Privacy Policy - Stillion Industries

Who We Are

Stillion Industries is a precision machine shop located in Dexter, MI, just west of Ann Arbor. Our services include turning, milling, lathing, and more. Stillion Industries is the premier operation of the Stillion Family of Companies, which includes Electro Arc metal disintegration machines and Ames portable hardness testers.

For the purposes of data protection law, Stillion Industries is the data controller responsible for determining the purposes and means of processing personal data collected through this website.

You can learn more about our company on our About page.

What Data is Collected?

Stillion Industries is committed to complying with all applicable privacy standards, including the European Union’s General Data Protection Regulation (GDPR), the United Kingdom General Data Protection Regulation (UK GDPR), the California Consumer Privacy Act (CCPA), Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), and other applicable regulations.

We strive to be transparent in our practices, acquire user consent prior to collecting data, collect only the information required to maintain site functionality and standard business operations, store all data securely, minimize data sharing with third parties and carefully vet any third party vendors we entrust with personally identifiable information (PII).

Continue reading for details on what information is collected from this website and how it is used.

Legal Basis for Processing

Our lawful bases for processing personal data include:

User consent

When you voluntarily provide information through forms, subscriptions, or cookie preferences.

Performance of a contract

When processing is necessary to deliver requested products, services, or communications.

Compliance with legal obligations

When retention or disclosure is required by applicable tax, accounting, or regulatory laws.

Legitimate interests

When processing helps us operate, secure, and improve our website, communications, and customer service in ways that do not override your privacy rights.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance site functionality, analyze website traffic, and improve your user experience. Cookies are small text files stored on your device when you visit a website.

Types of Cookies We Use

Essential Cookies

Required for the website to function (e.g., WordPress session cookies, WooCommerce cart cookies). These cannot be disabled in our systems.

Like most websites, our content platform (WordPress) automatically collects limited technical information such as your IP address, browser type, and referring URL for security and performance purposes. This data is not used for marketing and is retained only briefly in system logs.

Analytics Cookies

Used to understand how visitors interact with our website.

We use Google Analytics 4 to collect anonymized traffic data such as page views, device type, and location (general region).

You can opt out of Google Analytics tracking by using the Google Analytics Opt-out Browser Add-on.

Functional and Marketing Cookies

Our site uses cookies to support email and SMS marketing features. For example, our marketing platform (Klaviyo) may use cookies to track form submissions, email engagement, and link clicks to improve user experience and communication relevance.

Our automated chatbot may use cookies to maintain your chat session.

Certain third-party embeds (e.g., YouTube, Google Maps) may place cookies when content is loaded.

Performance and Security Cookies

Plugins such as Fluent Forms, FluentSMTP, and Yoast SEO use limited technical cookies for functionality and spam prevention.

Our website is hosted by GoDaddy, which maintains standard security logs and temporary session cookies to ensure uptime and protect against attacks.

How to Manage Cookies

In most modern browsers you can adjust your browser settings to refuse cookies or delete existing ones. Be aware that disabling cookies may impact site functionality.

When you first visit our website, a cookie consent banner will appear allowing you to manage preferences for non-essential cookies. Your preferences will be stored and can be updated at any time by revisiting the banner through the ‘Cookie Settings’ link in our footer.

Who We Share Your Data With

We may share limited personal data with trusted service providers who assist in operating our website, conducting business, or providing marketing and analytics services. These include:

GoDaddy – web hosting and infrastructure
WordPress / Automattic, Inc. – content management platform used to operate the website
Google / Alphabet Inc. – analytics and site performance monitoring (Google Analytics 4)
Outlook / Microsoft Corporation – email delivery for form submissions
Proton AG – email delivery for form submissions
Fluent Forms / FluentSMTP – form submission handling and delivery
Klaviyo – email marketing (if you opt in to receive updates), email newsletters, and other transactional email functionality
Conduit Creative Consulting LLC – authorized marketing and web management provider operating under a confidentiality and data processing agreement

All third-party providers are required to safeguard your data and process it only according to our instructions.

