Privacy Policy

Introduction and Purpose

HMS Endeavour LLC takes the protection of visitor information as seriously as a shipwright takes the strength of a hull plank. The Company is a computer systems design and related services business that plans, builds, and maintains integrated systems for regional operators across a range of industries. Every project, from a single control-room dashboard to a full operational technology coordination programme, depends on trust. That trust begins with a clear and honest explanation of how information moves through this website and through any project engagement that a visitor or a customer starts with the Company.

This Privacy Policy sets out the principles that guide the handling of personal information. It describes the categories of data that the Company may receive, the reasons those categories are gathered, the storage practices that protect them, the conditions under which information may be shared with a third party, and the choices that a visitor holds over that data. The document is written in plain language so that no one needs a legal dictionary to understand what happens to their information.

Where this policy speaks of the Company, doing business, or a fitter, it refers to HMS Endeavour LLC at 7533 S Center View Ct, West Jordan - 84084-5526, United States (US). Where it speaks of a visitor, a user, an operator, or a customer, it refers to the person or organisation that reaches this website or that engages the Company for services.

Reading this charter before using any service is recommended. By continuing to browse this website or by requesting project information, a visitor agrees that the practices below describe how their information will be handled. If any provision in this policy is unclear, the best course is to write to the privacy office at the contact details given in the final section before continuing to use the website.

Scope of This Charter

This Privacy Policy applies to information gathered through the website that the Company publishes for HMS Endeavour LLC and to information received directly in the course of a sales enquiry, a consultation call, a service order, or an ongoing project engagement. It covers data that a visitor submits through the contact page described on this site as well as information that arrives through email, telephone, or a project intake meeting.

The policy does not apply to websites owned or operated by a third party. When this site offers a link to an outside resource, that link leads away from the Company domain and the Company does not answer for the privacy practices found beyond it. A visitor who follows such a link should review the privacy notice of the destination site before offering any personal detail there.

The policy also does not reach into the internal data of a customer once a system has been handed over in a signed fitment. Software, dashboards, and platforms that the Company builds for an operator become the operator own systems. Questions about how that operator handles data inside those systems belong to the operator and not to HMS Endeavour LLC.

Who the Company Is

HMS Endeavour LLC is the data controller for the personal information described in this document. A data controller is the party that decides why and how personal information is processed. The Company registered business address is 7533 S Center View Ct, West Jordan - 84084-5526, United States (US), and it can be reached by phone on +17755105742 or by email through the address given on the contact page of this website.

The website was designed and developed by HMSEndeavour, the developer name tied to this project. That developer acts on instruction from the Company and under the Company policies. In practice, the same standards govern the developer and the Company alike, so no distinction of responsibility is made between them within this charter.

Because the Company pursues fits for regional operators across more than one state and more than one country, several legal frameworks may touch a single enquiry. When a visitor offers information from a location that grants a strong data protection right, such as a right found under European Union law, the Company honours those rights to the fullest degree possible even where a strict statute might not apply.

Information the Company Gathers

The amount of information the Company holds depends entirely on how a visitor chooses to reach out. A person who only reads the public pages of this website will give the Company little more than routine technical metadata. A person who completes a project enquiry will give the Company the details required to answer that enquiry well.

Identity details

When a visitor writes to the Company, connects by phone, or fills in a form, that visitor may offer a full name, a job title, the name of an employer, and a business address. These details let the Company know who is asking and which organisation the enquiry represents.

Contact details

The Company may hold a business email address and a telephone number for the purpose of replying to an enquiry, scheduling a call, sending a quotation, or maintaining a service relationship after work begins.

Project details

An operator that engages the Company for work often shares practical operational facts: the scale of a site, the machines in use, the current flow of data, and the desired outcome of a systems integration programme. These details are needed to design a programme that fits the operator site and are handled as carefully as any personal detail.

Correspondence

Emails, call notes, and meeting records are kept for the length of a project and for a reasonable period afterwards so that the Company can refer a customer back to an earlier decision or an agreed specification.

The Company does not set out to collect sensitive categories of health, religious, or political information, and it asks that visitors not send such material except where it is strictly necessary for a specific project such as a workplace safety programme.

Automatic Technical Data

Like most modern websites, this one records a modest set of technical facts each time a page loads. That record may include the type of browser in use, the type of device, the operating system, the language chosen by the browser, the general region derived from the network address, the page that referred a visitor to the site, the pages viewed while on the site, and the time of each visit.

This technical data is gathered for the sound operation of the website. It helps the Company notice when a page fails to load, detect suspicious traffic, and understand which parts of the site genuinely interest a visiting operator. The Company does not use this data to build a personal advertising profile of a reader, and it does not sell this data to any advertiser.

