# TRF Industrial Automation Privacy Policy

Source: https://trfautomation.com/privacy-policy/

**Effective date: October 1, 2026. Version 1.0.**

This Privacy Policy explains what information TRF Industrial Automation collects through trfautomation.com, why it is collected, how it is protected, and the choices and rights available to visitors in the United States, Canada and Mexico.

## Key Facts About This Policy

| Topic | What applies |
|---|---|
| Who this policy covers | TRF Industrial Automation, operating trfautomation.com from Lenexa, Kansas |
| Nature of the operation | Business to business only. TRF does not sell products or services to individual consumers through this website |
| What is collected | Information submitted through forms (for example, name, business email, phone, company and project details), technical and analytics data, and cookie identifiers |
| Sensitive personal information | Not collected. No form on this site asks for sensitive categories of personal information |
| Legal standard applied site wide | The strictest applicable US state standard, generally the California model, applied to every visitor regardless of location |
| Global Privacy Control | Honored automatically as an opt-out signal, as required in California and Colorado |
| Do Not Sell or Share | TRF does not sell personal information. A "Do Not Sell or Share My Personal Information" link is available in the footer of every page |
| Regions covered by this policy | United States (including state-specific rights) |
| How to reach TRF about this policy | [Contact TRF Industrial Automation](https://trfautomation.com/contact/) |
| Policy status | Effective October 1, 2026, Version 1.0 |

## Scope of This Policy

This Privacy Policy applies to trfautomation.com, the website of TRF Industrial Automation, including every category, platform, product, industry, resource, tools and location page reachable from this domain. It covers information collected when a visitor browses the site, submits a form, uses the payback calculator, or otherwise interacts with a feature hosted on trfautomation.com.

This policy does not cover third-party websites linked from this site, such as a trade show landing page or an industry directory profile. TRF Industrial Automation is a U.S. operation, part of the Torfresma group, and this policy describes practices for the United States, Canada and Mexico. It does not describe the practices of Torfresma's operations outside the United States.

The operation described in this policy is entirely business to business. TRF designs, builds and supports robotic palletizing, case packing and conveyor systems for manufacturers, and this website is built for buyers evaluating that equipment on behalf of their employer, not for individual consumers purchasing goods for personal use. That distinction matters under US law, because most state privacy laws treat information tied to someone acting in a business capacity differently from information tied to a consumer, as explained in the state law section below.

## Information We Collect

TRF Industrial Automation collects information in three ways: information a visitor submits directly, information generated automatically by technology, and information from cookies and similar tracking technologies.

### Information Submitted Through Forms

Forms appear across the site wherever a visitor requests a specification, asks a question, or uses a calculator. Examples include the contact form on [Contact TRF Industrial Automation](https://trfautomation.com/contact/), specification and consultation requests on platform and product pages across the [robotic palletizing](https://trfautomation.com/robotic-palletizing/), [case packing](https://trfautomation.com/case-packing/) and [conveyor systems](https://trfautomation.com/conveyor-systems/case-conveyor-intralogistics/) pages, and inputs to the [palletizing ROI calculator](https://trfautomation.com/tools/palletizing-roi-calculator/). Each form states, at the point of collection, what information is requested and what it will be used for.

The information requested is limited to what is needed to respond to the inquiry: typically a business name, a business email address, a phone number, a job function, a company name, and details about the project or the question being asked. A field is included only if TRF has a defined use for it. TRF does not ask visitors for personal details unrelated to a business inquiry, such as a home address, a government identification number, or financial account information.

### Information Collected Automatically

When a visitor browses trfautomation.com, the site and its hosting and analytics infrastructure automatically record technical information about that visit. This can include the browser type and version, the device type, the operating system, the pages viewed, the time spent on each page, the referring website, an approximate location derived from the IP address, and similar diagnostic information. This information helps TRF understand which pages are useful to buyers, identify broken links or slow pages, and improve the site over time. It is analyzed in aggregate and is not used to build a profile of an individual visitor for advertising purposes.

### Cookies and Similar Technologies

Cookies are small files a website stores in a browser to remember information between visits or during a single session. TRF Industrial Automation uses cookies for three general purposes: to make the site function correctly, to understand how the site is used, and, where enabled, to measure the performance of marketing activity. The full breakdown of cookie categories, and how to control them, is in the cookies section below.

