Privacy Policy

This policy applies to:

• Your visits to and use of the Site.
• Enquiries you send us through the Site's contact form, by email, or by other direct correspondence.
• Applications and enquiries from engineers who want to join our freelance delivery network.

This policy does not cover:

• Client project data.When we build or operate software for a client, any personal data inside that client's systems is processed on the client's behalf and under our written agreement with them — for example a services agreement, data processing addendum, or HIPAA business associate agreement — not under this policy. The client controls that data, and their own privacy notice applies to it.
• Third-party websites. Sites we link to have their own privacy policies, which we do not control.

Information you choose to give us

When you contact us, you decide what to send. Typically this is your name, email address, company name (optional), the service you are interested in, and the contents of your message. If a conversation progresses, we may also receive project details, a phone number, scheduling information, and contract or billing details.

Information collected automatically

Like nearly every website, our Site is served by a hosting provider that keeps standard server logs. These may include your IP address, browser type and version, device and operating system, the pages you requested, the referring page, and the date and time of the request. We use these logs for security, abuse prevention, and keeping the Site running.

What we do not collect

• We do not run third-party analytics, advertising, or behavioural tracking on the Site.
• We do not use advertising or cross-site tracking cookies.
• We do not ask for — and we ask that you do not send us — sensitive personal information such as Social Security numbers, government ID numbers, financial account credentials, or health information, whether through the Site or by unencrypted email.

Once you send the email, it is delivered and stored through our email provider in the ordinary way, and we handle it as described in the rest of this policy.

We do not use cookies to track you, profile you, or advertise to you. The Site is a set of static pages with no login, no shopping cart, and no analytics tag. Our hosting provider may set strictly necessary cookies required to deliver and secure the Site, and your browser may cache files locally so pages load faster.

Web fonts are bundled and served from our own domain at build time, so simply viewing the Site does not send a request to a third-party font service.

You can block or delete cookies in your browser settings. Because we do not rely on them for functionality, doing so should not break the Site.

We use personal information to:

• Respond to your enquiry and answer your questions.
• Scope, quote, and discuss a potential engagement, and assemble the right delivery team for it.
• Deliver, support, and invoice for services once we are working together.
• Evaluate engineers who apply to join our freelance delivery network.
• Operate, secure, and improve the Site, and detect or prevent fraud, spam, and abuse.
• Comply with our legal, tax, accounting, and contractual obligations, and establish or defend legal claims.

We do not use your information for automated decision-making that produces legal or similarly significant effects, and we do not sell your information. See Section 7 and Section 14.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We disclose it only in these situations:

• Service providers. Vendors who operate parts of our business on our behalf — website hosting, email, file storage, scheduling, and accounting — and who may use the information only to provide those services to us.
• Our delivery team. If your enquiry becomes a project, we share what is necessary with the vetted engineers and contractors assigned to it. They are bound by confidentiality obligations.
• Professional advisers. Lawyers, accountants, and insurers, where needed and under a duty of confidentiality.
• Legal and safety. Where we reasonably believe disclosure is required by law, subpoena, or legal process, or is necessary to protect the rights, property, or safety of NB-Tech Solutions, our clients, or the public.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this policy continuing to apply to the transferred information.

NB-Tech Solutions does not sell, rent, share, or disclose your mobile phone number, SMS opt-in information, or SMS consent to third parties or affiliates for marketing, promotional, or lead-generation purposes.

Mobile information and text messaging will not be shared with third parties or affiliates for their own marketing or promotional purposes. SMS opt-in consent is specific to NB-Tech Solutions and is not transferable to another organization.

We keep personal information only as long as we have a reason to. Enquiries that do not lead to an engagement are generally kept for up to 24 months, in case you come back to us. Records connected to an actual engagement — contracts, invoices, and correspondence — are kept for the life of the relationship and then for as long as tax, accounting, and limitation periods require, typically seven years. Server logs are kept for a short period, usually measured in days or weeks.

When information is no longer needed, we delete it or put it beyond further use. You can ask us to delete your information sooner — see Section 14.