Much of this technical information arrives in a form that is not obviously personal. Because a network address can sometimes be tied back to a person, the Company treats log data with the same confidentiality as the rest of the charter describes.

How the Company Uses Data

Every use of personal information by the Company can be grouped under a small set of honest purposes. Keeping that list short and clear means a visitor always knows why the Company holds their details.

Response to an enquiry

When a visitor asks about a service, the Company uses the contact details to reply, to arrange a conversation, and to answer the questions that a visitor raises. No response is possible without this use.

Contract performance

When an operator signs a project order, the Company uses the details to prepare the systems integration programme, to schedule field work, to issue fitments, and to meet every term of the signed agreement.

Service and support

For ongoing programmes, the Company needs operational details to monitor installed platforms, to respond to a request for help, and to schedule routine maintenance on the operator timetable.

Legal obligation

Certain records must be kept to satisfy tax, accounting, and commercial law. The Company retains those records for as long as the applicable law demands, even if that period exceeds the ordinary retention shown later in this charter.

Security

The Company uses log data and account records to guard the website and the delivered platforms against unauthorised access, tampering, or abuse.

Lawful Bases for Processing

Where a legal framework around a visitor requires the Company to name the grounds on which it handles information, the following bases apply.

The Company processes detail that a visitor submits through an enquiry form or a written request on the basis of consent. Consent may be withdrawn at any time by telling the privacy office, and the withdrawal does not undo any handling that took place before it.

Once a contract exists between the operator and the Company, most processing is necessary for the performance of that contract. Preparing designs, issuing fitments, and delivering signed platforms all fall within this basis.

Some processing rests on the legitimate interest of the Company in keeping accurate business records, guarding against fraud, and improving the quality of future service. Where a legitimate interest is relied upon, that interest is balanced against the privacy of the individual, and the Company never processes more than is needed for the stated aim.

Records kept for taxes and accounting are processed because the law requires them. That legal obligation provides the lawful basis for that narrow category of data.

When the Company Shares Data

The Company holds a firm working rule: personal information is never sold to any party for any price. Beyond that rule, the Company shares information only in the narrow situations described here.

First, information may be shared with a subcontractor or a specialist supplier who is engaged to carry out a part of the work. A network engineer, a software tool provider, or a professional adviser may need a limited portion of a project detail to perform their own role. Each such party signs a duty of confidentiality and is told to use the information only for the assigned task.

Second, information may be shared where the law demands it. A court order, a legal warrant, or a statute may require the Company to disclose a record. In those circumstances the Company limits the disclosure to what the law actually requires.

Third, information may pass to an adviser such as an accountant or a lawyer where professional advice is needed about the Company own affairs. That transfer stays within professional secrecy rules.

Finally, if the Company itself is acquired or merged with another firm, the customer records would pass to the successor so that existing projects can continue without disruption. The successor would then honour this charter for the data it receives.

Third Party Tools and Vendors

To run a dependable service the Company makes limited use of established vendors that perform a defined job. Hosting for this website, email delivery, scheduling, and accounting software are the common categories. Each vendor receives only that information needed to fulfil its task.

Reasonable care is taken to select vendors that maintain acceptable privacy and security standards. The Company reviews what each vendor records and requires that vendors use the information for no purpose beyond the agreed service.

This website does not rely on advertising networks and does not load commercial ad trackers. The tools present on the page are there to make the site function or to let a visitor be heard, not to sell the visitor attention to an advertiser.

A visitor should know that a platform may be reached from the contact facilities of the site. When a visitor opens an email link or a telephone link offered on the site, the corresponding mail or phone provider will handle the message under its own privacy rules.

Cross Border Transfers

The Company operates from the United States, and its primary business systems are hosted there. When a visitor offers information, that information is most often stored on servers within the United States at 7533 S Center View Ct, West Jordan - 84084-5526, United States (US), or on infrastructure managed by a vendor that may place data in more than one region for resilience.

Where information from a visitor located elsewhere crosses a national border, the Company relies on safeguards that keep the protection of the data close to the level of its home jurisdiction. Standard contractual clauses and recognised adequacy agreements are the usual tools for such a transfer.

For a service used across multiple states, the chosen hosting region is documented in the project record so that an operator always knows where a copy of its data may legally rest.

Cookies and Equivalent Storage

A cookie is a small text file that a website places on a device to remember a choice or to keep a session dependable. The Company uses cookies and similar local storage only where they improve the working of the site or preserve a visitor choice.

Several categories may appear. Strictly necessary cookies keep the site secure and functioning, such as a token that protects a contact session. Preference cookies remember whether a visitor has dismissed a notice or chosen a language. Performance cookies, placed only by trusted tools, count visits so that the Company can see which pages matter most.

