This Privacy Policy explains how Farhan Maroufsofian, doing business as Sofitrek ("Sofitrek," "we," "us," or "our") handles personal information when you visit the Sofitrek website, create an account, submit an RFQ, place an order, receive a shipment, request support, open a return, communicate with us, or otherwise use our services.

Sofitrek is based in Mission Viejo, California. Questions and privacy requests may be sent to Farhan Maroufsofian at info@sofitrek.com.

Scope

This policy applies to personal information handled by Sofitrek through the website, customer accounts, checkout, RFQs, quotations, orders, returns, support, contact forms, emails, shipping, fraud prevention, export compliance, and related business records.

It does not control a manufacturer's, carrier's, bank's, payment processor's, freight forwarder's, or other third party's independent privacy practices. Review that party's notice when you use its service.

Personal information we collect

Depending on how you interact with Sofitrek, we may collect:

• identity and contact information, such as name, business name, email, telephone number, and billing, shipping, or return address;
• account and authentication information, such as account identifiers, a protected (hashed) form of your password, passkey or recovery information where supported, session identifiers, settings, and security events;
• commercial and transaction information, such as RFQs, BOMs, quotations, carts, orders, invoices, returns, disputes, shipping, tracking, and purchase history;
• limited payment information received from Stripe, such as transaction identifiers, status, card brand, last four digits, billing result, risk result, refund status, and dispute information;
• communications and support information, including contact, product, quote, order, return, privacy, accessibility, and security messages;
• device, network, and usage information, such as IP address, browser and device information, requested pages, timestamps, referral information, security signals, and diagnostics;
• shipping, customs, fraud, sanctions, and compliance information reasonably needed to fulfill a transaction, protect the service, and comply with law;
• preferences and privacy-choice records, including a locale or display choice and privacy-minimized evidence of a cookie or browser-storage decision.

Sofitrek does not store your readable password. Full payment-card entry is handled by Stripe, and Sofitrek does not store full card numbers or card security codes.

Sources of personal information

We collect information:

• directly from you, your employer, an authorized purchaser, an account user, a consignee, or a representative;
• automatically from your browser, device, and use of the service;
• from payment processors, carriers, address services, email providers, fraud tools, and other providers used for a requested service or transaction;
• from suppliers, business partners, public business records, sanctions and restricted-party sources, and lawful compliance resources;
• from a person who submits an order, RFQ, shipment, support request, or other record involving you.

Do not provide another person's information unless you are authorized to do so and the information is accurate.

Why we use personal information

We use personal information to:

• provide, operate, localize, and secure the website;
• create and manage accounts and sessions;
• maintain carts and choices requested by the visitor;
• answer product questions and process RFQs and quotations;
• verify inventory, accept and fulfill orders, and provide invoices;
• process payments, taxes, refunds, disputes, and reconciliation;
• validate addresses, create labels, clear customs, ship, and track orders;
• manage returns, claims, support cases, and customer communications;
• detect fraud, abuse, account compromise, and security incidents;
• screen transactions for sanctions, export, end-user, end-use, and destination concerns;
• comply with accounting, tax, recordkeeping, legal, regulatory, and government requirements;
• diagnose errors, maintain reliability, and improve the catalog and customer experience;
• establish, exercise, or defend legal claims;
• honor privacy choices and respond to rights requests.

We do not use an RFQ, return, support, privacy, or security submission as permission to send unrelated marketing.

Legal bases where required

Where a law requires a legal basis, Sofitrek may rely on performance of a contract or requested pre-contract steps, compliance with legal obligations, legitimate interests balanced against individual rights, or consent for processing that legally requires consent.

You may withdraw consent for future processing when consent is the basis. Withdrawal does not make earlier lawful processing invalid.

How we disclose personal information

We may disclose relevant information to:

• hosting, database, content-delivery, security, email, file-storage, monitoring, and technical service providers;
• Stripe and other payment, fraud, tax, refund, or dispute providers used for the transaction;
• carriers, postage and label providers, customs brokers, freight forwarders, and address-validation providers;
• suppliers or sourcing partners when needed for an RFQ or product-specific service and appropriate safeguards are used;
• accountants, insurers, auditors, testing laboratories, professional advisers, and contractors with a business need;
• government, customs, tax, law-enforcement, export-control, sanctions, regulatory, or judicial authorities when required or reasonably necessary;
• a successor or participant in a genuine financing, reorganization, sale, merger, acquisition, or transfer of business assets, subject to appropriate confidentiality and legal requirements;
• another party at your direction or with your consent.

Providers are expected to handle information for the relevant service and according to contractual and legal obligations. Some providers independently determine how they handle information for legal, fraud, network, or regulatory purposes.

Cookies, browser storage, and privacy choices

Necessary cookies and storage support security, account sessions, cart continuity, checkout, payment, fraud prevention, and other services you request. They remain available when optional storage is declined.

Optional preference storage is used only after you give permission. Preferences may remember language, theme, catalog layout, selected columns, and recently viewed products. Choosing a language, creating an account, checking out, accepting Terms, closing a notice, scrolling, or continuing to browse does not grant optional consent.

You can turn Basic statistics, Preferences and Detailed analytics on or off separately, or use necessary technologies only. You can change or withdraw a choice at any time through Privacy choices in the site footer. Withdrawing removes the related optional browser data listed in the Cookie Notice and stops future collection. Your browser can also block or delete storage, although that may sign you out, clear a cart, or reset choices.

Basic statistics

Basic statistics tell us how many people visit Sofitrek, which public pages are useful, and where the website can be improved. We use Vercel Web Analytics for this. Its reports show overall totals only: visits, page views, referring sites, approximate location, browser and operating system, device type, and how many visitors leave after one page. They are kept separate from Detailed analytics and are not linked to Sofitrek accounts.

If our hosting service places your connection in the United States, United Kingdom, Australia or New Zealand, Basic statistics may run before you make a choice. Anywhere else, or when your location is unknown, they start only after you allow them. Ignoring the notice never turns on Preferences or Detailed analytics.

You can turn Basic statistics off at any time in Privacy choices, or choose Use necessary only. If you have already turned them off, that answer stands even when this notice changes. Global Privacy Control and Do Not Track signals also stop Basic statistics. A necessary cookie remembers for 180 days that you turned them off, even if your other choices could not be saved. Basic statistics place no cookies and store no identifier in your browser. Vercel derives a daily identifier from the request and discards it after 24 hours. The combined reports are kept for as long as our Vercel plan retains them.

We use these statistics only to understand and improve this website. We do not connect them to customer records, use them for advertising, sell them, or combine them with activity on other websites. Account, cart, checkout, order, payment, support and administrator pages are never counted. Anything after a question mark or hash in a page address is removed, and a referring address that could reveal a private page or a search is left out. We send no custom events, form contents, customer IDs or usage identifiers to Vercel Web Analytics. See Vercel's analytics privacy information.

Hosting, security, transaction, search and privacy-choice records are kept separately for their own purposes. Detailed analytics, described next, need their own permission.

Detailed analytics

Detailed analytics are optional and start only after you allow them in Privacy choices. Sofitrek uses this information to find broken or confusing pages, improve catalog searches, and understand where visitors stop before requesting a quote or buying. Creating an account or accepting another policy does not turn them on.

With permission, we record page paths and their order, timestamps, clicks on links and controls, form starts and submissions, validation outcomes, repeated clicks, checkout progress, browser and loading errors, time while a page is active, scroll depth, and page performance. We also record a broad device type, browser family, approximate country when provided by our hosting service, page language, the website version, and whether a visit came from this site or another website. We do not retain referring URLs. Searches are measured by their occurrence and filter counts; this optional collection does not copy search text.

A random visit identifier is kept in this tab's session storage. A visit expires after 30 minutes of inactivity or 24 hours, whichever comes first. We keep a protected identifier to connect the records to your saved Detailed analytics choice. If you are signed in when activity is received, we may associate that activity with your Sofitrek customer account. Earlier anonymous events are not relabeled as signed-in actions. Activity can be incomplete and is not proof of your intentions.

These analytics records are stored by Sofitrek using its existing hosting and database service providers. The web-vitals library measures performance in your browser; it does not send these records to Google. We do not use this collection for advertising, data sales, cross-site tracking, or automated decisions that determine your eligibility or prices.

We do not record screen video, page contents, keystrokes, form values, passwords, payment details, messages, uploaded files, raw IP addresses, full user-agent strings, precise location, or URL query strings and fragments. Account record references in page paths are replaced with general page categories.

Analytics records are available only to authorized staff and are removed after 30 days by scheduled cleanup. Backups follow the separate backup retention process and are not used for ordinary analytics. You can request access or deletion through the privacy contact in the Privacy Policy. Necessary security, transaction, search-operation, and privacy-choice records follow their own stated purposes and retention periods.

Turn Detailed analytics off at any time using Privacy choices in the footer. Withdrawal stops new collection, discards unsent events, and removes the visit identifier from the browser. Previously collected analytics records expire on the stated schedule unless deleted earlier through a privacy request. Global Privacy Control also keeps Detailed analytics off. Normal browsing, account access, carts, checkout, and support remain available when you decline.

Marketing and other technologies

Advertising, retargeting, affiliate tracking, marketing tags, and cross-site behavioral tracking are not currently active. Vercel Speed Insights and Sentry browser telemetry are switched off as well. An earlier choice does not cover a future provider, purpose, recipient, retention period, or technology change. If that changes materially, you may be asked to choose again.

See the Cookie Notice for the current categories, technologies, durations, providers, and controls.

Global Privacy Control, sale, sharing, and targeted advertising

Sofitrek does not currently sell personal information or share it for cross-context behavioral advertising. Where applicable, Sofitrek honors a recognized Global Privacy Control signal as an opt-out of sale, sharing, and targeted advertising for the browser or device sending the signal.

Global Privacy Control does not disable necessary services or ordinary non-advertising preferences. General Do Not Track signals may not communicate a legally recognized choice and are not interpreted consistently across the industry.

