate purposes, as outlined below.

Information You Provide

Personal data you submit through a contact form or by email will be used to:

• Respond to your inquiries
• Provide the requested information

Automatically Collected Information

We may process your IP address to:

• Conduct user analytics and improve our business activities
• Help diagnose technical issues and ensure the security and functionality of our website and services
• Conduct research on client demographics, interests, and behaviors

Lawful Basis for Processing

We process personal data based on:

• Our legitimate business interests, such as:
  • Improving website performance
  • Responding to customer inquiries
  • Understanding user behavior to grow and promote our business
• Your consent, where required (e.g., for optional marketing communications)

Repurposing of Personal Data

If we intend to use your personal data for purposes not outlined in this Privacy Policy, we will:

• Notify you in advance
• Obtain your consent, if required by law

4. NON-PERSONAL DATA 

When you use the Website, we collect certain technical non-personal data about your use of the Website. Such non-personal data does not allow us to identify you in any manner. We collect the following non-personal data: 

1. The type of your device;
2. Operating systems used by you;
3. Your browsing patterns;
4. URL addresses of websites clicked to and from the Website;
5. Log files; and
6. Your other online behavior data. 

Purposes of non-personal data. We collect non-personal data for online analytics purposes only, such as:

1. To analyze what kind of users are interested in and use the Website;
2. To identify the channels through which the Website is accessed and used;
3. To examine the relevance, popularity, and engagement rate with regard to the content of the Website; and
4. To personalize the Website for your specific needs. 

Aggregated data. In case your non-personal data is combined with certain elements of your personal data in a way that allows us to identify you, we will treat such aggregated data as personal data. 

5. YOUR CONSENT 

Your use of ACR is subject to this Privacy Policy. Before you register a user account or send us a message through a contact form, we will ask you to review this Privacy Policy. Please make sure that you have actually read the Privacy Policy, you fully understand it, and you agree to the processing of your personal data through ACR. 

In some cases (where required by the applicable law), we will seek to obtain your consent for the processing of your personal data for other purposes. For example, we may seek your prior consent for the following purposes:

1. If we intend to collect other types of personal data that are not mentioned in this Privacy Policy;
2. If we intend to use your personal data for the purposes that are not indicated in this Privacy Policy;
3. If we would like to disclose or transfer your personal data to third parties that are not indicated in this Privacy Policy; or
4. If we significantly amend this Privacy Policy. 

6. MARKETING COMMUNICATION AND ADVERTISEMENTS 

Marketing messages. We will not send you direct marketing messages, such as newsletters, brochures, promotions and advertisements, or contact you by any other means with the purpose to offer you our services, unless we receive your express (“opt-in”) consent to receive such marketing messages. You can opt-out from receiving such marketing messages at any time free of charge by clicking on the “unsubscribe” link contained in any of the messages sent to you. 

Interest-based advertisements. We may place targeted interest-based advertisements on the Website that are tailored to your use of the Website. You can control how such advertisements are shown to you or opt-out from such targeted advertisements by consulting the guide powered by the Digital Advertising Alliance available at https://youradchoices.com. 

7. INFORMATIONAL NOTICES 

From time to time, we may send you informational notices. We send such notices on an “if-needed” basis and they DO NOT fall within the scope of direct marketing communication that requires your prior consent (as described in Section 6). Such informational notices include: 

• Information about ACR and your user account; 
• Updates about your orders; 
• Information about our new products and services that are closely related to the products and services used by you; and 
• Informational notices regarding updates of ACR, your privacy and security, and other important matters. 

8. CHILDREN’S PRIVACY 

ACR is not marketed and should not be accessed by persons under the age of 18 and we do not knowingly collect children’s personal data. If a person under the age of 18 has provided us with personal data without obtaining parental or guardian consent in advance, the parent or guardian may contact us at privacy@acrdatasolutions.com and request us to destroy the personal data. We will immediately delete children’s personal data from our systems. 

9. PROTECTION OF PERSONAL DATA 

Security measures. We put our best efforts to keep your personal data safe. We implement organizational and technical information security measures to protect your personal data, such as anonymization, secured networks, and limited access to your personal data by our staff. 