## How We Use Information

TRF Industrial Automation uses the information described above for a defined set of business purposes, and for no purpose beyond what a visitor would reasonably expect from submitting a form on a manufacturer's website.

| Purpose | What it looks like in practice |
|---|---|
| Responding to inquiries | Answering a specification request, scheduling a technical consultation, or sending requested information |
| Operating the site | Keeping forms, navigation, the payback calculator working correctly and securely |
| Measuring and improving the site | Understanding which pages, platforms and resources are useful to buyers, and finding technical issues |
| Communicating with prospects and customers | Sending information relevant to an inquiry already made, such as a follow up on a specification request |
| Supporting existing TRF equipment owners | Handling requests routed to the after-sales team once a visitor identifies as an existing customer |
| Meeting legal and security obligations | Maintaining records of consent, responding to lawful requests, and protecting the site and its data from misuse |

TRF Industrial Automation does not use information collected through this site to make automated decisions that produce a legal or similarly significant effect on a visitor, such as automatically approving or denying a commercial relationship. Every inquiry submitted through the site is reviewed by TRF's commercial or technical team before a response is sent.

## Legal Bases for Processing

Where a legal basis for processing is required, TRF Industrial Automation relies on one or more of the following: performance of steps requested by the visitor before entering into a business relationship, such as responding to a specification request; TRF's legitimate interest in operating, securing and improving a business website, balanced against the visitor's privacy interests; consent, where consent is the basis required, such as for non-essential cookies or for specific marketing communications; and compliance with a legal obligation, such as maintaining records required by applicable law.

Because TRF's website serves a business to business audience, much of the information collected relates to a person acting on behalf of their employer rather than to that person in a personal or household capacity. Several US state privacy laws draw a distinction based on that capacity, and the practical effect of that distinction is described in the state law section below.

## How We Share Information

TRF Industrial Automation does not sell personal information, and this website has no mechanism for a visitor to sell or transfer personal information to TRF. Information collected through the site is shared only in the following circumstances.

| Recipient category | Why information is shared | What is shared |
|---|---|---|
| Customer relationship management platform | To route, track and respond to inquiries submitted through forms | The information the visitor submitted, such as name, business email, phone and inquiry details |
| Website hosting provider | To operate, secure and deliver the website | Technical information needed to serve pages and store form submissions |
| Web analytics providers | To measure site usage and improve content | Automatically collected technical and usage information, subject to cookie consent choices |
| Email delivery service | To send a requested response, a resource, or a commercial email with an unsubscribe option | Business contact information needed to deliver the message |
| Parent company, Torfresma | Coordination between TRF and the manufacturer, for example on a project that involves manufacturing input | Business inquiry details relevant to the project, handled under this policy |
| Legal, regulatory or law enforcement authorities | Where required by law, or to protect the rights, property or safety of TRF, its visitors or the public | The minimum information necessary to respond to the request |
| A successor in a business transaction | If TRF is involved in a merger, acquisition or sale of assets | Information held at the time of the transaction, under confidentiality obligations |

Each vendor that processes personal information on TRF's behalf, including the hosting and analytics providers above, is bound by a data processing agreement that limits how the information may be used. This policy does not name specific vendors, because the list of processors can change as the site evolves; the categories above describe every type of recipient that touches visitor information.

## International Data Transfers

TRF Industrial Automation is a U.S.-based company and part of the Torfresma Group. The group's manufacturing organization, Torfresma Industrial Ltda, is based in Brazil. Because TRF and its service providers operate across borders, information submitted through this website may be transferred to, stored in, or processed in a country other than the one where the visitor is located, including the United States, where TRF's hosting infrastructure is based.

Where information collected in the United States is shared with the Brazilian manufacturing organization for a specific project, TRF applies safeguards appropriate to that transfer, and the receiving organization is bound to protect the information consistently with this policy. 

## Data Retention

TRF Industrial Automation retains personal information only for as long as it is needed for the purpose it was collected, to meet legal, accounting or reporting requirements, or to resolve disputes. Inquiry and form data is generally retained for the length of an active business relationship or an active sales process, plus a defined period afterward to support follow up and recordkeeping; analytics data is generally retained in a form that supports trend analysis without long-term storage of individual-level detail; and cookie consent records are retained for as long as needed to demonstrate compliance with consent requirements. At the end of the applicable retention period, information is deleted or de-identified.

## Security

TRF Industrial Automation applies administrative, technical and physical safeguards designed to protect information collected through this website, including encryption of information in transit and, where applicable, at rest, access controls limiting who can view stored information to personnel who need it to do their job, and audit logging of access to systems that hold visitor information. No website or online system can guarantee complete security, and TRF maintains a documented incident response process to identify, contain and address a security incident, with defined notification steps where notification is required by law.

