Privacy Policy

1 Introduction

BNK Bay operates as a computer systems design company under Polancos Fab Works LLC, a Utah limited liability company. We design and deploy custom server architectures, embedded systems, network infrastructure, and cybersecurity solutions for enterprise and government clients. This privacy policy applies to all information collected through our website bnkbay.buzz, any related subdomains, and any interactions you may have with our team via email, phone, or in-person consultations.

We recognize that privacy is important. The information we handle ranges from basic contact details to technical specifications you may share during project consultations. This policy is designed to be transparent about every aspect of our data practices so you can make informed decisions about sharing information with us.

This policy is effective as of the date indicated above and supersedes any prior versions. We encourage you to review it periodically as it may be updated to reflect changes in our practices or legal obligations.

2 Information We Collect

We collect several categories of information depending on how you interact with BNK Bay. The table below provides a comprehensive overview of each category, specific data points, and the purpose for collection.

We do not knowingly collect sensitive personal information such as social security numbers, government identification numbers, precise geolocation data, biometric data, or information about children under the age of 16. If you believe we have inadvertently collected such information, please contact us immediately so we can remove it.

3 How We Collect Information

We collect information through several methods, each described below. Understanding these methods helps you control what data you share and how.

Direct Collection from You

Most information we hold is provided directly by you when you:

• Fill out our contact form or request a consultation on bnkbay.buzz
• Send us an email at chat@bnkbay.buzz
• Call our office or meet with our engineers in person
• Submit technical specifications, system diagrams, or project requirements
• Sign a service agreement, statement of work, or non-disclosure agreement
• Provide payment details for invoicing and billing purposes
• Subscribe to any newsletter or technical bulletin we may offer

Automatic Collection

When you visit bnkbay.buzz, certain information is collected automatically through standard web technologies:

• Server logs record your IP address, browser type, referring page, and timestamp of each request
• Cookies and similar tracking technologies store session identifiers and preference data on your device
• Analytics tools aggregate anonymized usage patterns such as page views and navigation paths
• Security monitoring systems log access attempts and detect anomalous traffic patterns

Collection from Third Parties

In limited circumstances we may receive information about you from third parties:

• Business partners or contractors who refer you to our services
• Publicly available business directories and professional networks
• Industry conferences and trade shows where contact information is exchanged
• Credit reference agencies for business verification purposes with your consent

We do not purchase marketing lists or consumer databases, and we do not engage in automated data scraping or data brokerage.

4 How We Use Your Information

BNK Bay uses collected information for specific, legitimate business purposes related to our computer systems design services. Every use is grounded in at least one lawful basis: contractual necessity, legitimate business interest, legal obligation, or your consent.

Primary Business Purposes

• Service Delivery: Designing, building, and deploying custom computer systems based on your specifications and requirements
• Client Communication: Responding to inquiries, providing project updates, delivering technical documentation, and scheduling meetings
• Proposal and Quotation: Analyzing your infrastructure needs to prepare accurate technical proposals, cost estimates, and project timelines
• Billing and Invoicing: Processing payments, generating invoices, maintaining financial records, and fulfilling tax obligations
• Technical Support: Troubleshooting issues, monitoring deployed systems, performing maintenance, and responding to support requests
• Quality Improvement: Analyzing aggregate usage data to improve our website, refine our service offerings, and train our engineering team
• Legal Compliance: Complying with applicable laws, regulations, legal processes, and enforceable government requests
• Security: Detecting, preventing, and responding to fraud, unauthorized access, and other security incidents

Marketing Communications

We may send occasional emails about our services, industry insights, or technical developments relevant to your business. These communications are sent only to existing clients or individuals who have expressly opted in. Every marketing email includes an unsubscribe link, and you may opt out at any time by clicking that link or emailing us directly at chat@bnkbay.buzz. We do not engage in bulk unsolicited marketing.

Automated Decision Making

BNK Bay does not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects. All significant decisions regarding your projects, proposals, or accounts involve human review by our engineering staff.

5 Data Sharing and Disclosure

We limit the sharing of your information to specific circumstances and parties as described below. We do not sell personal information to anyone.

Service Providers and Subcontractors

We engage trusted third-party companies to perform functions on our behalf, including:

• Cloud hosting and infrastructure providers that host our website and internal systems
• Email service providers that facilitate communications with clients
• Payment processors that handle billing transactions (they receive only transaction data, not full card numbers)
• Analytics providers that help us understand website usage patterns using anonymized data
• Professional advisors including legal counsel, accountants, and auditors
• Component suppliers and fabrication partners when project specifications require third-party sourcing

All service providers are contractually bound to use your information only for the specific purposes we authorize and to maintain confidentiality and security standards at least as protective as those in this policy.

Legal and Safety Disclosures

We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to:

• Comply with a legal obligation, court order, or government request
• Protect and defend the rights, property, or safety of BNK Bay, Polancos Fab Works LLC, our clients, or the public
• Detect, prevent, or address fraud, security breaches, or technical issues
• Enforce our terms of service, contracts, and other agreements

Business Transfers

In the event of a merger, acquisition, reorganization, or sale of all or a portion of our assets, client information may be among the assets transferred. You will be notified via email or a prominent notice on our website of any change in ownership or use of your personal information, as well as any choices you may have.