The Company does not use advertising or profiling cookies on this site. Nothing here follows a visitor around the wider web to serve a targeted ad, because the Company does not trade in that model.

A visitor can clear cookies at any time through the browser settings. Clearing a necessary cookie may cause a small part of the site to behave in a slightly less convenient way, but it will not close off access to the public information.

Retention Schedules

Information is not kept for a second longer than a purpose requires. The Company applies the following practical schedules to the main categories of data.

Enquiry records

A written enquiry and its reply are retained for up to twenty-four months after the last contact, so that a returning operator can be reminded of an earlier conversation. On reaching that limit the records are deleted or anonymised.

Project records

Documents tied to a signed project, including design notes and fitment lists, are kept for the life of the active contract and for a further period after close that reflects the nature of the system, generally between three and seven years.

Accounting records

Invoices and tax documents are held for the period set by tax law in the relevant state, which is commonly seven years from the end of the tax year to which they belong.

Technical logs

Raw server logs are overwritten on a short cycle, most often within ninety days, leaving only collapsed statistics that no longer identify a single visitor.

Security of the Information

Protecting stored information is treated like protecting a vessel in heavy weather, meaning that no single guard is trusted on its own. The Company layers several controls so that a failure in one does not expose the whole.

Transmission of data between a browser and the site is guarded with current transport encryption so that details cannot be read while they travel across the open network. Access to administrative records is given only to named staff and contractors who need it for their role, and each is bound by a duty of confidentiality. Strong passwords and multi factor checks guard the accounts that can reach customer records. Company devices are kept current with security fixes, and backups of project data are stored separately so that an accident does not destroy both a working copy and its archive.

No method of transmission or storage can be described as perfectly safe, and the Company makes that honest point rather than promise an absolute. On the discovery of any incident that puts personal data at risk, the Company notifies the affected individuals and the competent authority where the law requires it.

Privacy for Children

The services of the Company are built for professional operators and adult decision makers. The website is not aimed at children, and the Company does not knowingly set out to gather information from anyone below the age of sixteen.

If the Company learns that a child has offered personal information without a parent agreement, that information is deleted as soon as it can reasonably be removed. A parent or guardian who believes that a child has shared details can write to the privacy office, and the matter will be settled promptly.

Where a delivered platform inside a school or a youth programme involves young users, the operator who owns that system remains responsible for any child privacy duties that apply to it. Parents should direct such a question to the school or the programme operator first.

Your Data Rights

Every visitor holds a useful set of rights over the personal information the Company keeps. These rights are available without charge and are exercised by writing to the privacy office with enough detail to locate the record in question.

Access

A visitor may ask for a copy of the personal information the Company holds about them and for an explanation of how it is used.

Correction

If a stored detail has gone out of date or is wrong, a visitor may ask the Company to put it right.

Erasure

In the situations allowed by law, a visitor may ask that personal information be deleted. This does not reach records that law obliges the Company to keep, such as accounting files.

Restriction and objection

A visitor may ask that processing be paused in defined circumstances or object to processing founded on a legitimate interest.

Portability

Where processing rests on consent or a contract and takes place by automated means, a visitor may ask for a structured copy of that data to hand to another service.

The Company answers a verifiable request within the window the law allows, normally thirty days. Where a request is refused, the refusal is explained and the visitor is reminded of the right to complain to the authority that governs their location.

California Privacy Notice

Residents of California enjoy extra protections drawn from the California Consumer Privacy Act as amended. Under those rules the following notes describe the practice of the Company in the terms that Californian law uses.

The Company may collect identifiers such as a name, a network address, an email address, or a telephone number; commercial information tied to a purchase; and internet or electronic network activity limited to the pages of this site. It does not collect these categories for the purpose of building a profile about a California consumer, and it does not sell personal information.

A California consumer may ask to know what personal information the Company collected about them, why it was collected, and whether it was shared or sold. Because the Company sells nothing, the answer on that last point is always that no sale has occurred.

A consumer may also ask that personal information be deleted. A request of this kind can be made by the consumer directly or through an authorised agent who can prove authority. The Company verifies such a request by matching the supplied details against the records it legally holds and will not punish a consumer for exercising a privacy right.

Changes to This Policy

The shape of a data practice changes when the shape of a business changes, and so this charter is reviewed on a regular cycle. When the Company alters the way it gathers or uses personal information in a meaningful way, the revised policy is posted on this page and carries a new effective date at its head.

Substantial changes that affect continuing rights are announced through the channels connected to active projects, so that an operator already working with the Company learns of the change directly rather than by chance. Minor wording corrections do not trigger such a notice.

A visitor who returns to this page after a change is deemed to accept the revised charter by continuing to use the site. Anyone who does not agree with a revised version may close their connection to the site and, where relevant, tell the privacy office that a stored record is no longer wanted.