## Your Privacy Rights Under US State Law

The United States does not have a single federal privacy law comparable to the general data protection frameworks used in some other countries. Instead, privacy regulation in the United States is set state by state, and the number of states with a comprehensive privacy law in effect has grown quickly: by 2026, twenty states had such a law in force, with Indiana, Kentucky and Rhode Island the most recent to take effect, each starting January 1 of that year. Most of these state laws follow a similar structure, commonly described as the Virginia model, which creates a shared core of rights and obligations across most states.

### The Rights These Laws Generally Provide

Across the states with a comprehensive privacy law, an eligible individual generally has the right to: confirm whether a business is processing information about them; access the information a business holds about them; correct inaccurate information; delete information, subject to exceptions such as legal recordkeeping obligations; receive a portable copy of the information they provided; and opt out of specific uses, such as targeted advertising, the sale of personal information, or profiling that produces a legal or similarly significant effect. Most of these laws also give the individual the right to appeal a denied request.

### The California Exception

California is the one state whose comprehensive privacy law, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), does not exempt business contact information from its scope. Every other state with a comprehensive privacy law provides an exemption for information tied to a person acting in an employment or business to business capacity, meaning the business contact details TRF collects through this site would often fall outside those other states' scope entirely. California does not draw that line, so a business contact in California retains rights under the CCPA/CPRA even when the interaction is entirely business to business.

Because TRF's website audience can come from any state, and because detecting a visitor's state reliably is not possible (state-specific detection depends on geolocation, which is defeated by a virtual private network and creates a real risk of applying the wrong state's rule to the wrong visitor), TRF Industrial Automation applies the California standard as the single floor for this entire website, for every visitor, rather than building separate rules state by state. In practice, this means every visitor to trfautomation.com, regardless of where they are located, receives the protections described in this policy, including the right to submit a rights request as described below, the Global Privacy Control honoring described below, and the "Do Not Sell or Share My Personal Information" link described below.

California residents specifically have the right to know what personal information is collected, used, disclosed or sold; the right to delete personal information, subject to exceptions; the right to correct inaccurate personal information; the right to opt out of the sale or sharing of personal information (TRF does not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of, but the mechanism is provided regardless); the right to limit the use of sensitive personal information (TRF does not collect sensitive personal information through this site); and the right to non-discrimination for exercising any of these rights.

### Other US States With Comprehensive Privacy Laws

States that had a comprehensive consumer privacy law in effect by 2026, alongside California, generally follow the Virginia model described above and typically exempt information tied to a business to business contact from the scope of the law. Because TRF's operation in the United States is entirely business to business, information collected through this site from a visitor acting on behalf of their employer is often outside the scope of these other states' laws by design. Where a state law does apply, for example because a visitor is interacting in a personal rather than business capacity, TRF Industrial Automation honors the rights described in the general framework above, applying the same request process described later in this policy regardless of which state's law technically applies.

## Canada: PIPEDA and Provincial Privacy Law

Visitors in Canada are protected by the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's federal private-sector privacy law, and by applicable provincial privacy legislation. PIPEDA is built around a set of fair information principles: accountability for the information a business holds, identifying the purpose of collection before or at the time of collection, obtaining meaningful consent, limiting collection to what is needed for the identified purpose, limiting use, disclosure and retention to that purpose, keeping information accurate, applying appropriate safeguards, being open about privacy practices, giving individuals access to their own information, and providing a way to challenge a business's compliance.

TRF Industrial Automation applies these principles to visitors from Canada in the same way it applies the California standard described above: a Canadian visitor can request access to, correction of, or deletion of the information TRF holds about them, using the request process described later in this policy. Commercial email sent to a Canadian address also follows Canada's Anti-Spam Legislation (CASL), which requires consent for commercial electronic messages, clear sender identification, and a working unsubscribe mechanism, consistent with what this policy already describes for commercial email generally.

## Mexico: Data Protection for Business Contacts

Visitors in Mexico are protected under Mexico's federal framework for the protection of personal data held by private parties, which gives individuals rights generally described as access, rectification, cancellation and opposition, sometimes referred to together as ARCO rights. TRF Industrial Automation extends the same request process described later in this policy to visitors in Mexico, so a business contact in Mexico can ask TRF to confirm what information it holds, correct it, delete it (subject to legitimate business or legal reasons to retain it), or object to a specific use.