With Your Consent

We may share your information for any other purpose with your explicit, prior consent. For example, we would seek your permission before publishing a case study about your project or listing your organization as a client reference.

6 Data Retention

We retain your information only for as long as necessary to fulfill the purposes described in this policy, or as required by applicable law. Our retention periods are determined by the following criteria:

• Active Client Relationships: We retain all project-related data for the duration of the client relationship plus seven years after project completion for warranty, support, and legal purposes
• Inquiry Data: Contact form submissions and consultation requests from individuals who do not become clients are retained for 18 months, after which they are deleted or anonymized
• Financial Records: Invoices, payment records, and tax documents are retained for a minimum of seven years as required by IRS regulations and Utah state law
• Website Logs: Server access logs and analytics data are retained for 12 months for security analysis and aggregated trend reporting
• Marketing Consent: Records of consent to receive marketing communications are retained until you withdraw consent, plus a reasonable period to evidence compliance
• Legal Holds: If litigation or a regulatory investigation is reasonably anticipated, relevant data may be preserved beyond standard retention periods

When information is no longer needed, we securely delete or anonymize it using industry-standard data destruction methods. Anonymized data may be retained indefinitely for analytical purposes as it cannot be linked back to any individual.

7 Security Measures

BNK Bay takes the security of your information seriously. As a computer systems design company, we apply our own engineering expertise to protect the data entrusted to us. Our security program includes the following measures:

Technical Safeguards

• Transport Layer Security encryption for all data transmitted between your browser and our servers
• Encryption at rest for sensitive stored data using AES-256 or equivalent standards
• Network segmentation with firewall policies that restrict access between system components
• Intrusion detection and prevention systems that monitor for malicious activity 24 hours a day
• Regular vulnerability scanning and penetration testing performed by qualified security engineers
• Secure software development practices including code reviews, dependency audits, and static analysis
• Multi-factor authentication for all administrative access to systems containing personal data
• Automated patch management to ensure all systems run current, supported software versions
• Redundant backup systems with off-site storage for disaster recovery

Organizational Safeguards

• Access to personal data is restricted to authorized personnel on a need-to-know basis
• All employees and contractors sign confidentiality agreements as a condition of engagement
• Regular security awareness training covering phishing, social engineering, and data handling
• Documented incident response procedures with defined escalation paths and notification timelines
• Annual review and audit of security policies, procedures, and access controls
• Vendor risk assessments for all third-party service providers with data access

Despite our best efforts, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information using commercially reasonable means, we cannot guarantee its absolute security. In the unlikely event of a data breach, we will notify affected individuals and relevant authorities as required by applicable law.

8 Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience, analyze site traffic, and improve our services. Below we explain what cookies are, which types we use, and how you can manage your preferences.

What Are Cookies

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work efficiently and to provide information to site owners. Cookies may be session-based (deleted when you close your browser) or persistent (remain on your device for a set period).

Categories of Cookies We Use

Managing Your Cookie Preferences

Most web browsers allow you to control cookies through their settings. You can:

• View cookies stored on your device and delete them individually or in bulk
• Block third-party cookies entirely
• Block cookies from specific websites
• Block all cookies from being set (note: this may impair site functionality)
• Set your browser to clear all cookies when you close it

Instructions for managing cookies in popular browsers can be found in each browser's help section or settings menu. For more information about cookies and how to manage them, visit aboutcookies.org.

Do Not Track Signals

Some browsers offer a Do Not Track feature that signals websites you visit that you do not want to be tracked. Currently, there is no universally accepted standard for how websites should respond to these signals. Our website does not currently alter its behavior when it receives a Do Not Track signal. However, as described above, you may configure your browser to block or delete cookies at any time.

9 Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information. BNK Bay respects these rights and provides mechanisms for you to exercise them.

Exercising Your Rights

To exercise any of the rights described above, please contact us using the details in Section 11. We will respond to your request within 30 calendar days. We may need to verify your identity before processing your request, which may require you to provide additional information. We will not discriminate against you for exercising any of your privacy rights.

California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act including the right to know what categories of personal information we collect and the right to opt out of the sale of personal information. As stated throughout this policy, BNK Bay does not sell personal information.

European Economic Area and UK Residents

If you are located in the EEA or the United Kingdom, our processing of your personal information is subject to the General Data Protection Regulation. The legal bases for our processing include contractual necessity, legitimate interests, legal obligations, and consent as described in Section 4. You may contact our EU representative or your local data protection authority with any concerns.

10 Policy Updates

We may update this privacy policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will revise the effective date at the top of this page.

For material changes that significantly affect how we handle your personal information, we will provide more prominent notice, which may include:

• Posting a notice on our website homepage for at least 30 days
• Sending an email notification to the address we have on file for you
• Requesting your renewed consent where required by applicable law

We encourage you to review this policy periodically to stay informed about how we protect your information. Your continued use of our website and services after any changes to this policy constitutes your acceptance of the updated terms, to the extent permitted by law.

A complete version history of this privacy policy is maintained internally and is available upon request by contacting us at chat@bnkbay.buzz.

11 Contact Information

If you have questions about this privacy policy, wish to exercise your data rights, or need to report a privacy concern, please contact us using any of the methods below. We strive to respond to all privacy-related inquiries within 3 business days.