Privacy Policy

Effective date: September 10, 2026

This Privacy Policy explains how Afton Scientific, LLC, a Virginia limited liability company (“Afton Scientific,” “we,” “us,” or “our”), operating the Ready-To-Fill® brand, collects, uses, and shares personal information when you visit www.readytofill.com (the “Site”), submit our contact or enrollment forms, create an account, or purchase our products. It also explains the choices and rights you have regarding your information.

Afton Scientific is the data controller for the personal information described in this policy. Our contact details are at the end of this document.

What personal information do we collect?

Information you provide to us. When you contact us, enroll to become a customer, create an account, or place an order, we collect information such as:

Identifiers and contact details: name, email address, phone number, job title, company name, company website, and industry;
Business and enrollment information: number of employees, tax/VAT ID or Federal ID, billing and shipping addresses, estimated monthly purchase volume, preferred payment method, requested payment terms, whether purchase orders are required, and finance contact name, email, and phone;
Account credentials: your username and password (your password is stored in hashed form and is treated as sensitive information in combination with your login);
Commercial information: order history, products purchased, and transaction details. Payment card and bank details are transmitted directly to our payment processor, Stripe, and are not stored by Afton Scientific.

Information we collect automatically. When you use the Site, we and our service providers automatically collect internet activity and device information, such as IP address, browser and device type, pages viewed, referring pages, and interactions with the Site, through cookies and similar technologies (including Google Analytics, Google Ads, and marketing automation tracking). Your IP address may also be used to derive your approximate (city-level) location. For details and to manage your choices, see our Cookie Policy or use the Consent Preferences button available on every page.

Information from other sources. We may receive information about you from your colleagues (for example, when a coworker lists you as a finance contact on an enrollment application) and from our service providers (for example, delivery confirmations from shipping carriers or fraud signals from payment processors).

We do not knowingly collect special categories of personal data (such as health, biometric, or precise geolocation data) through the Site.

How do we use your information?

We use personal information to:

provide and maintain the Site and our services;
review and process enrollment applications, create and manage accounts, and make payment-terms decisions;
process, fulfill, ship, and invoice orders, and provide customer support;
respond to inquiries and communicate with you about your account and orders;
send business contacts relevant product updates, availability notices, and offers (you can unsubscribe at any time);
measure and improve the Site, our products, and our services, including analyzing usage trends;
deliver and measure advertising, including targeted advertising, subject to your cookie consent choices;
secure the Site and our systems, and prevent, detect, and investigate fraud and abuse; and
comply with legal obligations and enforce our agreements.

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing.

Legal bases for processing (GDPR)

Where the EU or UK General Data Protection Regulation applies, we process your personal information on the following legal bases:

Performance of a contract (Art. 6(1)(b)). To take steps at your request before entering into a contract — such as reviewing your enrollment application — and to perform our contract with you: managing your account, processing and shipping orders, invoicing, and providing support.

Consent (Art. 6(1)(a)). For non-essential cookies and similar technologies (analytics, advertising, and marketing automation tracking), which are set only after you consent through our cookie banner, and for any marketing communications where we rely on your opt-in. You may withdraw consent at any time — for cookies, through the Consent Preferences button; for emails, through the unsubscribe link — without affecting the lawfulness of processing before withdrawal.

Legitimate interests (Art. 6(1)(f)). Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights. Our legitimate interests are:

Direct marketing to business contacts: contacting representatives who submit our enrollment or contact forms, and sending existing customers relevant product updates, availability notices, and offers, with an opt-out in every message;
Network and information security and fraud prevention: logging IP addresses and access attempts, blocking malicious traffic, limiting repeated login attempts, and screening suspicious orders;
Administering our customer relationships: maintaining customer and prospect records in our CRM and marketing systems, reviewing enrollment applications, making credit and payment-terms decisions, and keeping accurate business records;
Improving our products, services, and Site: analyzing how our Site and services are used, in aggregate, to fix problems and improve the experience;
Establishing, exercising, or defending legal claims: retaining and using records needed to enforce payment terms, collect on invoices, and handle disputes; and
Business administration: internal reporting, audits, insurance, and sharing information within the Afton Scientific corporate group for internal administrative purposes.

You may object to processing based on legitimate interests at any time (see “Your rights under GDPR” below). If you object to direct marketing, we will stop that processing without exception.

Legal obligation (Art. 6(1)(c)). To retain transaction and invoice records as required by tax and accounting laws, to comply with trade and export-control requirements where applicable, and to respond to lawful requests from courts and public authorities.

Who do we share your information with?

We share personal information with the following categories of recipients:

Service providers (processors) who process it on our behalf and under our instructions: website hosting providers; Google (analytics, advertising, and tag management services); Salesforce (Account Engagement/Pardot, our marketing automation and CRM platform); Stripe (payment processing — see Stripe’s privacy policy at stripe.com/privacy); shipping and logistics carriers; and IT, security, and email service providers;
Our corporate group: Ready-To-Fill operates as part of Afton Scientific, and information may be shared within the group for the internal administrative purposes described above;
Advertising partners: subject to your cookie consent choices, advertising cookies may transmit identifiers and browsing activity to Google for ad measurement and targeted advertising (see “Your California privacy rights” for how this is treated as “sharing” under California law and how to opt out);
Legal and safety: where required to comply with applicable law, governmental requests, judicial proceedings, court orders, or legal process, or to protect our rights, our customers, or others; and
Business transfers: in connection with, or during negotiations of, a merger, sale of company assets, financing, or acquisition of all or part of our business.

