Privacy Policy

Scope and Purpose

BNS Works LLC, a limited liability company organized under the laws of the State of Utah, operates this website and provides computer systems design and related technical services to business clients. Developer: BNS Works. This Privacy Policy explains how we collect, store, process, share, and protect personal information when you visit https://www.bnsworks.autos (the Site) or interact with us through email, phone, or in-person communications. It also describes your rights regarding your data and how you can exercise them. By accessing or using the Site, you acknowledge that you have read and understood the practices described in this policy.

We are committed to protecting the privacy of all individuals who visit our website or engage our services. This policy applies to all information collected through the Site, as well as information provided to us through offline channels such as phone calls, email correspondence, and service agreements. It does not apply to third-party websites that may be linked from our Site, and we encourage you to review the privacy policies of those sites separately.

Information We Collect Personal Identifiers

• Full legal name of individuals representing your organization, including first name, middle initial, and surname
• Business name, company registration number, chamber of commerce listing, and industry classification
• Job title, department name, professional role, and area of responsibility within your organization
• Business address including street name and number, city, state or province, postal code, and country
• Business telephone number including country code and area code, and business email address
• Professional licensure or certification numbers when required for service delivery or compliance verification

We collect these identifiers when you fill out a contact form on our website, send an email inquiry to any of our listed addresses, request a quote or proposal for services, enter into a service agreement with us, or provide them during project onboarding and ongoing communication. We do not require you to provide any personal identifiers simply to browse the Site; however, certain features and services are not available without submitting this information.

Technical Data

• Internet Protocol (IP) address assigned to your device by your internet service provider
• Browser type and version (for example Chrome 124, Firefox 128, Safari 17) and the browser language setting
• Operating system and device platform (Windows, macOS, Linux, iOS, Android, and specific version numbers)
• Referring URL including the website or search engine that directed you to our Site
• Date and time of each page request, pages visited, time spent on each page, and navigation path through the Site
• Screen resolution, color depth, installed browser plugins, and other technical parameters transmitted by your browser

This technical data is captured automatically by our web server and hosting infrastructure for every visitor. It is collected through standard HTTP request headers and server log files. This information helps us diagnose server problems, improve site navigation, detect and prevent fraudulent or abusive access, and generate aggregate statistics about how visitors use our Site.

Communication Records

• Contents of email messages and any attachments you send to our corporate email addresses
• Notes and summaries from telephone conversations when you call our office, maintained for continuity of service
• Records of chat or messaging correspondence conducted through our website or third-party communication platforms
• Feedback, survey responses, and testimonial submissions you voluntarily provide
• Technical support case histories including descriptions of issues, troubleshooting steps taken, and resolution outcomes

We retain communication records for the purpose of maintaining accurate project histories, resolving disputes, improving our service quality, and meeting legal and regulatory recordkeeping requirements. These records are stored in our internal systems and are accessible only to authorized BNS Works personnel on a need-to-know basis.

How We Collect Information Direct Voluntary Submission

The majority of personal information we process is provided directly by you through deliberate actions. This includes filling out contact forms on our website, sending email messages to our team, submitting service requests or project briefs, providing billing and shipping information, completing satisfaction surveys, and subscribing to any newsletters or updates we may offer. In each of these cases, you choose what information to share with us and can decide to omit any fields you consider unnecessary for the specific interaction.

Automatic Collection

When you browse our Site, certain technical information is automatically recorded by our servers and hosting infrastructure. This collection happens at the network and server level and does not involve active input from you. The data captured includes IP addresses, browser characteristics, operating system details, page access patterns, and referring URLs. This automatic collection is a standard feature of HTTP protocol operation and cannot be avoided for visitors accessing the Site. However, we do not combine this technical data with personal identifiers to track individual browsing behavior across the web.

Third-Party Sources

• Public business directories and professional association listings that contain contact information for organizations in our service area
• Corporate websites and professional networking platforms where you or your organization have published business contact details
• Referrals from existing clients who have given us your contact information with your consent
• Public procurement databases and government business registries where such data is lawfully accessible

When we receive your information through third-party sources, we apply the same data protection standards as if you had provided it directly. We will inform you of the source of your data upon request and will not use data obtained from third-party sources for purposes incompatible with the original collection context.

How We Use Your Information

We use the information we collect exclusively for legitimate business purposes directly related to our computer systems design and technical consulting services. Your information supports the following specific processing activities:

• Responding to inquiries, providing quotations and proposals, and communicating with you about potential or active service engagements
• Delivering contracted services including system architecture design, integration engineering, technical consulting, performance optimization, and managed support
• Sending administrative communications such as contract documents, invoices, payment reminders, project updates, and change orders
• Improving our website, services, and customer experience through analysis of aggregated usage patterns and feedback
• Complying with legal and regulatory obligations including tax reporting, professional liability requirements, and data protection laws
• Protecting the security and integrity of our systems, networks, and data through monitoring and access controls
• Enforcing our Terms of Service and other contractual agreements with you or your organization

We do not use your personal information for automated decision-making or profiling that produces legal effects concerning you. We do not sell your personal information to any third party for any purpose. We do not use your data for behavioral advertising or cross-context behavioral tracking.

