Privacy Policy

1. Introduction

BHF Construction Inc, doing business as Blue Haven (hereafter Blue Haven, we, us, or our), is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website at bluehaven.buzz, use our services, or otherwise engage with us in the course of our business operations.

This policy applies to all individuals whose personal information we process, including visitors to our website, prospective clients, current clients, vendors, and job applicants. By accessing our website or using our services, you acknowledge that you have read and understood this Privacy Policy.

We are headquartered in Santa Clara, California, and our data processing activities are governed by applicable United States federal and state laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other applicable data protection frameworks relevant to our operations.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide when you interact with our website or communicate with us. This includes:

• Contact and identity information: Full name, email address, telephone number, company name, job title, and postal address.
• Project and inquiry details: Information you provide when you submit a contact form, request a consultation, or describe your project requirements, goals, and technical constraints.
• Communications: Records of correspondence when you contact us via email, telephone, or through our website, including the content of your messages and our responses.
• Business relationship information: Details related to our engagement with you as a client, vendor, or partner, including contract details, billing information, and service specifications.

2.2 Information Collected Automatically

When you visit our website, certain information is collected automatically through standard web technologies. This includes:

• Log data: Internet Protocol (IP) address, browser type and version, operating system, referring and exit pages, date and time stamps, and pages visited.
• Device information: Device type, screen resolution, and unique device identifiers.
• Usage data: Clickstream data, scroll behavior, time spent on pages, and interaction patterns with site elements.

We collect this information using cookies and similar tracking technologies. For more details, see Section 9 (Cookies and Tracking Technologies).

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Business intelligence and analytics providers that help us understand our market and improve our services.
• Publicly available sources such as professional networking platforms, corporate registries, and industry publications.
• Referral sources, where an existing client or partner introduces you to our services with your consent.

2.4 Information We Do Not Collect

We do not knowingly collect or process sensitive personal data (as defined under applicable law) through our website, including government-issued identification numbers, biometric data, health information, or information about children under the age of 16. Our website and services are not directed to individuals under 18 years of age.

3. How We Use Your Information

We use the information we collect for the following business and commercial purposes:

• Service delivery: To provide, operate, and maintain our computer systems design and consulting services, including communicating with you about project scope, timelines, and deliverables.
• Client engagement: To respond to your inquiries, schedule consultations, prepare proposals, and manage our ongoing client relationships.
• Website operation: To operate, maintain, and improve our website, including diagnosing technical issues, analyzing usage patterns, and enhancing user experience.
• Communications: To send you administrative messages, service announcements, and responses to your requests. With your consent, we may also send you information about our services, industry insights, or company news.
• Legal compliance: To comply with applicable laws, regulations, legal processes, and enforceable governmental requests; to enforce our Terms of Service; and to protect our rights, privacy, safety, or property, and that of our clients and the public.
• Business operations: To manage our internal operations, including accounting, auditing, data analysis, and business planning.
• Security: To detect, prevent, and address fraud, unauthorized access, and other illegal or harmful activities.

We will not use your personal information for purposes materially different from those disclosed in this policy without providing you notice and, where required by law, obtaining your consent.

4. Legal Bases for Processing

For individuals located in jurisdictions that require a lawful basis for processing personal data, we rely on the following legal grounds:

• Contractual necessity: Processing is necessary to perform a contract with you or to take steps at your request prior to entering into a contract.
• Legitimate interests: Processing is necessary for our legitimate business interests, including operating and improving our services, marketing our offerings to business clients, and ensuring the security of our systems — provided those interests are not overridden by your data protection rights.
• Consent: Where you have given clear consent for us to process your personal data for a specific purpose, such as receiving marketing communications.
• Legal obligation: Processing is necessary to comply with a legal obligation to which we are subject.

5. How We Share Your Information

We do not sell your personal information. We do not rent or trade your personal information. We share your information only in the following limited circumstances:

5.1 Service Providers

We engage trusted third-party service providers to perform functions on our behalf, including website hosting and analytics, email delivery, customer relationship management, and payment processing. These providers are contractually bound to process your information only as instructed by us and in compliance with this Privacy Policy and applicable data protection laws.

5.2 Professional Advisors

We may share information with our legal, financial, insurance, and other professional advisors in connection with the management and operation of our business, subject to confidentiality obligations.

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

5.4 Legal Requirements

We may disclose your information if required to do so by law or in the good-faith belief that such action is necessary to comply with a legal obligation, protect and defend our rights or property, act in urgent circumstances to protect the personal safety of users or the public, or protect against legal liability.

5.5 With Your Consent

We may share your information for any other purpose with your explicit consent or at your direction.

6. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, or as required to comply with our legal obligations, resolve disputes, and enforce our agreements. The specific retention period depends on the nature of the information and the purpose of its collection:

• Contact and inquiry information: Retained for the duration of our business relationship plus a period of three years following the last interaction, unless a longer period is required by law or for legitimate business purposes.
• Client project records: Retained for the duration of the engagement plus a period of seven years to comply with tax, accounting, and legal record-keeping requirements.
• Website usage data: Retained in anonymized or aggregated form for analytics purposes for up to 26 months. IP addresses in server logs are retained for 90 days.
• Marketing communications data: Retained until you withdraw your consent or opt out of receiving such communications.

When personal information is no longer required, we securely delete or anonymize it in accordance with our data disposal procedures.

7. Data Security

We implement and maintain administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of your personal information. These measures include:

• Encryption of data in transit using Transport Layer Security (TLS) and encryption of data at rest where technically feasible.
• Access controls that limit personal information to employees and service providers who have a legitimate business need to access it.
• Regular security assessments, vulnerability scanning, and penetration testing of our systems and infrastructure.
• Incident response procedures designed to promptly identify, contain, and remediate security events.
• Employee training on data protection obligations and secure data handling practices.

While we strive to protect your information, no method of electronic transmission or storage is one hundred percent secure. We cannot guarantee absolute security, but we continuously monitor and improve our security posture. In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law.

8. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

8.1 Access and Portability

You have the right to request access to the personal information we hold about you and, where applicable, to receive a copy of that information in a structured, commonly used, and machine-readable format.

8.2 Correction

You have the right to request that we correct inaccurate or incomplete personal information we hold about you.

8.3 Deletion

You have the right to request that we delete your personal information, subject to certain exceptions such as our need to retain information to comply with legal obligations or to exercise or defend legal claims.

8.4 Opt-Out of Marketing

You may opt out of receiving marketing communications from us at any time by clicking the unsubscribe link in any marketing email or by contacting us directly. Opting out of marketing does not affect our ability to send you transactional or service-related communications.

8.5 California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with specific rights, including:

• The right to know what personal information we collect, use, disclose, and share.
• The right to delete personal information collected from you, subject to exceptions.
• The right to correct inaccurate personal information.
• The right to opt out of the sale or sharing of your personal information. We do not sell or share personal information as defined under California law.
• The right to limit the use and disclosure of sensitive personal information. We do not collect or process sensitive personal information as defined under California law.
• The right not to receive discriminatory treatment for exercising your CCPA/CPRA rights.

To exercise any of these rights, please contact us using the details in Section 12. We will verify your identity before processing your request, which may require you to provide additional information. We will respond to verifiable consumer requests within the timeframes required by applicable law.

8.6 Exercising Your Rights

To submit a request to exercise any of the rights described above, please contact us at support@bluehaven.buzz or call +1 (224) 574-2309. We will acknowledge receipt of your request and respond within the legally required timeframe. If we deny your request, we will provide an explanation.

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and understand where our visitors come from. A cookie is a small text file stored on your device by your web browser.

9.1 Types of Cookies We Use

• Essential cookies: Necessary for the website to function properly. These cookies enable core functionality such as security, network management, and accessibility. They cannot be disabled.
• Analytics cookies: Help us understand how visitors interact with our website by collecting and reporting information anonymously. We use analytics to improve our content and user experience.
• Functional cookies: Enable the website to provide enhanced functionality and personalization, such as remembering your preferences.

9.2 Your Cookie Choices

Most web browsers allow you to control cookies through their settings. You can typically configure your browser to reject cookies, delete existing cookies, or alert you when a cookie is being placed. Please note that disabling certain cookies may affect the functionality of our website.

You can also opt out of certain analytics tracking by using industry-standard opt-out mechanisms. We honor Do Not Track (DNT) signals sent by your browser, though there is not yet a universally accepted standard for how companies should respond to DNT signals.

10. International Data Transfers

Blue Haven is based in the United States, and our website and services are operated from and hosted on infrastructure located in the United States. If you are accessing our website or services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where our servers and central database are located, and where data protection laws may differ from those in your jurisdiction.

By using our website or providing us with your information, you consent to the transfer of your information to the United States. We take steps to ensure that your information receives an adequate level of protection in the jurisdictions in which we process it, including through the use of standard contractual clauses or other appropriate safeguards where required by law.

11. Third-Party Links

Our website may contain links to third-party websites, plugins, and applications that are not owned or controlled by Blue Haven or BHF Construction Inc. Clicking on those links may allow third parties to collect or share data about you. We are not responsible for the privacy practices, content, or security of any third-party websites. We encourage you to read the privacy policy of every website you visit.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

13. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or operational needs. When we make changes, we will revise the Effective Date at the top of this policy and post the updated version on this page. If we make material changes, we will provide additional notice, such as by placing a prominent notice on our website or by sending you a direct communication.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website or services after any changes to this Privacy Policy constitutes your acceptance of the updated policy.