## Cookies and Tracking Technologies

trfautomation.com uses cookies and similar technologies grouped into three categories.

| Category | Purpose | Requires consent |
|---|---|---|
| Essential | Needed for the site to function: page navigation, form submission, security and load balancing | No, these cannot be disabled through the cookie banner because the site cannot function without them |
| Analytics | Measures how visitors use the site, such as which pages are viewed and how forms perform, to improve content | Yes, these only load after a visitor accepts this category |
| Marketing and performance | Measures the effectiveness of marketing activity that brings visitors to the site | Yes, these only load after a visitor accepts this category |

On a first visit, trfautomation.com presents a cookie banner that allows a visitor to accept all categories, reject all non-essential categories, or choose category by category. Non-essential cookies do not load until the visitor makes an affirmative choice to accept them. A visitor's choice, along with the date, time, an associated IP address, and the version of this policy in effect at the time, is stored in an auditable consent record, so TRF can demonstrate what a given visitor agreed to and when.

A visitor can change cookie preferences at any time using the cookie settings link available on every page, or by adjusting browser settings to block or delete cookies, though blocking essential cookies may affect how parts of the site function, such as form submission.

### Global Privacy Control

Global Privacy Control (GPC) is a signal a visitor's browser or browser extension can send automatically to every website it visits, indicating a preference to opt out of the sale or sharing of personal information. California and Colorado require covered businesses to honor this signal as a valid opt-out request. TRF Industrial Automation configures trfautomation.com to detect and honor the Global Privacy Control signal automatically, for every visitor who sends it, regardless of location, treating it the same way as a manually submitted opt-out request.

### Do Not Sell or Share My Personal Information

TRF Industrial Automation does not sell personal information to third parties, and does not share personal information for cross-context behavioral advertising as that practice is defined under California law. Even so, a "Do Not Sell or Share My Personal Information" link is available in the footer of every page on trfautomation.com, consistent with California requirements, so a visitor always has a clear, visible way to confirm and exercise this choice.

## Children's Privacy

trfautomation.com is a business to business website intended for adults evaluating industrial automation equipment on behalf of a manufacturer or organization. It is not directed to children, and TRF Industrial Automation does not knowingly collect personal information from children. If TRF learns that information has been submitted by a child, TRF will take steps to delete that information.

## How to Exercise Your Rights

A visitor who wants to access, correct, delete, or receive a portable copy of the information TRF holds about them, or who wants to opt out of a specific use described in this policy, can submit a request in either of two ways: through a dedicated request form linked from this policy, or by writing to TRF's privacy contact address, also linked from this policy and from the [Contact TRF Industrial Automation](https://trfautomation.com/contact/) page. Both channels reach the same review process.

TRF Industrial Automation verifies each request using the information available from the original submission, such as matching the requester's email to the one on file, before acting on it, to protect against someone else requesting access to another person's information. TRF aims to respond within 45 days of receiving a verifiable request, which is the timeframe most US state privacy laws use as a standard, and this period can be extended once, with notice to the requester, where reasonably necessary. Every request received, along with the date it was received, the deadline for response, and the outcome, is logged so TRF can demonstrate compliance with this process.

There is no fee to submit a rights request under this policy, and TRF Industrial Automation does not discriminate against a visitor for exercising a right described in this policy, whether by denying a service, charging a different price, or providing a different level of support, beyond what is objectively related to the value of the information involved.

## Accessibility

TRF Industrial Automation built trfautomation.com to the Web Content Accessibility Guidelines (WCAG) 2.1, level AA, covering areas such as adequate color contrast, keyboard navigation, alternative text for images, and a semantic page structure that works with assistive technology. Accessibility is part of the site's design standard rather than a separate feature, and it applies across every page reachable from this domain.

## Changes to This Policy

TRF Industrial Automation may update this Privacy Policy as its practices, the site's features, or applicable law change. Each version of this policy is dated, and TRF maintains a version history so a visitor can identify what changed and when. A visitor's continued use of trfautomation.com after a revised policy is published constitutes acknowledgment of the update; where a change is material, TRF will provide a more prominent notice on the site.

## Questions About This Policy

TRF Industrial Automation welcomes questions about this Privacy Policy, about a specific request, or about how a particular part of the site handles information. The fastest way to reach TRF about this policy is through [Contact TRF Industrial Automation](https://trfautomation.com/contact/), or through the dedicated privacy request channel linked above. TRF Industrial Automation is based at 14840 W 107th St, Lenexa, KS 66215, and serves manufacturers across the [regions TRF supports in the United States](https://trfautomation.com/locations/) from that base. A customer who already operates TRF-supplied equipment and has a question that touches both privacy and an active [TRFCare](https://trfautomation.com/parts-and-service/#trf-care) relationship can reach TRF through either channel; both are reviewed by the same team.

[Contact TRF Industrial Automation](https://trfautomation.com/contact/)

---

TRF Industrial Automation | 14840 W 107th St, Lenexa, KS 66215, United States | (913) 242-8019 | Serving the United States