Legal Basis for Processing

Our data processing activities are grounded in one or more of the following legal bases under applicable privacy laws:

• Contractual necessity. Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract. This covers most of our service-related processing, including proposal preparation, project execution, invoicing, and technical support.
• Legitimate interests. Processing is necessary for our legitimate business interests in operating our website, providing professional services, maintaining security, and improving our offerings, provided these interests do not override your fundamental rights and freedoms. This covers analytics, administrative communications, and fraud prevention activities.
• Legal obligation. Processing is necessary for compliance with a legal obligation to which we are subject, including tax laws, professional recordkeeping requirements, and data breach notification obligations.
• Consent. Where required by applicable law, we may rely on your consent for specific processing activities such as certain types of cookies or direct marketing communications. You have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Data Sharing and Disclosure

We limit disclosure of your personal information to the following categories of recipients, each bound by contractual data protection obligations:

Service Providers

• Web hosting and infrastructure providers including Google Cloud Platform and Firebase Hosting, which process data to deliver our website and related services
• Email service providers that handle our business correspondence and communications with you
• Project management and productivity tools that facilitate collaboration between our team and your organization
• Accounting and invoicing platforms used to process payments, generate invoices, and maintain financial records
• Professional liability insurers and legal advisors who may require access to project records in the course of providing their services to us

All service providers are subject to written agreements that require them to implement appropriate technical and organizational measures to protect your data and to process it only for the specific purposes we have instructed. We conduct periodic reviews of our key providers compliance with these obligations.

Legal and Regulatory Disclosures

We may disclose your information if required to do so by law, regulation, legal process, or governmental request. This includes responding to valid subpoenas, court orders, law enforcement inquiries, or regulatory investigations. We will make reasonable efforts to notify you of such disclosures where legally permitted and will limit the disclosure to what is strictly required by the applicable legal obligation.

Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or insolvency proceeding involving BNS Works LLC, your personal information may be transferred to the successor entity. We will ensure that any such transferee agrees to protect your information in a manner consistent with this Privacy Policy and applicable law. You will be notified of any such transfer through a prominent notice on our website or direct communication.

We do not share your personal information with any other third parties unless we have obtained your explicit consent to do so for a specific purpose. Your data is never sold, rented, or traded to marketing companies, data brokers, or advertisers.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Our retention periods are established based on the following criteria:

• Active client data. Information associated with current service engagements is retained for the duration of the contractual relationship plus six years following the final invoice date, to account for tax obligations, professional liability coverage, and potential dispute resolution requirements.
• Inquiry records. Contact form submissions and email inquiries that do not result in a service engagement are retained for eighteen months from the date of last contact, after which they are securely deleted or anonymized.
• Website analytics. Individual-level analytics data is retained for twenty-six months, after which it is aggregated and anonymized for long-term trend analysis. Aggregated data that cannot be linked to identifiable individuals may be retained indefinitely.
• Legal hold. Data relevant to ongoing or reasonably anticipated legal proceedings, regulatory investigations, or audit requirements is retained until the matter is resolved and any applicable appeal periods have expired.

When retention periods expire, data is securely deleted using methods that prevent reconstruction, including secure file deletion and electronic media destruction. Anonymized data from which individual identity cannot be reestablished may be retained beyond these periods for analytical purposes.

Data Security

We implement a layered security framework to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include the following components:

• Transmission security. All communications between your browser and our website are encrypted using Transport Layer Security (TLS) protocol version 1.2 or higher. This prevents third parties from intercepting or tampering with data during transmission over public networks.
• Access controls. Access to personal data is restricted to BNS Works employees and contractors whose job responsibilities require it. Access is granted on a least-privilege basis, meaning individuals receive only the minimum access necessary to perform their duties. All access events are logged and subject to periodic internal review.
• Infrastructure security. Our hosting environment includes firewall protection, intrusion detection systems, automated security patching, regular vulnerability scanning, and system hardening in accordance with industry benchmarks.
• Vendor assessment. All third-party service providers with access to personal data undergo a security assessment before engagement and are contractually required to maintain security standards consistent with our own.
• Incident response. We maintain a documented incident response plan covering breach detection, containment, investigation, notification, and remediation procedures. We train our personnel on incident reporting obligations and conduct periodic tabletop exercises to test our response readiness.

