1. Scope of This Policy
This Privacy Policy governs personal information that BAEVLE LLC processes in connection with our public website and with the monitoring integration services we provide to facilities, structural engineers and industrial operators. It applies to visitors to our website, to prospective clients who contact us, to representatives of client organizations, and to individuals whose data reaches us in the course of a monitoring engagement.
This policy does not apply to the operational telemetry that our systems collect about structures and machinery, because that telemetry generally does not identify individuals. Where operational data does, by exception, contain information relating to an identifiable person, the relevant provisions of this policy apply to that information as well.
This policy also does not govern the practices of third parties whose services may be linked from our website or integrated into a client deployment. Those third parties maintain their own privacy notices, and we encourage you to read them.
2. Identity of the Data Controller
The data controller responsible for the information described in this policy is BAEVLE LLC, 349 E 1000 N, Orem - 84057-3303, United States (US). The organization operates as a computer systems design and monitoring integration practice.
Questions about this policy, requests to exercise privacy rights, and general privacy correspondence should be directed to the contact channels listed at the end of this document. We maintain a single point of contact for privacy matters so that requests are not lost between technical and commercial teams.
Where we act as a processor on behalf of a client organization, that client is the controller of the relevant personal data, and we process the data only under the client instructions and the terms of the applicable service agreement. In such cases, requests concerning the data should be directed to that client in the first instance.
3. Information We Collect
The categories of personal information we may collect include the following. We collect only what is reasonably necessary for the purposes described in this policy, and we do not collect sensitive categories of personal data unless a specific engagement requires it and the law permits it.
- Identity and contact details: name, job title, organization, email address, telephone number and postal address.
- Correspondence content: the contents of messages, enquiries, enquiries submitted through our contact form, and records of subsequent communication.
- Commercial information: details of services discussed, quotations, agreements, invoices and payment records.
- Technical information: internet protocol address, browser type and version, device type, referring pages, and the pages viewed on our website.
- Site access information: where a client engagement involves site visits, we may hold visitor logs and safety records required by the client site.
We do not seek to collect information about your health, racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data or biometric data, and we ask that you do not include such information in correspondence with us.
4. How We Obtain Information
We obtain personal information from several sources. You provide much of it directly when you contact us, complete a form, request a quotation or engage our services. We may also obtain information from the organization you represent when that organization provides contact details for its personnel as part of a monitoring engagement.
We obtain technical information automatically from your device when you visit our website, using the ordinary mechanisms described in the cookies section below. We may obtain limited information from publicly available registers, professional directories or referrals, but only where this is relevant to a legitimate business purpose and only to the extent permitted by applicable law.
Where an individual provides us with personal information about another person, for example by naming a colleague as a technical contact, that individual is responsible for ensuring the other person is aware of and accepts this policy.
5. Purposes and Legal Bases
We process personal information for the following purposes, each of which rests on a corresponding legal basis. Where applicable law requires consent as a legal basis, we obtain consent separately and you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
- Responding to enquiries: we process your contact details and message content to answer your question, which rests on our legitimate interest in conducting our business and, where you are an existing client, on the performance of a contract.
- Providing services: we process identity, contact and commercial information to deliver monitoring integration services, which rests on the performance of the contract between your organization and us.
- Billing and administration: we process commercial information to issue invoices, maintain accounts and meet financial record keeping obligations, which rests on contract performance and on our legal obligations.
- Improving our website and services: we process technical information to understand how the website is used and to improve its performance, which rests on our legitimate interest in maintaining an effective online presence.
- Legal compliance and disputes: we process information where necessary to comply with the law, to establish or defend legal claims, or to enforce our agreements, which rests on our legal obligations and legitimate interests.
- Marketing to business contacts: where we send business to business communications, we do so on the basis of legitimate interest and always provide a straightforward way to opt out.
When we rely on legitimate interests, we have carried out a balancing assessment to confirm that our interests do not override your rights and freedoms. You may ask us for a summary of that assessment using the contact details below.
6. Operational and Telemetry Data
Our services involve collecting telemetry from structures and machinery. This data is primarily non personal: it records vibration, strain, tilt, displacement, temperature, current and similar physical measurements. We treat this operational data with high standards of integrity because it forms a long term record that clients may rely on for years.
Operational data is generally owned by the client organization that commissions the monitoring, and we process it solely to deliver the agreed services and to maintain the archive. Where an operator identifier, a named shift, or a sign in record causes operational data to become linked to an individual, we apply the safeguards described in this policy to that linked portion and restrict its use to the purpose for which it was collected.
We design our systems so that operational telemetry is stored in open, exportable formats and kept under retention rules agreed with the client. This is separate from our own business records, which follow the retention schedule described below.
9. Data Retention
We keep personal information only for as long as it is needed for the purposes for which it was collected, or for as long as the law requires. The following retention principles guide our practice.
- Enquiries that do not lead to engagement: correspondence is generally retained for up to twenty four months so that we can pick up a conversation, after which it is deleted or anonymised.
- Client and contract records: retained for the life of the relationship and for a further period after it ends, to meet accounting, tax, insurance and limitation requirements.
- Operational telemetry: retained under the schedule agreed with the client, which is typically tied to the asset lifecycle rather than to a fixed short period.
- Website technical logs: retained for a short period sufficient for security, diagnostics and aggregate analysis.
When a retention period ends, we delete or irreversibly anonymise the information. Where deletion is not immediately possible because data is held in backups or archives, we isolate it from further processing until deletion becomes technically feasible, and we keep it secure in the meantime.
10. How We Protect Information
We apply technical and organisational measures appropriate to the sensitivity of the information we hold. These measures include access controls that limit information to personnel who need it, encryption of data in transit, secure configuration of the systems we operate, and regular review of our practices as the environment changes.
