Company identity: NUHUEMAN, L.L.C., with an address at 215 N Quince St APT 12, Salt Lake City - 84103-4569, United States (US). The developer behind this website and the systems described across these pages is Nuhueman. This document explains in plain and careful language the way that we, NUHUEMAN, L.L.C., collect, store, use and protect information.
This privacy policy applies to people who visit any of the pages within the NUHUEMAN website, people who send an enquiry through the flight log contact form, people who telephone the number published on our pages and people who correspond with the crew by email. The same rules protect information that we handle while we deliver services under a written agreement with a client.
We want you to understand precisely what we hold, the reason we hold it and how long we keep it. We do not sell personal data. We do not build secret profiles of visitors for the benefit of unknown advertisers. We treat every record of a real person with the same care that a flight crew treats the lives of its passengers. That is not a slogan; it is the operating rule that shapes every storage decision we make.
When we say the word we or our, the subject is NUHUEMAN, L.L.C. When we say the word you, we mean the individual reading this page or the person whose information may be at issue. If you act for a company or other legal body, your personal information is still covered here. This policy exists so that there is never confusion about who makes which decision with which piece of data.
Personal data is any information that can identify you as an individual, either on its own or when combined with other facts. The exact categories of data we collect depend on how you use the site and what you ask us to do. Most visitors to the marketing pages give us nothing at all beyond the limited automatic signals described later in this document.
When you use the flight log form, we collect the name that you type into the field, the email address that you type, the subject line that you write and the full text of the message that you leave. If you telephone our published number, we hear your voice for the duration of the call and we may note your name, phone number, the time of the call and a summary of the reason for the call. If you email us directly, the content of your mail, your address line and any attachments add themselves naturally to the record.
If we then enter a working relationship, we may collect a company name, a business tax identifier where relevant, an invoice address, delivery and site addresses for the technical work, names and titles of people authorised to make decisions, and any other detail that the engagement reasonably requires. We keep that collection narrow. We ask for what we need and we decline what we do not.
Information reaches us in three general ways. First, you provide it actively, such as when you complete the form, write a note in a meeting, send a document or give an address over the phone. Second, the systems that host this website and the other services we operate generate records automatically, such as the address of the device that connected, the general page that was requested and the time of the request. Third, information arrives indirectly because another member of your team, a partner, a supplier or a referral source shares contact details with us in good faith and with your knowledge.
We prefer that you notice when data passes to us. In the automatic category there is little to notice, because a web server performs routine bookkeeping the moment any browser reaches it. That routine work is common and harmless, yet we still describe it here so that the picture of our data handling is complete rather than selective.
We use the information that you give us only for the purposes that brought you into contact with the crew. A message sent through the flight log is read by the relevant members of the team and is used to reply, to assess whether our services fit your needs and to prepare a sensible first discussion. We do not broadcast your message to a wider mailing list without your agreement.
Contact information collected for an engagement is used to run the engagement itself: to schedule calls, to send statements and records, to coordinate site visits, to notify stakeholders of maintenance or incidents and to keep the project moving. Where the law asks us to hold certain records for accounting or tax reasons, we hold them for exactly the period the law demands and no longer.
We may use a combined, anonymised view of web traffic to decide which page content is clear to readers and which section confuses them. That kind of aggregate understanding does not identify you and it is never sold. We also use limited details to defend the website against abuse, fraud and repeated technical attack.
This policy seeks to operate sensibly under the data protection rules that apply in the United States and, where relevant, to persons located in the European Economic Area, the United Kingdom and Switzerland. We rely on several bases for the collection and use of personal data.
Consent covers cases in which you give us information after a clear and informed choice, such as the decision to submit a contact form or to join a mailing list you have requested. Contract covers the handling that is necessary to perform an agreement with you or to take steps at your request before an agreement exists. A legitimate interest supports routine operations that any reasonable person expects, such as answering an enquiry directed to us, protecting the security of our systems and keeping honest records of our business correspondence.
Finally we rely on a legal obligation where a statute or regulator requires us to keep or to disclose certain records. We keep the reasoning simple. We never choose a stretched legal theory when honest words would do.
We protect personal data with controls that are proportionate to the sensitivity of the data and the size of the operation. Accounts are protected by strong and unique passphrases, two factor authentication is used where the platform allows it, and access to correspondence is limited to the members of the team who need it to do their job.
Our systems and the site itself run on infrastructure managed with ordinary security practices: timely updates, least privilege permissions, encrypted transmission for information that must stay private in transit, and monitoring aimed at spotting unusual behaviour early. Staff are expected to treat material they see with confidentiality that survives the end of an employment or a contract.
No method of storage on a computer network is perfect, and no honest company will promise that one exists. What we can promise is a realistic discipline: we identify value, we restrict who can touch it, we keep the roads to it defended and we review our arrangements whenever a risk becomes visible to us.
We keep personal data only for as long as the purpose for which we collected it continues, plus the extra period that legal, accounting and prudent business reasons require. A general enquiry answered and closed may be removed from the active record after a modest period, while an engagement record that contains invoices and tax documents is retained for the period required by the tax rules of the relevant jurisdiction.
Where a specific law tells us how long to keep a record, that law sets the ceiling and we do not exceed it. Where no such rule applies, we keep the smallest reasonable record for the shortest reasonable time and we delete or anonymise data once the reason for holding it has passed. Anonymised data, from which we remove direct personal identifiers, may be kept for analysis and operations without the same personal data obligations applying to it.
To understand which pages are useful, the site may rely on a traffic measurement service that counts visits, page requests, the general city region of a connection and the kind of device a visitor uses. That service compiles reports about the whole audience and never about you as a single person.
We read those reports to improve navigation, to fix pages that load slowly and to learn which explanations people actually reach. We disable any advertising related sharing offered by such a service, because we do not run ads against this audience and we do not want your visit to feed some machine that follows you around the internet.
The site may reference or connect toward services that are not operated by NUHUEMAN, such as a mapping service that helps a visitor find the area of our office, an email or scheduling system used for communication, or the website of a client or a professional colleague. When you leave the NUHUEMAN pages for one of those destinations, the operator of that destination decides how your data is handled there.
We cannot promise about the practices of another operator, and this policy does not extend to them. We do try to choose services with respectable privacy records, but the responsible step is to check the policy of any site you visit after leaving ours. The links we share are provided for your convenience and a link is not an endorsement of every statement that the destination makes about its own data handling.
When you send the flight log or email us, the message and the address it comes from are used to continue the conversation. We treat that address as correspondence, not as permission to send you a newsletter. Separate and clear consent is needed before we add you to any list that sends periodic material.
If we contact you later about something related to an active engagement, that contact serves the work itself. If you tell us clearly that you do not want further messages, we honour that direction and we remove you from routine correspondence without argument. Every marketing message we send carries a way to opt out, and opting out never affects the service we owe you under an existing agreement.
Our site, our services and our engineering work are intended for adults who make business decisions about software. We do not deliberately collect personal data from children, and we do not design games, competitions or amusements aimed at people younger than thirteen years of age under the applicable law of the United States.
If we learn that we have received information about a child through a form or a message without proper parental involvement, we delete that record promptly. If you are a parent or guardian and you believe a child sent us something, write to the email address given at the end of this policy and we will act quickly to remove it.
You decide how much you tell us. You may read the pages without submitting a word of your own, and you may use the site with cookies switched off in your browser. You may choose a nickname or a business contact method when writing an enquiry, as long as the reply can still reach you.
For a record that we already hold, you may ask us to correct it, to stop certain uses of it or to remove it where the law permits removal. You may withdraw a consent that you previously gave, and doing so will not affect the lawfulness of the work we completed before you withdrew it. We aim to make every request easy and to answer clearly whichever way the facts point.
In many jurisdictions you hold the right to ask a business the question: what do you hold about me, and why. If your enquiry is reasonable and your identity is confirmed, we will tell you whether we hold personal data about you, describe it in plain terms, explain the purposes of the holding and name, where we can, the categories of recipient with whom it was shared.
You may also ask us to correct inaccurate records, to complete records that are incomplete for the purpose they serve, to erase data where no legitimate reason for keeping it remains and to restrict or object to certain types of automated processing where the law gives you that power. We will respond within the time limits that apply to our relationship and we will never charge a fee just because you asked a fair question.
The company is organised in the United States and much of our work happens under state consumer protection rules, including those of Utah where the company is located. State privacy laws across the country share a family of useful ideas: transparency about categories of data, the ability to opt out of the sale of personal data, and notice of rights to access and to delete information.
We confirm plainly that NUHUEMAN does not sell personal data to third parties. Because we do not sell data, the rights that attach to a data sale frequently do not apply to our ordinary practice. If a state law nonetheless extends a right to access, correct, delete or restrict, we respect it for any person who meets the law; tests of residency will be answered together in good faith rather than evaded
Personal data you send us may be stored on and processed by infrastructure located in the United States and in other countries where our service providers keep their systems. Our promise is that wherever your information rests, it is treated under this policy, and that any international transfer is made only toward a destination that offers a reasonable level of protection recognised where you live.
For people based in regions that impose strict rules about export of data, we rely on recognised transfer instruments and contractual safeguards rather than on luck. If you want the technical detail of where a particular record sits, ask us through the detail that ends this page and we will give you an honest answer about the travels of your own information.
No company wants a breach, yet a mature firm plans for the one that could arrive. We keep an incident process that identifies what happened, limits the damage, finds the root cause and decides what must change so that the same fault cannot recur. That process protects both the people whose data is affected and the integrity of the systems that depend on us.
Where a law requires us to notify you about a breach that raises a real risk to you, we will tell you without unreasonable delay and we will describe the categories of information involved and the steps we are taking. Where the law does not demand a notification but the situation deserves one for your peace of mind, we will make a careful judgement and lean toward honesty in our communications with you.
This document can change as our practices, the law or our services evolve. When a change is only a tidy rephrasing, we may update the page without ceremony because the meaning of the paragraph has not moved. When a change affects your rights in a meaningful way, such as a new category of data or a fresh purpose for existing data, we will update the effective date and, where we know how to reach you and the change matters, we will let you know before the new text binds you.
We encourage you to revisit this page from time to time and to read the version currently published, because the version in force is the one that governs. Earlier versions are not retracted by a later edition; if you have a question about the way we did something under an old version, ask us and we will answer against the version that was active at the time.
Questions, requests and privacy enquiries are welcome and are answered by a person who works inside NUHUEMAN rather than by a machine. Do not hesitate to put any concern to us in ordinary English. We value a pointed question above silent unease, because a pointed question lets us fix something and silent unease does not.
NUHUEMAN, L.L.C.
215 N Quince St APT 12, Salt Lake City - 84103-4569, United States (US)
Contact email: update@nuhueman.mom
Phone: +13313139264
Office hours run Monday to Friday from nine in the morning to half past five in the evening, Mountain Time. A privacy request is honoured promptly regardless of office hours; if a matter is urgent and the office is closed, leave a clear message and the crew will treat it as the first task of the next day.