Security is part of our craft, and we apply it to our own house as well as our clients'. The Site is served over HTTPS. We use reputable cloud providers, enforce multi-factor authentication on our accounts, limit access to personal information to the people who need it, and keep our systems patched.

No method of transmission or storage is completely secure, and ordinary email in particular is not a secure channel. We cannot guarantee absolute security, but if we become aware of a breach affecting your personal information we will notify you and any regulator as required by law.

Much of our work involves regulated data. When we build fintech or healthcare systems, we typically act as a service provider or processor for our client, and we handle personal data strictly on their documented instructions.

• Healthcare. Where an engagement involves protected health information, we will enter into a HIPAA business associate agreement with the covered entity or business associate, and that agreement governs our use and disclosure of that information.
• Financial services.Where an engagement involves consumer financial information, we work within the client's compliance framework, including applicable GLBA safeguards and payment-industry requirements.
• Access discipline. Wherever possible we work with anonymised, masked, or synthetic data in development and testing, and we grant production access only where it is genuinely needed.

If you are an end user of a product we helped build and want to exercise privacy rights over your data, please contact the company that operates that product. We will support them in responding.

We are based in the United States and our service providers are generally located there. If you contact us from outside the U.S., your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country. Where required for transfers from the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

The Site is a business-to-business website and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, email info@nb-techsolutions.com and we will delete it.

California residents

Under the California Consumer Privacy Act, as amended by the CPRA, you have the right to know what personal information we have collected about you and how we use and disclose it; to request deletion of it; to request correction of inaccurate information; to opt out of the sale or sharing of personal information; and to limit the use of sensitive personal information. You also have the right not to receive discriminatory treatment for exercising these rights.

In the past 12 months we have collected the categories identifiers (such as name, email address, phone number, and IP address) and commercial information (such as the services you enquired about), from you directly and from your use of the Site, for the business purposes described in Section 6. We have disclosed these categories for business purposes to the recipients described in Section 7. We have not sold personal information or shared it for cross-context behavioural advertising, and we do not do so today. We do not knowingly sell or share the personal information of consumers under 16.

Other U.S. states

Residents of states with comprehensive privacy laws — including Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and others — have comparable rights to access, correct, delete, and obtain a portable copy of their personal information, and to appeal a refusal. We extend these rights to all of our U.S. enquirers as a matter of practice.

EEA, UK, and Switzerland

If the GDPR or UK GDPR applies to our processing, you have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent at any time without affecting processing already carried out. Our legal bases are legitimate interests (responding to enquiries, running and securing our business), performance of a contract, legal obligation, and, where we ask for it, consent. You also have the right to lodge a complaint with your local supervisory authority.

How to exercise your rights

Email info@nb-techsolutions.comwith the subject line “Privacy Request” and tell us what you would like us to do. We verify your identity by matching the details you give us against our records, and we may ask for more information if we cannot confirm who you are. We respond within 45 days, and will tell you if we need a permitted extension. You may use an authorised agent, in which case we will ask for written proof of their authority. There is no charge for a reasonable request.

• Email and phone. You can ask us to stop contacting you at any time by replying to any message or emailing info@nb-techsolutions.com. We do not run marketing mailing lists or text-message campaigns from the Site — see Section 8.
• Browser controls. You can block cookies, use private browsing, or use a VPN. The Site is designed to work without tracking you.
• Global Privacy Control. Because we do not sell or share personal information, there is nothing for an opt-out signal to switch off — but we honour GPC signals as a matter of course.

Browsers can send a “Do Not Track” signal, but there is no common standard for how sites should respond. We do not track visitors across third-party websites, so our behaviour is the same whether or not the signal is set.

We may update this policy as our services, technology, or the law changes. When we do, we will revise the “Last updated” date at the top of this page, and for material changes we will make the update prominent on the Site. Continued use of the Site after an update means you accept the revised policy.

Questions, concerns, or requests about this policy or your personal information are welcome — we would rather hear from you than have you wonder.