How Long We Retain Your Data

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with applicable legal, accounting, or reporting requirements.

Contact form submissions and inquiries are retained for up to 24 months to allow adequate time for customer service and follow-up.

Customer and order records (including invoices and tax documents) are retained for up to 10 years to comply with U.S. accounting and tax regulations.

Email and SMS marketing subscriber information (via Klaviyo) is retained until you unsubscribe or for up to 24 months of inactivity, whichever comes first.

Analytics data collected through Google Analytics is retained for 14 months in accordance with Google’s GDPR settings.

Security logs and spam prevention data (via plugins such as Fluent Forms and GoDaddy infrastructure) are retained for up to 90 days for cybersecurity purposes.

If you request deletion of your personal information, we will remove or anonymize it from our systems except where retention is required by law.

Your Rights Under Data Protection Laws

Depending on your location, you may have certain rights regarding your personal data under applicable privacy laws such as those mentioned above and other similar frameworks.

We respect and honor these rights for all users, regardless of location. These may include:

Right to Access

You have the right to request a copy of the personal data we hold about you and details on how it is used.

Right to Correction

You may request that we correct or update any inaccurate or incomplete information.

Right to Deletion (“Right to be Forgotten”)

You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, except where retention is required by law.

Right to Restrict or Object to Processing

You may object to the processing of your personal data in certain circumstances, such as for direct marketing purposes.

Right to Data Portability

You may request a copy of your personal data in a structured, commonly used, and machine-readable format for transfer to another organization.

Right to Withdraw Consent

Where we rely on your consent to process data (for example, for marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights under applicable laws.

Exercising Your Rights

To exercise any of these rights, please contact us at:

📧info@stillionindustries.com

📬 Or by mail:

Stillion Industries
2055 Lima Center Road,
Dexter, MI 48130 USA

We may require verification of your identity before fulfilling your request to protect your privacy and the security of your data.
We will respond to all valid requests within 30 days or as required by applicable law.

How We Protect Your Data

Stillion Industries is committed to data security, we use a combination of technical and organizational measures to safeguard the information we collect and process.

Website and Hosting Security

Our website is hosted on secure GoDaddy servers with regular software updates, firewalls, and malware scanning to protect against unauthorized access and data breaches. SSL (Secure Sockets Layer) encryption is enforced across the entire site to ensure data transmitted between your browser and our servers remains private.

WordPress Platform Security

We maintain an up-to-date WordPress installation and associated plugins. Access to the WordPress dashboard is restricted to authorized administrators using strong passwords and two-factor authentication where supported.

Data Transmission and Storage

Information submitted through our website forms (such as service inquiries or quote requests) is transmitted securely via Fluent Forms and FluentSMTP using encrypted connections and delivered to verified Stillion Industries email addresses hosted by Microsoft Outlook or our authorized marketing and web management provider’s email securely hosted by ProtonMail. Data stored within WordPress or our email systems is protected by account-level encryption, secure access controls, and regular password rotation.

Internal Access and Training

Only authorized Stillion Industries personnel and approved contractors have access to personal information when required for business operations. All personnel with access to data are instructed on privacy and security best practices.

Third-Party Vendor Security

All third-party vendors with potential access to personal data — including GoDaddy, WordPress, Google, Klaviyo, and Conduit Creative Consulting LLC — are required to maintain industry-standard security measures and comply with applicable data protection regulations.

Incident Response

In the unlikely event of a data breach, we will promptly investigate the issue, take steps to mitigate harm, and notify affected individuals and regulators as required by applicable law.

Changes to This Policy

Stillion Industries may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements.

When we do so, the revised version will be posted on this page with the date posted and a summary of the most significant recent updates. Major changes will be clearly noted, and if required by law, we will promptly notify affected parties through appropriate channels (such as an email notice or a banner on our website).

We encourage you to review this policy periodically to stay informed about how we protect your information.

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: