Privacy Policy

1. Introduction and Scope

BarnettWorks provides computer integrated systems design services, including control system architecture design, PLC and SCADA integration, panel fabrication supervision, commissioning and field testing, legacy system retrofits and ongoing support contracts. In the course of that work we receive information from prospective clients, active clients, suppliers, contractors and visitors to this website. This policy describes how that information is treated.

This policy covers the public website at barnettworks.buzz and the business communications that surround it. It does not govern the internal control networks, programmable logic controllers, SCADA systems or historian databases that we design and commission for clients. Those operational systems run inside client facilities and are governed by the written agreements between our firm and each client, together with the client security policies that apply at each site.

Where a client engages us to integrate systems that process personal information belonging to the client organization, we act as a service provider or processor for that client. In those situations the client determines the purpose and scope of the processing, and the client privacy notice governs the relationship with the affected individuals. Our obligations are defined by the project agreement and by applicable data protection law.

2. Who Controls Your Information

The data controller for information collected through this website and through our business communications is Barnettworks Limited Co., located at 56 S Center St, American Fork - 84003-2340, United States (US). The company operates under the trading practice name BarnettWorks. Questions about this policy, or requests relating to personal information, may be directed to billing@barnettworks.buzz or to the postal address above.

We have not appointed a statutory data protection officer because our processing activities do not meet the thresholds that would require one. Responsibility for privacy compliance rests with the management of Barnettworks Limited Co., and any enquiry addressed to the company will be routed to the person accountable for the subject matter. We aim to acknowledge privacy enquiries within a reasonable period and to resolve them without unnecessary delay.

If you are located in a jurisdiction that grants you specific rights over personal information, this policy describes how those rights can be exercised and how we verify requests before acting on them.

3. Information We Collect

We collect information in three broad ways. First, information you provide directly through a contact form, an email, a telephone call or a written proposal. Second, information collected automatically by our web server and any analytics tooling we enable, such as the pages requested and the browser used. Third, information generated in the course of delivering engineering services, such as project correspondence, meeting notes and commissioning records.

The categories of personal information we may hold include names, business titles, employer names, business postal addresses, business email addresses and business telephone numbers. We may also hold the content of messages you send us, the dates and times of communications, and the technical records needed to diagnose website problems and protect our systems from abuse.

We do not seek sensitive categories of personal information, and we ask that you do not send us information about health, religious belief, political affiliation, trade union membership, genetic or biometric data, or similar special categories unless a project genuinely requires it and a lawful basis exists. If such information is ever needed for a specific engineering purpose, we will request it separately and explain the reason.

4. Information You Provide Directly

When you complete the form on our contact page, you may provide your name, your email address, a subject line and a message describing your project. That information is used to understand your requirements and to respond. Submission of the form prepares a message in your own mail application addressed to billing@barnettworks.buzz, which means the content travels through your email provider and ours rather than being stored on the website itself.

When you request a proposal or enter a project discussion, we may ask for additional business details such as your role, your company name, the site location, the equipment involved and the production constraints that shape the schedule. We collect only what is reasonably necessary to scope the work, prepare an accurate quotation and deliver the agreed scope safely.

If you telephone us, we may keep a written note of the conversation so that commitments made during the call are not lost. If you attend a site walkthrough, we may record attendance and the names of participants so that follow up correspondence reaches the right people. These records support accurate project administration and continuity when personnel change.

5. Information Collected Automatically

Like most websites, our server records technical information when a page is requested. This can include the internet protocol address associated with the request, the date and time, the page requested, the referring page, the browser and operating system description, and the result of the request. These records are used to operate the site, investigate faults, monitor for abusive traffic and understand which pages are useful to visitors.

We do not attempt to identify individual visitors from server logs unless it is necessary to investigate a security incident, to prevent fraud or abuse, or to comply with a legal obligation. Log records are retained for a limited period and then discarded according to the retention practices described in this policy.

If we enable an analytics service, it is configured to collect aggregated and technical data about how the site is used. We avoid configurations that build personal profiles of visitors, and we do not sell information derived from analytics. Any analytics provider we use is bound by contract to process data only for the purposes we specify and to protect it appropriately.

6. How We Use Information

We use personal information to respond to enquiries, prepare proposals, administer contracts, deliver engineering services, issue invoices, manage supplier relationships, maintain project records, protect our systems and comply with legal obligations. We may also use business contact details to follow up on an active opportunity or to inform existing clients about changes to systems we have commissioned for them.

We use technical and log information to keep the website available and secure, to diagnose errors, to measure the performance of pages, and to defend against malicious traffic. We use project information to plan work, coordinate with contractors, document commissioning results and support the systems we have delivered after handover.

We do not use personal information for automated decision making that produces legal effects, and we do not build behavioural advertising profiles from website activity. If we ever introduce a feature that changes this position, we will update this policy and provide any notice that applicable law requires before the change takes effect.

7. Legal Bases for Processing

Where data protection law requires a legal basis, we rely on one or more of the following. We process information to take steps before entering a contract and to perform a contract once it exists, such as preparing a proposal and delivering the agreed engineering scope. We process information for our legitimate business interests, including responding to enquiries, administering our operations, protecting our systems and supporting the products and services we have delivered, in each case balanced against the rights and expectations of individuals.

We process information to comply with legal obligations, such as tax, accounting, records and safety requirements. Where we rely on consent, for example if you ask to receive occasional business updates, you may withdraw that consent at any time and we will stop the relevant processing without affecting work already completed.

Where a client asks us to process personal information as part of an integration project, that client is responsible for identifying its own legal basis, and we process the information only on documented instructions consistent with our project agreement and applicable law.

8. Cookies and Similar Technologies

This website is built to work without advertising cookies. We may use a small number of strictly necessary cookies or similar storage mechanisms to support basic site functions such as remembering a navigation state during a visit. These mechanisms do not track you across unrelated websites and are not used to build advertising profiles.

If we introduce cookies that are not strictly necessary, we will provide clear information and, where required, request consent before those cookies are set. You can also control cookies through your browser settings. Blocking or deleting cookies may affect the convenience of some features, though the core content of this website remains readable without them.

Third party sites that we link to may set their own cookies once you visit them. We do not control those cookies, and we encourage you to review the privacy notices of any external site you reach from our pages.

9. How We Share Information

We do not sell personal information. We share information only in the limited circumstances described in this policy. We may share information with service providers who help us operate our business, such as email hosting, accounting and website hosting providers, each of whom is permitted to use the information only to provide services to us and is obliged to protect it.

We may share project information with contractors, panel fabricators, suppliers and engineering partners where that is necessary to deliver a client project. In those situations we share the minimum information required, and we require recipients to treat it confidentially and use it only for the project purpose.

We may disclose information where we are required to do so by law, by a valid legal process, or where disclosure is necessary to protect the rights, safety or property of our company, our clients, our personnel or the public. If our business is ever reorganized, merged or sold, information may transfer as part of that transaction, and we will take reasonable steps to ensure the recipient honors this policy for information previously collected.

10. Service Providers and Processors

We rely on a small number of external providers to run our website and business communications. These providers may include a hosting company that serves the website, an email provider that carries business correspondence, and accounting or document services that support invoicing and record keeping. Each provider is selected with care and is expected to maintain appropriate technical and organizational safeguards.

Where a provider processes personal information on our behalf, we put a written agreement in place that limits the processing to our documented purposes, imposes confidentiality obligations, requires reasonable security measures, and addresses the return or deletion of information when the relationship ends. We do not authorize providers to use our information for their own marketing purposes.

We review our provider relationships periodically and take reasonable steps to end relationships where a provider cannot demonstrate compliance with its obligations or where its practices create unacceptable risk.

11. International Data Transfers

Barnettworks Limited Co. is established in the United States, and information we collect is generally stored and processed in the United States. If you contact us from another country, your information will be transferred to the United States so that we can respond and, if relevant, deliver services.

Where a provider or a project requires personal information to be transferred internationally, we take reasonable steps to ensure the transfer is protected by appropriate safeguards, such as contractual commitments that require the recipient to protect the information to a standard consistent with applicable law.

If you have questions about where your information is held or about the safeguards that apply to a particular transfer, you may contact us using the details in the final section of this policy.

12. Data Retention

We keep personal information only for as long as it is needed for the purposes described in this policy, including to satisfy legal, accounting, engineering and reporting requirements. Retention periods vary with the type of information and the context in which it was collected.

Project records, including commissioning documentation and as built drawings that may contain the names of personnel and contacts, are typically retained for the life of the supported system and for a reasonable period afterward, because clients rely on that documentation for maintenance and because limitation periods for professional work can be long. Enquiry records are retained long enough to follow up on the opportunity and then removed when they are no longer useful.

When information is no longer required, we delete it or render it non identifiable in a manner that is reasonable for the media on which it is stored. Where information is embedded in backups, it may persist in those backups until the backup cycle is completed, after which it is removed in the ordinary course.

13. Security of Your Information

We use reasonable technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure or destruction. These measures include access controls that limit information to personnel who need it for their work, secure transmission where the technology permits, periodic review of the services we rely on, and clear expectations for the contractors we engage.

No method of transmission over the internet and no method of electronic storage is completely secure. We therefore cannot promise absolute security, and we encourage you to avoid sending highly sensitive information through ordinary email or through the contact form. If you need to provide confidential project material, contact us first so that an appropriate method can be arranged.

If we become aware of a security incident that affects personal information, we will investigate promptly, take reasonable steps to mitigate the effects, and provide notification to affected individuals and authorities where applicable law requires it.

14. Your Privacy Rights

Depending on where you live, you may have rights over personal information that we hold about you. These rights commonly include the right to be informed about how your information is used, the right to access a copy of it, the right to request correction of inaccurate information, the right to request deletion in certain circumstances, the right to restrict or object to certain processing, and the right to receive information in a portable format where the law provides for it.

Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect processing carried out before the request and does not affect processing that is based on another legal basis. You also have the right to lodge a complaint with a supervisory authority in the jurisdiction where you live or work, or where an alleged infringement occurred.

We do not discriminate against individuals who exercise their privacy rights. We will not deny service, charge a different price or provide a lower quality of service solely because a privacy right was exercised, except where the law permits a difference that is reasonably related to the information provided.

15. Access, Correction and Deletion

To exercise a privacy right, please contact us using the details in the final section of this policy. Describe the information concerned and the right you wish to exercise, and provide enough detail for us to locate the relevant records. We will respond within the period required by applicable law.

To protect your information, we may need to verify your identity before acting on a request. Verification usually involves confirming that you control the email address or telephone number associated with the records. If the request comes from an authorized agent, we may require evidence of the authorization. We will let you know if more information is needed and will not use verification as an excuse to delay a legitimate request.

Some requests may be granted in part or declined where an exception applies, for example where we must retain information to comply with law, to complete a transaction, to protect the rights of others, or to exercise or defend legal claims. When we decline a request, we will explain the reason to the extent the law allows.

16. Privacy for Children

This website and our engineering services are intended for businesses and professionals. We do not knowingly collect personal information from children, and we do not direct marketing at children. If you believe that a child has provided personal information to us, please contact us so that we can take appropriate action to remove it.

If we learn that we have collected personal information from a child in circumstances where consent from a parent or guardian was required and not obtained, we will delete the information promptly, subject to any legal requirement to retain it.

Parents and guardians who have questions about this section may contact us using the details provided at the end of this policy.

17. Marketing and Communications

We may send business communications to existing clients about changes, upgrades or support matters relating to systems we have delivered. We may also respond to an enquiry with follow up information about our services. We do not send unrelated advertising to individuals who have not asked to hear from us.

Where we rely on consent for marketing messages, you may withdraw that consent at any time using the unsubscribe instruction in the message or by contacting us directly. Operational messages that are necessary for a contract or for safety will continue to be sent regardless of marketing preferences, because they are part of the service you have engaged.

You can also ask us to update your contact preferences at any time, and we will apply the change to future communications within a reasonable period.

18. Third Party Links and Services

Our website may link to third party sites, documents or tools that we believe are useful. We do not control the privacy practices of those third parties, and this policy does not apply to them. When you follow a link to an external site, we encourage you to read that site privacy notice before providing any information.

Some pages may embed content or functionality provided by another party, such as a map or a document viewer. Embedded content may collect technical information directly from your browser. We choose integrations with care and keep them to a minimum, but we cannot guarantee the practices of an external provider.

If you believe that a third party linked from our site is handling information inappropriately, please tell us so that we can review the link.

19. Client Project and Engineering Data

In the course of designing and commissioning control systems we handle technical material such as drawings, tag lists, network configurations, program files and commissioning records. Much of this material belongs to the client and may be confidential. We treat it as confidential, use it only for the agreed project purposes, and store it in a manner consistent with our agreements and with the sensitivity of the material.

Some project records contain the names and business contact details of client personnel, contractors and operators. We handle that personal information as described in this policy and share it only as necessary to deliver the project. When a project ends, we retain the records needed to support the delivered system and to satisfy legal obligations, then delete or anonymize what is no longer required.

Where a client asks us to process personal information that appears inside an operational system, such as operator accounts or access logs, we act on that client instructions and the client remains responsible for the individuals whose information is processed. Our project agreement and the client privacy notice govern those activities.

20. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our services or applicable law. When we make a material change, we will revise the effective date at the top of the policy and, where appropriate, provide additional notice on the website or by direct communication.

We encourage you to review this policy periodically so that you remain informed about how we handle information. Continued use of the website after an updated policy takes effect means that you acknowledge the updated practices as described.

If a change would require your consent under applicable law, we will request that consent before the change applies to information previously collected.

21. How to Contact Us

If you have questions about this Privacy Policy, wish to exercise a privacy right, or need to raise a concern about how your information has been handled, please contact us. We take privacy enquiries seriously and aim to resolve them promptly and fairly.

When you contact us about privacy, please describe the information concerned and the outcome you are seeking. We will acknowledge the enquiry, explain the steps we will take, and keep you informed until the matter is resolved.