We do not sell personal information in exchange for money.

International data transfers

We are based in the United States, and the Site is operated from the United States. If you access the Site or provide information from the European Economic Area, the United Kingdom, or other regions, your personal information will be transferred to and processed in the United States and in other countries where our service providers operate. Where required, we rely on appropriate safeguards for these transfers, such as the EU-U.S. Data Privacy Framework (for providers certified under it, including Google and Salesforce) and/or the European Commission’s Standard Contractual Clauses. You may contact us for more information about the safeguards applied to your information.

How long do we keep your information?

We keep personal information only as long as necessary for the purposes described in this policy: for the duration of our business relationship with you or your company, and afterwards as needed to comply with legal retention requirements (such as tax and accounting rules), resolve disputes, and enforce our agreements. Enrollment and inquiry information from prospects who do not become customers is retained for twenty-four (24) months from our last interaction. When we no longer need personal information, we delete or anonymize it; where information resides in backup archives, it is isolated from further processing until deletion is possible.

Cookies, Do Not Track, and Global Privacy Control

Details of the cookies we use, their durations, and their purposes are in our Cookie Policy. You can change your choices at any time using the Consent Preferences button on the Site.

Our Site does not respond to browser “Do Not Track” (DNT) signals, for which no industry standard exists. We do honor the Global Privacy Control (GPC) signal: where your browser transmits GPC, we treat it as a request to opt out of the “sharing” of your personal information via advertising cookies, as required by California law.

Your rights under GDPR

If you are located in the EEA or the UK, you have the following rights in relation to your personal information:

the right of access — to obtain confirmation that we process your personal information and receive a copy of it;
the right to rectification of inaccurate or incomplete information;
the right to erasure (“right to be forgotten”) in certain circumstances;
the right to restrict processing in certain circumstances;
the right to data portability — to receive information you provided to us in a structured, commonly used, machine-readable format;
the right to object to processing based on our legitimate interests; where you object to direct marketing, we will always stop;
the right to withdraw consent at any time, where processing is based on consent; and
the right to lodge a complaint with a supervisory authority in your EU member state or with the UK Information Commissioner’s Office.

To exercise any of these rights, contact us using the details below. We will respond within one month, extendable where permitted by law.

Your California privacy rights (CCPA/CPRA)

In the preceding 12 months, we have collected the categories of personal information described in “What personal information do we collect?” above: identifiers, commercial information, professional or employment-related information, internet or other electronic network activity, approximate geolocation derived from IP address, and account credentials (sensitive personal information). We collect them from you, from your colleagues, and automatically from your device, for the business and commercial purposes described in “How do we use your information?”, and we disclose them to the categories of recipients described in “Who do we share your information with?”.

Sale and sharing. We do not sell personal information for monetary consideration. Subject to your cookie choices, our use of advertising cookies may constitute “sharing” of identifiers and internet activity with Google for cross-context behavioral advertising, as those terms are defined by the CCPA/CPRA. You can opt out of this sharing at any time via the Consent Preferences button, the “Do Not Sell or Share My Personal Information” link on the Site, or by using a browser that sends the Global Privacy Control signal. We do not use or disclose sensitive personal information for purposes other than those permitted by the CCPA, and we do not knowingly sell or share the personal information of consumers under 16 years of age.

California residents have the right to: know what personal information we have collected about you, including the categories collected, the sources, the purposes, the categories of third parties to whom it is disclosed, and the specific pieces collected; delete personal information we have collected from you, subject to exceptions; correct inaccurate personal information; opt out of the sale or sharing of personal information; limit the use of sensitive personal information in certain circumstances; and non-discrimination for exercising any of these rights.

Exercising your rights. You may submit a verifiable consumer request by emailing us at tkliefoth@aftonscientific.com or through our contact page. We will verify your identity before fulfilling a request, which may require you to confirm information we already hold about you. You may designate an authorized agent to submit a request on your behalf with proof of authorization. We will respond within 45 days and will notify you if we need additional time. We do not charge a fee to process a verifiable consumer request unless it is excessive or repetitive.

Security

We use commercially reasonable technical and organizational measures to protect the personal information we hold, including access controls, security monitoring, and encryption of data in transit. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If you have reason to believe your interaction with us is no longer secure, please contact us immediately.

Children’s privacy

Our Site and services are intended for business users and are not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us personal information, contact us and we will delete it.

Links to other websites

The Site may link to external websites and services that we do not operate and that are not governed by this policy. We encourage you to review the privacy policies of any third-party sites before providing them personal information.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. The current version, with its effective date, will always be posted on this page, and material changes will be highlighted on the Site or communicated to account holders.

Contact us

For questions about this policy or to exercise any of your rights:

Afton Scientific, LLC (operating Ready-To-Fill®)
2020 Avon Court, Charlottesville, VA 22902, USA
Privacy contact: tkliefoth@aftonscientific.com
Web: www.readytofill.com/contact