Privacy Policy
Last updated: 8 June 2026 · Cookie policy version: 1.0
1. Who we are (Data Controller)
Impact Computers & Electronics (“Impact Computers”, “we”, “us”, “our”) operates the website at impactcomputers.com (the “Site”) and is the data controller responsible for the personal data described in this policy.
- Postal address: 4151 North 29th Avenue, Hollywood, FL 33020, United States
- Contact for privacy matters: [email protected]
If you are in the European Economic Area (EEA) or the United Kingdom, references to the “controller” and to “personal data” have the meaning given in the EU General Data Protection Regulation (GDPR) and the UK GDPR.
2. The personal data we collect
We collect the following categories of personal data, grouped by purpose:
| Category | Data we process |
|---|---|
| Account | Name, email address, password (stored hashed), business/customer identifiers, account net-payment terms, account status and deactivation date. |
| Orders | Order and order-line details, order reference, the IP address used to place the order, and order date. |
| Payment | Payment is processed by PayPal. We retain limited payment metadata only (card type, the last digits/card reference, and processor profile/token identifiers). We do not store full payment card numbers. |
| Shipping & addresses | Recipient name, company name, address lines, city, state, postcode, country, contact email and phone, and a carrier address reference (EasyPost). |
| Returns / RMA | Return and warranty (RMA) requests linked to your orders, and related correspondence. |
| Communications | Messages you send through the contact form, RMA forms, quote requests and support emails. |
| Browsing & device | IP address, device and browser information, pages viewed, and data collected via cookies and similar technologies (Google Analytics, Meta Pixel, Smartlook), subject to your consent where required. |
| Consent records | Your cookie consent choices, the consent region profile (EU/US), the policy version, and timestamps. |
We do not knowingly collect special-category/sensitive personal data, and we do not use your data for solely automated decision-making that produces legal or similarly significant effects.
3. Why we use your data and our legal basis
Where the GDPR/UK GDPR applies, we rely on the following legal bases:
- Performance of a contract — creating and managing your account; processing, fulfilling and delivering orders; handling returns, refunds and warranty claims; customer support.
- Legal obligation — keeping tax, accounting and transaction records, and responding to lawful requests.
- Legitimate interests — securing the Site (bot protection via Cloudflare Turnstile), preventing fraud, and maintaining and improving our services.
- Consent — analytics and marketing cookies/pixels and marketing emails, which you can withdraw at any time.
For users in the United States, we process this data to provide and improve our services, complete transactions, secure the Site, comply with law, and — where you have not opted out — for analytics and advertising as described below.
4. How long we keep your data
- Order, transaction and tax records: approximately 7 years, to meet accounting and tax obligations.
- Account data: while your account is active; deleted or anonymised after a period of inactivity or on deactivation, subject to records we must keep by law.
- Consent records: for the life of the relevant policy version plus a reasonable period to evidence consent.
- Cookie/analytics data: for the durations listed in the cookie manifest below.
- Server and IP logs: a short period for security and fraud prevention.
5. Who we share your data with
We share personal data with the service providers below, only as needed to run the Site and fulfil your orders.
| Provider | Purpose | Location |
|---|---|---|
| PayPal | Payment processing and fraud prevention | US / global |
| EasyPost | Shipping rates and labels (USPS, UPS, FedEx, DHL, etc.) | US |
| Google Analytics | Website analytics | US / global |
| Meta Pixel | Advertising and conversion measurement | US / global |
| Smartlook | Session replay and heatmaps | EU (Czechia) |
| Cloudflare | Bot protection (Turnstile) and content delivery (CDN) | US / global |
| Amazon Web Services (S3 + CloudFront) | File/media storage and content delivery | US |
| Transactional email provider | Sending order, account and support emails | US / EU |
| Sentry | Application error monitoring | US / EU |
| MeiliSearch (self-hosted) | Product search | Our hosting environment |
We may also disclose personal data to comply with the law, enforce our terms, protect our rights, or in connection with a corporate transaction. We do not sell your personal data for money. Where we transfer personal data out of the EEA/UK, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.
6. Your privacy rights
6.1 EEA / UK residents (GDPR / UK GDPR)
You have the right to access, rectify, erase, restrict or object to processing, request data portability, withdraw consent at any time, and lodge a complaint with your local data protection supervisory authority.
6.2 United States residents (CCPA/CPRA and other state laws)
Depending on your state (e.g. California, Virginia, Colorado, Connecticut, Utah), you have the right to know/access, delete and correct your personal information; to opt out of the “sale” or “sharing” of personal information and of targeted advertising; to limit the use of sensitive personal information; to use an authorized agent; and not to receive discriminatory treatment for exercising your rights.
6.3 Global Privacy Control (GPC)
For residents of US states that recognise it, we treat a Global Privacy Control (GPC) browser signal as a valid request to opt out of the sale/sharing of personal information and of targeted advertising.
6.4 How to exercise your rights
Email us at [email protected]. We will verify your identity before acting on a request and respond within the timeframes required by applicable law. You can also manage cookies at any time using the control below.
7. Cookies and similar technologies
We use cookies to keep the Site running, to understand how it is used, and — with your permission — for marketing. Necessary cookies are always active. For other categories we apply consent by region: in the EU non-essential cookies are off until you opt in; in the US they are on unless you opt out (including via a GPC signal).
Cookie manifest (version 1.0)
Necessary
Required for the website to function properly.
| Cookie | Provider | Duration | Purpose |
|---|---|---|---|
| impact_session | Impact Computers | 2 hours | Keeps your session active and remembers your activity across pages. |
| XSRF-TOKEN | Impact Computers | 2 hours | Protects forms against cross-site request forgery (CSRF) attacks. |
| cookie_preferences | Impact Computers | 1 year | Stores your cookie consent choices so the banner is not shown again. |
| cf_clearance / __cf_bm | Cloudflare Turnstile | 30 minutes | Used by the bot-protection challenge on forms to verify you are human. |
| paypal / ts | PayPal | Session – 3 years | Enables secure PayPal checkout and fraud prevention during payment. |
Functional
Stores user preferences and improves usability.
Analytics
Helps us understand how visitors use the website.
| Cookie | Provider | Duration | Purpose |
|---|---|---|---|
| _ga | Google Analytics | 2 years | Distinguishes unique visitors to measure site usage. |
| _ga_* | Google Analytics | 2 years | Persists the analytics session state for a specific property. |
| _gid | Google Analytics | 24 hours | Distinguishes visitors over a 24-hour period. |
| SL_* (Smartlook) | Smartlook | Session – 1 year | Records anonymised session replays and heatmaps to improve usability. |
Marketing
Used for advertising and tracking across websites.
| Cookie | Provider | Duration | Purpose |
|---|---|---|---|
| _fbp | Meta Pixel | 3 months | Identifies browsers to deliver advertising and measure conversions. |
| _fbc | Meta Pixel | 3 months | Stores the last ad click to attribute conversions on Meta platforms. |
8. Children's privacy
The Site is intended for business and adult consumers and is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.
9. How we protect your data
We use technical and organisational measures appropriate to the risk, including encryption in transit, access controls, bot protection on forms, and use of reputable processors. No method of transmission or storage is completely secure, but we work to protect your data and to limit access to it.
10. Changes to this policy
We may update this policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, the cookie policy version.
11. Contact us
Impact Computers & Electronics
4151 North 29th Avenue, Hollywood, FL 33020, United States
Email: [email protected]