Privacy-choice evidence

Sofitrek may retain privacy-minimized evidence needed to honor and demonstrate a cookie or browser-storage choice. This evidence may include a pseudonymous identifier, the categories chosen, whether a Global Privacy Control signal was present, the version of the consent settings and policies shown, a reference used to prevent duplicate records, language, and time.

Consent evidence does not include the raw consent subject identifier, raw IP address, raw user agent, geolocation, or browsing history. It is not used for authentication or authorization.

Payment security

Stripe handles full card entry and may use payment-security, fraud-prevention, and transaction technologies when you start payment. Those necessary payment functions are not conditioned on optional preference consent. Stripe handles its technologies under its own privacy notice.

Never send a full card number, card security code, account password, or one-time authentication code through email, the contact form, an RFQ, or a support message.

Retention

We retain information only for as long as reasonably necessary for the purpose collected, including:

• account information while the account remains active and for a limited period after verified closure;
• carts and draft checkouts for a limited operational period;
• accepted orders, invoices, payment, refund, tax, shipping, return, and dispute records for accounting, tax, warranty, legal, and audit periods;
• export and sanctions records for applicable recordkeeping periods;
• support, RFQ, quote, contact, and privacy-request records for resolution, follow-up, and legal needs;
• authentication, rate-limit, security, and diagnostic information for shorter security and operational periods unless an incident or legal hold requires preservation;
• suppression information for as long as needed to honor an opt-out;
• privacy-choice evidence for as long as needed to show that a choice was honored, subject to applicable deletion, legal-hold, and retention requirements.

Retention can be extended for an active dispute, chargeback, fraud investigation, security incident, export requirement, tax obligation, litigation hold, or other legal need. Backups and provider copies may expire on separate protected schedules.

When retention is no longer justified, information is deleted, anonymized, aggregated, or isolated as appropriate. Deleting an address-book entry or closing an account does not rewrite a completed invoice, shipment, payment, or other record that must lawfully be retained.

Security

Sofitrek uses administrative, technical, and organizational measures intended to protect personal information, including HTTPS, restricted access, secure session controls, payment-data minimization, audit records, provider controls, and security monitoring where configured.

No security program can eliminate every risk. Customers must protect their devices, email accounts, passwords, passkeys, and payment methods and must notify Sofitrek promptly about suspected unauthorized activity.

See Secure Shopping and Payments for practical guidance.

International processing

Sofitrek operates from the United States and uses providers that may process information in the United States and other countries. Those countries may have privacy laws different from the laws where you live.

Where required, Sofitrek will use an appropriate transfer mechanism or other safeguard for restricted international transfers.

Your privacy choices and rights

Depending on your location and applicable law, you may have rights to request access, correction, deletion, or a portable copy; object to or restrict certain processing; opt out of sale, sharing, targeted advertising, or certain profiling; withdraw consent; appeal a decision; or complain to an applicable regulator.

Rights are subject to exceptions and verification. For example, Sofitrek may need to retain transaction, tax, security, fraud, export, or legal-claim records even after an account is closed.

To submit a request, use the privacy category in the Contact and Help Center or email info@sofitrek.com. Describe the request and the country or state that applies. Sofitrek may verify identity and authority using information proportionate to the request. Authorized agents may be required to provide proof of authority.

We will respond within the period required by applicable law and will explain when more time, additional verification, an exception, or an appeal method applies. Sofitrek does not discriminate against a person for exercising a privacy right or declining optional storage.

California privacy notice

California law requires commercial websites that collect personally identifiable information from California consumers to conspicuously post a privacy policy. This policy describes Sofitrek's collection, use, disclosure, and choices.

If Sofitrek is subject to the California Consumer Privacy Act for a particular period or voluntarily extends a comparable right, California residents may submit applicable access, correction, deletion, portability, and opt-out requests using the methods above. Sofitrek does not currently sell personal information or share it for cross-context behavioral advertising.

Children

Sofitrek sells electronic and industrial components and is not directed to children. A person must be legally able to enter the relevant transaction and should not submit personal information if they are under 18 or otherwise lack legal capacity without an authorized adult or business representative.

Contact info@sofitrek.com if you believe a child submitted personal information improperly.

Third-party links and documents

Product pages may link to manufacturer sites, datasheets, videos, carrier pages, or other external resources. Sofitrek does not control their privacy or security practices. Opening an external link can allow the third party to receive ordinary request and device information.

Changes to this policy

Sofitrek may update this policy when services, providers, laws, or practices change. The public page shows the publication or review date for the current revision.

A material change will apply prospectively unless law permits otherwise. When required, Sofitrek will provide additional notice or obtain consent. Earlier transactions stay linked to the policy version that applied when they were made, where that record exists.

Contact

Privacy contact: Farhan Maroufsofian

Email: info@sofitrek.com

Public location: Mission Viejo, California

Do not send passwords, full payment-card details, government identity documents, or sensitive evidence until Sofitrek confirms a secure method and that the information is necessary.