Your responsibility for Security: To help protect your personal data and maintain the integrity of your interactions with ACR Systems, we ask that you:

• Keep your login credentials and any access information secure and confidential
• Avoid sharing your account with others unless explicitly authorized
• Use our website, products, and services only over a secure and trusted network
• Notify us promptly if you suspect any unauthorized use of your account

These practices help ensure the safe use of our website and services, and support the overall security of our platform and customer data.

Security breaches. Although we put our best efforts to protect your personal data, we cannot be liable for any unlawful destruction, loss, use, copying, modification, leakage, and falsification of your personal data caused by circumstances that are beyond our reasonable control. In case a personal data breach occurs, we will inform the local data protection authority without undue delay and immediately take reasonable measures to mitigate the breach, as required by the applicable law. 

10. RETENTION OF PERSONAL DATA 

Retention period. We will store your personal data in our systems only for as long as such personal data is required for the purposes described in Section 3 of this Privacy Policy. After your personal data is no longer necessary for such purposes and there is no other legal basis for storing it, we will immediately delete your personal data from our systems. 

Storage as required by law. Please note that, in some cases, we may be obliged by law to store your personal data for a certain period of time (e.g., for maintaining our accountancy records). In such cases, we will store your personal data for the time period stipulated by the applicable law and delete the personal data as soon as the required retention period expires. 

11. DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES 

Do we disclose personal data? In some circumstances, we disclose your personal data to third party service providers (data processors). For example, we may share your personal and non-personal data with entities that provide certain services to us, such as web analytics, data processing, advertising, e-mail distribution, and developing services. 

When do we disclose personal data? The disclosure and sharing of your personal data is limited to the situations when the personal data is required for the following purposes: 

• Ensuring the operation of ACR; 
• Pursuing our legitimate business interests; 
• Carrying out our contractual obligations; 
• Law enforcement purposes; or 
• If you provide your prior explicit consent to the disclosure. 

List of data processors. The data processors that we cooperate with include: 

• Our third-party developers; 
• Our shipping partners; 
• Our Ecommerce hosting provider Shopify.com 
• Our CRM partner HubSpot.com 
• Our web analytics providers Google Analytics and SEMRush.com 

The data processors listed above will access your personal data as a part of their partnership with us and only if they agree to ensure (by way of a data processing agreement) an adequate level of protection of personal data that is consistent with this Privacy Policy and the applicable data protection laws.

Transfer of personal data outside the EEA. The Company and some of the third parties listed in Section 11 of this Privacy Policy are located outside the European Economic Area (EEA) and, if you are a resident of the EEA, we will transfer your personal data from the EEA to jurisdictions outside the EEA. In case it is necessary to make such a transfer, we will make sure that the jurisdiction in which the recipient third party is located ensures an adequate level of protection of your personal data or we conclude an agreement with the respective third party that ensures such protection. 

12. YOUR RIGHTS TO MANAGE YOUR PERSONAL DATA 

What rights can you exercise? You have the right to manage the personal data that we collect from you. We provide you with a possibility to request us to: 

• Get a copy of your personal data that we store; 
• Rectify inaccurate personal data; 
• Move your personal data to another processor; 
• Delete your personal data from our systems; 
• Object and restrict processing of your personal data; 
• Withdraw your consent; or 
• Process your complaint. 

How to exercise your rights? If you would like to exercise your rights, please contact us by email at privacy@acrdatasolutions.com and explain in detail your request. In order verify the legitimacy of your request, we may ask you to provide us with an identifying piece of information, so that we would be able to identify you in our system. We will answer your request within a reasonable timeframe but no later than two weeks. 

How to launch a complaint? If you would like to launch a complaint about the way in which your personal data is handled by us, we kindly ask you to contact us first and express your concerns. After you contact us, we will investigate your complaint and provide you with our response as soon as possible but no later than two weeks. If you are not satisfied with the outcome of your complaint, you have the right to lodge a complaint with your local data protection authority.