Our team is small and deliberately so; access to client information is granted on a least privilege basis and reviewed as roles change. We maintain procedures for detecting, investigating and responding to security incidents, and we will notify affected parties and relevant authorities where a breach occurs that is likely to result in a risk to rights and freedoms.
No method of transmission or storage is perfectly secure. While we work hard to protect information, we cannot guarantee absolute security, and we ask you to take reasonable care with your own devices, credentials and correspondence. If you believe your interaction with us has been compromised, contact us immediately so that we can investigate.
11. Your Privacy Rights
Depending on where you live, you may have some or all of the following rights in relation to your personal information. We honour these rights for all individuals who contact us, regardless of location, because consistent treatment is simpler and fairer than a patchwork of rules.
- Right of access: you may ask whether we hold personal information about you and request a copy of it.
- Right to rectification: you may ask us to correct information that is inaccurate or incomplete.
- Right to erasure: you may ask us to delete information where there is no continuing lawful reason for us to keep it.
- Right to restriction: you may ask us to limit how we use information while a concern is investigated.
- Right to object: you may object to processing based on legitimate interests, and to direct marketing at any time.
- Right to data portability: you may ask for information you provided to be supplied in a structured, commonly used, machine readable format.
- Right to withdraw consent: where processing relies on consent, you may withdraw it at any time.
To exercise a right, contact us using the details at the end of this policy. We will respond within the timeframe required by applicable law, and we will explain any reason why a request cannot be fully met. We will not charge a fee for a reasonable request, and we will not discriminate against you for exercising your rights.
12. Privacy for Children
Our website and services are directed at businesses and professionals. They are not intended for children, and we do not knowingly collect personal information from children. Where a person under the age of majority seeks to use our website, they should do so only with the involvement of a parent or guardian.
If we learn that we have collected personal information from a child without appropriate consent, we will take steps to delete that information promptly. If you believe a child has provided information to us, please contact us so that we can act.
13. International Data Transfers
BAEVLE LLC is established in the United States. Where we work with service providers or clients in other countries, personal information may be transferred to and processed in a country other than the one in which it was collected. Data protection laws in those countries may differ from those in your own.
When we transfer personal information across borders, we take steps to ensure it remains protected. These steps may include using providers who offer appropriate safeguards, entering into standard contractual clauses, and assessing the legal environment of the destination where required. You may contact us for more information about the safeguards we apply to a particular transfer.
For individuals in regions with specific transfer rules, we aim to provide an equivalent level of protection wherever the data is held, and we review our transfer arrangements as those rules evolve.
14. Third Party Websites and Tools
Our website may link to third party websites, and a client deployment may include third party components. We do not control those third parties and are not responsible for their privacy practices or content. This policy does not apply to information you provide directly to a third party.
Where we integrate a third party tool into a monitoring deployment, we select it with care, review its security posture, and limit the data it can access. Even so, we encourage you to review the privacy notice of any third party service you use, and to contact us if you have questions about a specific component in a deployment we have designed.
15. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices, in technology, or in the law. When we make a material change, we will update the date at the top of this page and, where appropriate, provide a more prominent notice on the website.
We encourage you to review this policy periodically. Your continued use of our website or services after an update takes effect indicates that you accept the revised policy. If you do not agree with a change, you may stop using the website and contact us to discuss any information we hold about you.
16. How to Contact Us
If you have questions about this Privacy Policy, wish to exercise a privacy right, or want to raise a concern about how your information has been handled, please contact us using any of the following channels.
- Organization: BAEVLE LLC
- Postal address: 349 E 1000 N, Orem - 84057-3303, United States (US)
- Email: support@baevlecore.buzz
- Telephone: +14177546832
Please include enough detail for us to identify you and understand your request. We may ask for additional information to verify your identity before acting, so that we do not disclose personal information to the wrong person. Correspondence about privacy matters is handled by the same small team responsible for our monitoring work.
17. Complaints and Supervisory Bodies
We would much rather resolve a concern directly than have it escalate, so please contact us first if you are unhappy with how we have handled your information. We will investigate promptly and explain what we find.
If you remain dissatisfied, or if the law in your region provides it, you may have the right to lodge a complaint with a supervisory authority responsible for data protection in your country. We will cooperate fully with any such authority. Details of the relevant authority depend on your location, and we can point you toward the appropriate body if you ask us.
18. Additional Regional Disclosures
United States
For residents of states with comprehensive privacy legislation, you may have rights to know, access, correct, delete, and opt out of certain processing. We do not sell personal information or share it for cross context behavioural advertising. Requests may be submitted using the contact details above, and we will respond as required by the relevant state law.
European Economic Area and United Kingdom
Where the General Data Protection Regulation or the United Kingdom version applies, our legal bases are set out in the purposes section of this policy. You have the rights described above and the right to complain to your local supervisory authority. Our processing of operational telemetry on behalf of a client is carried out under that client instructions and the relevant data processing terms.
Canada
For individuals in Canada, we handle personal information in accordance with applicable federal and provincial privacy law, and we provide access and correction rights consistent with those laws. Our privacy contact can assist with requests and questions.
Australia and New Zealand
For individuals in Australia and New Zealand, we handle personal information in line with the applicable privacy principles, including the principles concerning collection, use, disclosure, access and correction. Please contact us to make a request or raise a concern.
This policy is designed to give a single, coherent account of our practices across all of the regions in which we work. Where a regional rule gives you a stronger right than this policy describes, that stronger right applies, and our commitment to consistent treatment means we will not apply a lesser standard to anyone else.