Legal / Last updated 1 February 2026
Privacy Policy and Terms of Service
Two documents on one page. The privacy policy covers what this website collects when you send an enquiry and what happens to those records afterwards. The terms cover how a quotation becomes an order, who owns the tooling, what the warranty does and does not reach, and which law applies if a programme goes wrong.
Written for buyers in North America and Europe dealing with a Malaysian contract manufacturer. Questions to sales@genesiscircuits.com or +60 4 555 0182.
Privacy policy
What this website collects and why
Only two things on this site send data anywhere: the enquiry form and the technical data files you choose to send by email. There is no advertising pixel, no session recording and no profile building.
1. What we collect
The enquiry form asks for your name, work email address, company, country, annual volume band, board technology and a description of the requirement. Alongside those fields the web server records the request time, the page that submitted the form, the browser user-agent string and the IP address, which is what any HTTP server logs. If a programme proceeds, the commercial record grows to include the contact details of the people named on the purchase order, shipping addresses, and the technical files you release: Gerbers, bill of materials, drawings and test specifications.
2. Why we process it
Enquiry data is processed to answer the enquiry and prepare a quotation, which is a legitimate business interest and, where you have asked for a price, a step taken at your request before entering a contract. Order and production data is processed to perform the contract and to meet legal obligations that apply to a manufacturer: tax and customs records, product traceability, and the quality records required by ISO 9001:2015 and ISO 13485:2016. Marketing email is sent only where you have asked for it, and every message carries a one-click unsubscribe.
3. Cookies and similar technologies
This site sets no cookies of its own. The font files are self-hosted, so no third-party font service is contacted and no font request leaks your IP address to a third party. The form posts to a form-handling service described in the retention table below, which sets a short-lived token to stop duplicate submissions. If analytics are added later they will be aggregate and cookieless, and this section will name the provider and the retention period before that change goes live rather than after.
4. Sharing with third parties
Your data leaves this company only where it is needed to run a programme: the form-handling service that delivers enquiries, the cloud provider that hosts this website, the component distributors and fabricators who are asked to quote on part of an order, the freight forwarders and customs brokers named on a shipment, and professional advisers where a dispute requires them. We do not sell contact data, and we do not pass it to a third party for that party's own marketing. An NDA is signed before fabrication data is released to anyone outside the facility.
5. How long it is kept
Enquiry data that does not become an order is deleted 24 months after the last contact, which is long enough to cover a design that is re-quoted after a delay and short enough that stale contact lists do not accumulate. Programme records are kept for 7 years from the last shipment for general commercial work, and 15 years for automotive work, where IATF 16949 practice and product-liability exposure both call for the longer period. The retention table at the end of this page sets out each category with its period and its processor.
6. Your rights
You can ask for a copy of the personal data held about you, ask for it to be corrected, ask for it to be erased where no legal retention duty applies, object to processing based on legitimate interest, and ask for the data in a portable machine-readable format. Send the request to sales@genesiscircuits.com and it is answered within 30 days. Note that a request to erase production records cannot be met while a traceability obligation is live, because the manufacturing record is evidence that a shipped board conforms to its drawing.
7. International transfers
This company is in Malaysia and the website is served from a global content network, so an enquiry from Europe is stored outside the European Economic Area. Transfers from the EEA rely on the European Commission's Standard Contractual Clauses in the contracts with the hosting and form-handling providers, and on the adequacy position for the onward transfer of commercial records within this group. Data is not routed through a jurisdiction chosen for cost reasons, and the sub-processor list in the retention table names every provider that touches it.
8. How to contact us about privacy
Write to sales@genesiscircuits.com with "Privacy" in the subject line, or post to Plot 118, Bayan Lepas Free Industrial Zone, 11900 Penang, Malaysia, marked for the attention of the data protection contact. Telephone +60 4 555 0182 during desk hours, 09:00 to 18:00 MYT, Monday to Friday. If a complaint is not resolved to your satisfaction you may raise it with the Personal Data Protection Department in Malaysia or with your national supervisory authority in the European Union.
Terms of service
The terms a purchase order is accepted on
These terms apply to every quotation and order unless a signed supply agreement says otherwise, in which case the signed agreement wins on the points where the two disagree.
1. Scope of service
We are a contract manufacturer: we assemble printed circuit boards and, where quoted, harnesses, enclosures and finished units, to the customer's design and specification. We do not certify that a design is fit for its application, that it meets a regulatory approval we have not been given the requirement for, or that it is free of a third party's intellectual property. Design authority, regulatory submission and product liability for the end product remain with the customer. Any engineering change we propose is submitted for written approval before it is built.
2. Quotations and orders
A quotation is an offer to manufacture at the stated price, on the stated Incoterm, for 30 days from its date, and it is built on the revision of the data package named on it. A purchase order is accepted when we acknowledge it in writing, which is also the point at which the delivery date becomes binding. If the data package changes after acknowledgement, the price and the lead time are re-quoted and the programme re-scheduled from the date the revised data is released. Nothing is ordered from a distributor until the order is acknowledged.
3. Price and payment
Prices are quoted in US dollars and are exclusive of duty, tax and, unless the Incoterm says otherwise, freight. A new programme runs 50% on order and 50% on shipment; from the fourth completed order, net-30 on approved credit. Non-recurring engineering and tooling are invoiced with the first order because both are consumed before production begins. Component cost is the one line that can move after acknowledgement, and if a distributor allocation or a market increase exceeds 10% of the material value we notify you and hold before purchasing rather than absorbing it or passing it through silently.
4. Delivery and risk
Delivery dates are given in working days from material release at this facility and are met on the on-time delivery measure published on this site. Risk passes on the Incoterm named on the acknowledgement: EXW and FOB at the named point, CIF on loading, DAP and DDP at the delivery address. Where a shipment is delayed by a component allocation, a customs hold or a force majeure event, we notify you with the new date and the reason rather than shipping partial and unannounced. Partial shipments are made only with your written agreement.
5. Tooling and intellectual property
Tooling is yours. Stencils, in-circuit and functional test fixtures, test programs, AOI programs, first-article reports and qualified reflow profiles are your property, are maintained and calibrated as your account assets, and are released or shipped to another manufacturer on written instruction. Your design files remain your intellectual property and we take no licence to them beyond what is needed to build the order. We retain ownership of our own process documentation, panel designs and in-house tooling, and of any generic manufacturing know-how used to build your assembly.
6. Warranties
We warrant that every assembly is manufactured to the workmanship class named on the acknowledgement, against IPC-A-610 and J-STD-001, and that it conforms to the released data package at the revision we built. The warranty period is 12 months from shipment, or the period stated on the acknowledgement where a sector standard requires longer. It does not cover component failures inside a part we bought to your specified manufacturer part number, damage in transit after risk has passed, wear in the field, or a board that has been reworked, coated or modified outside this facility.
7. Limitation of liability
Our liability for a defective shipment is limited to replacement of the affected assemblies, or a refund of the price paid for them, at our option. Beyond that, liability is capped at the value of the order on which the claim arises. We are not liable for indirect or consequential loss, including lost production, lost profit, recall cost, or the cost of a regulatory submission that has to be repeated. Nothing in these terms limits liability for death or personal injury caused by negligence, or for fraud. A claim must be notified within 30 days of the defect becoming apparent.
8. Confidentiality
Fabrication data, bills of materials, drawings, test specifications, volumes and pricing are treated as confidential on both sides, whether or not an NDA is in place, and an NDA is signed before any file is released. Data is held on an access-controlled server rather than circulated by email, access is limited to the engineers named on the programme, and export-controlled or ITAR-flagged data follows a documented handling route with a named custodian. Confidentiality survives the end of the commercial relationship for 5 years.
9. Governing law
These terms and every order placed under them are governed by the laws of Malaysia, and the courts of Malaysia have exclusive jurisdiction, with the exception that either party may enforce a judgment or an injunction in the courts where the other party holds assets. Where a signed supply agreement names a different law or an arbitration seat, that agreement governs. Before any formal step is taken, both parties agree to escalate the dispute to a director-level meeting, which is the route that resolves most quality and schedule disagreements involving a contract manufacturer.
Retention and sub-processors
What is kept, for how long, and who else touches it
Six categories cover everything this website and this business hold. Where a category is kept longer than the general rule, the reason is a legal obligation rather than a preference.
| Category | Retention period | Who processes it | Why it is kept that long |
|---|---|---|---|
| Enquiry and web form data | 24 months from last contact | Website host and form-handling provider | Long enough to answer a re-quote on a design that was shelved; deleted after that because the contact list serves no further purpose |
| Quotation and commercial records | 7 years from the last shipment | Accounting system and the Malaysian tax authority | Statutory accounting and tax record-keeping in Malaysia |
| Manufacturing and quality records | 15 years for automotive programmes, 7 years otherwise | Internal quality system storage, customer audit on request | ISO 13485:2016 and 21 CFR 820 device history expectations, and IATF 16949 practice for the automotive period |
| Component traceability data | Matched to the programme record, so 7 or 15 years | Distributors and original manufacturers, on request only | A supplier notice covering a date code has to be resolved against units already shipped |
| Website server logs | 30 days | Content network logs | Security and abuse investigation; rotated automatically and not used for analytics |
| Marketing email subscribers | Until unsubscribe, then 30 days | Email service provider | Consent-based only; the short tail covers a pending send and suppression-list obligations |
Review and changes
How this register is kept current
A retention period or a sub-processor is worth stating only if the page stating it is maintained. Three commitments govern this one, and each is checked at the annual review.
A new provider is listed before use
A sub-processor is added to the table above before it touches any data, not after the first invoice. Customers on a regulated programme are notified in writing, because an auditor asking where a device history record is stored expects a name rather than a category.
Every period has a stated reason
A retention period is either a legal obligation or a business need that can be explained. Where the answer is a statutory one, as with the 7-year accounting record, the obligation is named rather than implied. Nothing is kept indefinitely for convenience.
Changes are dated, not silent
This policy was last reviewed on 1 February 2026 and the same date appears on the enquiry desk reply templates. A change that widens what is collected or lengthens a period is published here with the new date before it takes effect, and the previous wording can be requested.
Register reviewed 1 February 2026. Questions about a retention period, a sub-processor or a deletion request go to sales@genesiscircuits.com with "Privacy" in the subject line.