While we implement these measures diligently, no method of electronic storage or transmission can guarantee absolute security against all threats. We encourage you to exercise caution when transmitting sensitive information over the internet and to notify us immediately if you suspect any unauthorized access to your account or communications with us.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance functionality, analyze usage patterns, and improve your browsing experience. Cookies are small text files stored on your device by your web browser when you visit a website. We use the following categories of cookies:

• Essential cookies. These cookies are necessary for the basic operation of our website. They enable core functionality such as page navigation, secure access to protected areas, and load balancing across our servers. These cookies do not require your consent as they are essential to deliver the service you request. Without these cookies, certain features of the Site would not function correctly.
• Analytics cookies. These cookies collect anonymous information about how visitors interact with our Site, including which pages are visited most frequently, how users navigate between pages, whether users encounter error messages, and how long users spend on each page. This aggregated data helps us understand what content is most valuable to our visitors and identify areas where the user experience can be improved. Analytics data is processed in anonymized form and is not combined with personally identifiable information.
• Preference cookies. These cookies remember choices you make on the Site, such as your preferred text size, language selection, or region, to provide a more personalized experience on return visits. Any information collected through preference cookies is used solely for the purpose of maintaining your stated preferences.

You can manage your cookie preferences through your browser settings at any time. Most browsers allow you to block or delete cookies, and you can configure your browser to alert you before accepting cookies from new sites. Blocking essential cookies may affect the functionality of our website and prevent certain features from working as intended. For more detailed information about managing cookies in your specific browser, we recommend visiting the browsers help documentation.

Your Rights and Choices

Depending on your jurisdiction and the specific processing activities involved, you may exercise the following rights concerning your personal data. We will respond to all verifiable requests within the timeframes required by applicable law, typically within thirty calendar days.

• Right to access. You may request a copy of the personal data we currently hold about you, including information about the categories of data we process, the purposes of processing, and any third parties with whom we have shared your data.
• Right to rectification. If you believe that any personal data we hold about you is inaccurate, incomplete, or outdated, you may request that we correct or supplement the information. We will update our records promptly upon verification of the corrected information.
• Right to erasure. You may request that we delete your personal data from our systems where it is no longer necessary for the purposes for which it was collected, where you withdraw consent and no other legal basis applies, or where processing is unlawful. This right is subject to legal retention obligations that may require us to maintain certain records.
• Right to restrict processing. You may request that we limit the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing based on legitimate interests while we verify our grounds.
• Right to data portability. Where technically feasible, you may request a copy of your personal data in a structured, commonly used, machine-readable format suitable for transfer to another service provider.
• Right to object. You may object at any time to processing of your personal data based on our legitimate interests, including processing for direct marketing purposes. We will cease such processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent. Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact us using the details provided in the Contact Information section below. We may request proof of identity before processing your request to ensure we are responding to the correct individual. We will not discriminate against you for exercising any of your privacy rights, and exercising these rights will not affect the quality of services we provide to you, except where the processing is necessary for service delivery.

Children Privacy

Our website and services are designed for business entities and professional organizations. They are not intended for or directed toward individuals under the age of eighteen. We do not knowingly collect personal information from minors. If a parent or guardian becomes aware that their child has provided personal data to us through our website without proper consent, we request that the parent or guardian contact us immediately using the contact details below. Upon verification, we will take prompt steps to remove the information from our systems and will retain only such records as are necessary to document the deletion request. We encourage parents and guardians to monitor their childrens online activities and to educate them about the importance of protecting privacy online.

International Data Transfers

Your personal data may be transferred to and processed in jurisdictions other than your own, including the United States where our company is established and where our primary service providers operate. We take appropriate measures to ensure that your personal data receives an adequate level of protection wherever it is processed. These measures include reliance on European Commission adequacy decisions where applicable, execution of Standard Contractual Clauses with our service providers, and implementation of supplementary technical measures such as data encryption and access controls. By submitting your personal data to us, you acknowledge that your information may be transferred to and stored in locations outside your country of residence.

Policy Updates

This Privacy Policy may be revised periodically to reflect changes in our data processing practices, evolving technology capabilities, or applicable legal requirements. When material changes are made, we will update the Last Updated date at the top of this document and may provide additional notice through a prominent banner on our website or, where appropriate, by direct communication. Changes become effective immediately upon posting the revised policy to this URL. We encourage you to review this page periodically to stay informed about how we are protecting your information. Your continued use of the Site or our services following the posting of changes constitutes your acceptance of the updated Privacy Policy.

Contact Information

If you have any questions, concerns, complaints, or requests regarding this Privacy Policy or our data handling practices, please contact us using the following information:

• Company: BNS Works LLC
• Address: 4996 S Woodhaven Dr, Taylorsville, UT 84123-4364, United States
• Email: office@bnsworks.autos
• Phone: +1 (434) 591-8252

We aim to acknowledge all privacy-related inquiries within two business days and to provide a substantive response within fifteen business days. If we are unable to resolve your concern to your satisfaction, you have the right to file a complaint with the applicable data protection authority in your jurisdiction. For individuals in the United States, this may include the Federal Trade Commission (FTC). We are committed to working with you to resolve any privacy concerns fairly and transparently.