13. THIRD-PARTY WEBSITES AND APPLICATIONS;

ACR may contain links to the websites and applications owned and operated by third parties. Please note that this Privacy Policy does not apply to any of such third-party websites and applications and we are not responsible for the privacy and security practices of those third parties. Please familiarize with the privacy practices of such third-party websites and applications before using them.

14. COOKIES

The Website uses cookies. In this section, you can find information about the types of cookies that we use and the purposes for which the cookies are used by us. If you do not agree with our use of cookies, please disable your cookies after consulting the Section “How to disable cookies?”. Please note that the full functionality of the Website is available only if the cookies are enabled. 

What is a cookie? A cookie is a small piece of data, typically consisting of letters and numbers. When you visit a website or use an application, the website or application may send a cookie to your browser. Subsequently, the browser may store the cookie on your computer or mobile device. Cookies are designed to allow the recognition of user’s device and collection of certain information about the use of a website or application. Thus, over time, cookies allow the website or application to “remember” your actions or preferences. There are two types of cookies, namely, (i) persistent cookies and (ii) session cookies. Persistent cookies remain valid until their expiration date, unless deleted by the user before that date. Session cookies will be stored on a web browser and will remain valid until the moment when the browser is closed. Cookies may also be (i) first-party cookies set by us and (ii) third-party cookies placed by third party operators (e.g., social media providers).

What cookies do we use? We use cookies placed by Google Analytics and SEMRush, among others. These cookies help us track website usage patterns and user interactions in a way that does not identify individual users. Google Analytics cookies are anonymous first-party cookies. Such cookies include cookies entitled “__gat”, “__gid”, and “__ga”. Please note that the use of Google Analytics cookies is anonymous and does not allow us to identify you in any manner.

For what purposes do we use cookies? We will not use cookies for purposes, which are not mentioned in this Privacy Policy. We use cookies for the following purposes:

• To identify you as a unique user when you use the Website;
• To identify your unique sessions;
• To generate information and reports about your use of the Website; and
• To analyze and improve our business activities.

How to disable cookies? If you would like to refuse our use of cookies, you can do it at any time by declining cookies in your browser or device (please check your browser’s or device’s “help” functionality for more information) or visiting https://www.aboutcookies.org for further information. Please be aware that some parts of the Website may not function properly without cookies.

Our web analytics providers include Google Analytics and SEMRush.com, both of which help us understand traffic patterns, user engagement, and identify areas for improvement on our website. These services may use cookies to collect anonymized usage data.

Google Analytics. We use Google Analytics, the service provided by Google, Inc. (“Google”) to analyze your use of the Website. Google Analytics generates statistical and other information by means of cookies and we use its services to create reports about the use of the Website. The information generated by cookies about your use of the Website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Please note that your IP address will be anonymized and Google will not combine your IP address with other information Google holds about you. Thus, Google will not be able to identify you. In certain cases (e.g., when required by law or when third parties conduct services on behalf of Google), Google may transfer the information to third parties. For more information about Google Analytics’ privacy practices, please visit https://support.google.com/analytics/answer/6004245.

Opting-out from Google Analytics. If you would like to opt out from Google Analytics, you can do so by installing a Google Analytics opt-out browser add-on available at https://tools.google.com/dlpage/gaoptout?hl=en or adjusting your browser settings to refuse cookies. For more information on opting-out from advertising features on mobile devices, please visit https://www.networkadvertising.org/mobile-choice.

15. AMENDMENTS

The Privacy Policy may be changed from time to time. The amended version of the Privacy Policy will be posted on this page and, if we have your contact details, we will send you a notice about all the changes implemented by us. For significant changes in the Privacy Policy, or where required by the applicable law, we may seek your consent.

16. CONTACT

If you have any questions or need any further clarifications regarding the Privacy Policy, please contact us by using the following contact details:

• Company name: ACR Systems Inc.
• Address: 201-15110-54A Ave. Surrey, BC Canada V3S 5X7
• Email address: privacy@acrdatasolutions.com
• Contact form: acrdatasolutions.com/contact