Privacy Policy

Who we are

Cambridge Advanced Systems (“CAS”, “we”, “us”) provides software for manufacturers, including Quotation, AI CAM and 2D to 3D (together, the “Service”), and runs the website cambridgeadvancedsystems.com. For personal data collected through the website, and for account and business contact data in the Service, we are the controller. You can reach us about privacy at contact@cambridgeadvancedsystems.com.

What we collect

• Enquiries. When you use our contact form, we collect your name, email address, the product you are interested in and anything else you choose to give us: company, role, phone number and message.
• Account data. When you use the Service, we collect your name, email address, company, sign-in details and settings. You can sign in with an email address and password or with Google.
• Customer content. Files and information you or your team put into the Service, such as customer drawings, 3D models, spreadsheets, factory data (machines, tools, materials, rates), quotes, programs and chat messages.
• Technical data. When you visit the website or use the Service, our hosting provider records technical information such as your IP address, browser, pages requested and the time of the request, to deliver pages, keep them secure and diagnose faults.
• Correspondence. Emails and other messages you send us.

We do not ask for special categories of personal data, and please do not send them to us.

How we use it and our legal bases

We use personal data only for the purposes below. Under the UK GDPR and, where it applies, the EU GDPR, we rely on these legal bases:

• To answer enquiries and arrange demos or early access: our legitimate interest in responding to people who contact us, or steps you ask us to take before entering a contract.
• To provide, secure and support the Service: performance of our contract with you or your organisation.
• To keep the website and Service secure, prevent abuse and fix faults: our legitimate interest in running a reliable service.
• To improve our products: our legitimate interest, using technical and usage information rather than the content of your files.
• To meet legal obligations, such as keeping business records.

We do not sell personal data and we do not use it for advertising.

Customer content

We process customer content on behalf of the customer organisation to provide the Service to it. Your organisation decides what goes into its workspace, and its content is never shared with other customers. Where we act as a processor, our agreement with your organisation governs how we handle that content, and requests about it should go to your organisation first.

Who we share it with

We share personal data only with service providers who help us run the website and the Service, and only as needed for the purposes above:

• Cloudflare: website hosting, security and delivery of contact-form messages.
• Google: email (Google Workspace) and sign-in to the Service (Firebase Authentication).
• AI model providers: to read documents and generate results in the Service. We send them customer content only when needed to provide the Service to you.
• Professional advisers and authorities, where the law requires it or to protect our rights.

If CAS is involved in a merger, acquisition or sale of assets, personal data may transfer to the new owner under the terms of this policy.

International transfers

Some of our providers process data outside the United Kingdom and the European Economic Area. When that happens, we rely on adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement or the European Commission’s standard contractual clauses.

How long we keep it

• Enquiries: as long as needed to handle your enquiry and any follow-up, then deleted.
• Account data and customer content: for as long as your organisation uses the Service. When the agreement ends, or earlier on request, we delete it, except where the law requires us to keep records.
• Technical logs: for a short period for security and fault finding.

Security

We protect data with encryption in transit, access limited to people who need it, and separation between customer workspaces. No system is perfectly secure; if we become aware of a breach that affects you, we will tell you and the regulator as the law requires.

Cookies

The website does not use advertising or analytics cookies. Our hosting provider may set strictly necessary cookies to protect the website from abuse. The Service stores sign-in information in your browser so you stay signed in; this is necessary to provide it.

Your rights

You can ask us to give you a copy of your personal data, correct it, delete it, restrict or object to how we use it, or transfer it to you or someone else. Where we rely on your consent, you can withdraw it at any time. To use these rights, email contact@cambridgeadvancedsystems.com. We will reply within one month.

You can also complain to the Information Commissioner’s Office (ico.org.uk) or, in the EU, to the data protection authority where you live or work. We would appreciate the chance to resolve your concern first.

Children

The website and the Service are for businesses and are not directed at children. We do not knowingly collect personal data from anyone under 16.

Changes to this policy

We may update this policy. We will change the date at the top when we do, and tell account holders about significant changes before they take effect.