Privacy Policy

Effective date: 25 August 2026

MCFION Lighting ("we", "us", "our") operates the website at https://mcfion.com (together with any associated subdomains or regional mirrors, the "Site"). This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you visit the Site, interact with our customer service, or submit a request for a quote, a datasheet, or a general inquiry through our forms.

We are committed to processing personal data lawfully, fairly, and transparently and to protecting your privacy in accordance with applicable data protection laws, including the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA).

1. Who We Are (Data Controller)

For the purposes of applicable data protection law, MCFION Lighting is the data controller in respect of the personal information described in this Policy.

  • Company: MCFION Lighting
  • Website: https://mcfion.com
  • Contact (privacy & data requests): info@mcfion.com

2. Scope of This Policy

This Policy applies to personal information collected through:

  • The "Request Quote" and "Datasheet" forms on our product pages.
  • The "Contact" form on the /contact page.
  • Our website chat / customer-service widget and any email correspondence with us.
  • Automatic data collected as you browse the Site (for example, IP address, device/browser details, and usage data).

It does not cover third-party websites, services, or applications that we do not control.

3. Information We Collect

3.1 Information You Provide to Us

When you complete a form or contact us, we may collect the following categories of personal information:

3.2 Information Collected Automatically

When you visit the Site, we may collect technical data such as IP address, browser/device type, operating system, pages viewed, and other usage information. This may include data collected via our security and anti-abuse measures (e.g., Cloudflare Turnstile, honeypot fields).

4. How We Use Your Information

We use the information we collect to:

  • Respond to your inquiries, quote requests, and datasheet requests.
  • Manage our customer relationships and follow up on your interest in our products.
  • Send transactional email confirmation (e.g., that we received your request).
  • Improve our website, products, and services.
  • Protect the Site against fraud, abuse, and security threats.

5. Legal Bases for Processing

Where applicable law requires a legal basis (e.g., GDPR), we process personal data on the following bases:

  • Contract / steps prior to a contract: to handle your inquiries and requests.
  • Legitimate interests: to manage customer relationships, improve our services, and protect the Site.
  • Consent: where we rely on consent, you may withdraw it at any time.
  • Legal obligation: where required by law.

6. Sharing & Disclosure

We do not sell your personal information. We may share it with the following categories of service providers who help us operate the Site and our business, under appropriate confidentiality and processing terms:

  • Hosting & platform: Cloudflare (edge/security) and Webflow (website hosting).
  • CRM & workflow: Notion (customer relationship management).
  • Email: Brevo (transactional email delivery).
  • Messaging: WeCom / WeCom group bot (internal notification to our team, including real-time and daily-digest alerts about new inquiries).

We may also disclose information where required by law, or to protect our rights and safety, or in connection with a business transfer (merger, acquisition, etc.).

7. International Transfers

Your information may be processed by service providers located outside your country of residence. Where such transfers occur under GDPR, we rely on appropriate safeguards (e.g., Standard Contractual Clauses) to protect your data.

8. Data Retention & Security

We retain personal information only as long as necessary for the purposes described in this Policy, or as required by law. We implement reasonable technical and organizational measures to protect your data against unauthorized access, loss, or misuse. However, no method of transmission or storage is completely secure.

9. Your Rights

Depending on your location (including under GDPR and CCPA/CPRA), you may have the right to:

  • Access, correct, or delete the personal information we hold about you.
  • Opt out of certain processing, or withdraw consent.
  • Receive a copy of your data in a portable format.
  • Lodge a complaint with a supervisory/regulatory authority.

To exercise these rights, contact us via email.

10. Children’s Privacy

The Site is not directed at children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us so we can take appropriate steps.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised "Effective date". We encourage you to review this page periodically.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at info@mcfion.com.