Privacy Policy

1. Introduction and scope

HYHDATA LLC offers computer integrated systems design, data pipeline engineering, database management, and related professional technical services. These services fall under the broad industry classification for computer systems design and related services. This privacy notice governs every website, portal, dashboard, application, and offline interaction that we manage anywhere in the world. It describes the full lifecycle of the personal data that crosses our systems, from the instant of collection to the day we delete it.

This policy is intended for several audiences. It covers people who fill in a contact form, people who receive a scheduled report from us, clients who grant us access to their internal records, and visitors who simply read the public pages of our sites. We treat each group with the same level of care. Our guiding principle is minimalism. We collect no more than we need, we keep nothing for longer than we must, and we never treat your information as an asset to be traded.

Wherever this document refers to personal data or personal information, it means any data that can be linked to a natural person such as a name, an email address, a phone number, an account identifier, or a device signature. If a dataset has been combined or derived such that a person can still be identified from it, that derived set is treated as personal data for every purpose in this notice. The scope also covers any future service we may release, because this policy applies to the company as a whole and to every brand extension we operate under the direction of the developer HyhData.

2. Information that we collect

We organize everything that touches our environment into two broad groups. The first group is information that you choose to hand to us. This group exists only because you typed it, uploaded it, or approved it. The second group is information that our systems observe as a natural result of you visiting or using our services, such as your network address and the pages that you request. Neither group is ever treated casually.

The exact data that we collect in each category depends on the service that you use and on the features that you activate. A person who only reads a public article provides us with no names and no contact details, while a person who requests a quotation provides us with a business identity and a way to reach them. In every case we collect only what is required to make the service function and to keep it secure. If we ever request an optional field, that field is clearly marked and you are free to leave it empty.

We never set out to surprise you with a hidden data source. Whenever a new collection point is introduced, it is described here before it is activated. Clients who provision us with access to their own systems do so under separate written agreements that define the boundaries of that access, and those agreements sit alongside, but do not replace, the commitments that this policy makes.

3. Information that you provide

The most direct way that we learn about you is when you share with us on your own initiative. Typical examples include the details entered on a project inquiry form, the message that you send to our support mailbox, the notes that you attach to an order, and the records that a partner supplies in order to onboard a shared workflow.

When you contact us, we store the following kinds of data: your full name or company name, your electronic mail address, your telephone number when you choose to supply it, the contents of your message, and any files that you attach for context. We keep this set together in a single customer record so that our engineers can understand the full conversation rather than reading isolated fragments.

If you register for a restricted feature such as a private dashboard or a client portal, we additionally record a chosen login identity, a secure credential reference, and the permissions that your account has been granted. We do not ever ask you for sensitive categories of information such as your health status, your racial origin, your political opinion, or your religious beliefs. Should such data appear inside a file that you forward to us by accident, we handle it with heightened care and delete it as soon as its purpose is complete.

4. Information collected automatically

Like nearly all network services, our systems maintain routine logs. When your browser or an application talks to one of our servers, that server records a series of technical facts. These facts include the network protocol address that you used, the date and time of the request, the resource that you asked for, the response code that we returned, the size of the data that we sent, and details about the type of device and browser software that you employ.

We gather this operational information for a handful of clear reasons. We use it to detect and block abusive traffic, to measure how our servers are performing, to diagnose faults, and to understand in the aggregate which pages are genuinely useful. We review these records in aggregate form far more often than we inspect any single visitor. Raw logs are retained only briefly and are then condensed into summaries that no longer identify any particular person.

We also make limited use of small tracking technologies such as cookies and local storage. These are described in fuller detail in the section about cookies. It is our preference to run our public sites with as little tracking as possible, which is why the core reading experience of any HYHDATA LLC page does not depend on tracking you at all. Where a tool does run, its job is limited to understanding page usefulness and protecting the service, never to build a private profile of your life.

5. Cookies and similar technology

A cookie is a small text file that a website places on your device so that it can recognize that same device on a later visit. Session cookies are short lived and disappear when you close your browser. Persistent cookies remain for a set period so that a preference survives across visits. We use both kinds in a restrained way.

The cookies that our sites may set fall into three families. Strictly necessary cookies keep the site functional, for example by remembering that you have opened the menu or that you have accepted a routine notice. Performance cookies help us understand which sections are visited and how visitors move between them, so that we can improve the structure. Preference cookies remember choices such as the language that you selected or the display options that you switched on.

You remain in control of cookies at every moment. Most browsers let you view the cookies stored on your device, delete them individually, block cookies from particular sites, or refuse cookies altogether. Choosing to block all cookies can change how a website behaves, because some features depend on them. Elements such as secure sign in simply will not work while the related cookie is disabled, but reading our pages does not require any cookie at all.

6. How we use your information

Every use that we make of your information traces back to one of a small number of practical reasons. We begin with the most obvious reason, which is to provide the service that you asked for. If you request a quotation, we need your identity and your contact details to reply. If you order a monthly report, we need the recipient address to deliver it. This category is the everyday engine of our relationship with you.

The second reason is to protect you and our network. We monitor for activity that signals fraud, intrusion attempts, or abuse, and we rely on the data in our logs to stop that activity before it can cause harm. The third reason is to improve the quality of the service that we offer. Aggregated statistics show us which parts of a dashboard are ignored and which instructions are unclear, and we use that learning to make our interfaces clearer for the next visitor.

The fourth reason is ordinary accounting and legal compliance. We keep records of invoices, orders, and correspondence because the law expects a business to do so and because you may later need us to reproduce a transaction. The fifth reason is one that we treat with special restraint. When we have your permission, or when the law of your region permits it, we may send you occasional updates about new services. You may withdraw that permission at any time, and doing so takes effect without any penalty to the services that you already use.

7. Legal bases for processing

The degree of formality required to justify processing varies from one region to another. In places that follow the approach of the European General Data Protection Regulation, a controller must point to a valid legal basis for each processing activity. We rely on several bases depending on the situation at hand.

When you engage us to design a pipeline, host a database, or produce a report, we process the necessary data because a contract has been formed between us, which is the contractual necessity basis. When we respond to a request from you before any formal contract exists, we act on your own initiative, which is the legitimate interest of both sides in establishing a working relationship, balanced against the fact that the data involved is modest and expected.

When we defend the network against attack, we rely on the legitimate interests of keeping the service available and our customers safe. When we issue an invoice or meet an audit obligation, we act to comply with a legal obligation that binds us. When we send promotional mail, we rely either on your consent or on an applicable regional exception for existing customers, whichever the law of your state provides. We keep a written note of the basis that we applied to any activity that might later be questioned, so that the decision is documented rather than improvised.

8. Sharing and disclosure

We hold a simple and firm position on sharing. HYHDATA LLC does not sell, rent, trade, or barter personal information to any third party, and it has never done so. Nothing in our commercial model depends on monetizing the private details of the people who use our services. We treat any suggestion to the contrary as a clear error.

There remain a few narrow situations in which we may reveal personal information to someone else. We may share data with a service provider who performs a function on our behalf, such as hosting infrastructure, as described in the following section. We may also share data where the law demands it, for example in response to a valid subpoena, a court order, or a regulation that carries a legal penalty for refusal.

In the unlikely event that the company is acquired or merged, personal records would be transferred to the continuing organization so that the relationship we have built with you can continue without interruption. We would require that acquiring party to honor this policy, and we would give you notice of the change through a prominent announcement. These disclosures are the exceptions, and we commit only to those that are genuinely necessary or genuinely required.

9. Service providers who act on our behalf

To run our systems we sometimes rely on outside vendors. These vendors are not free agents; they act strictly under written instructions that we issue. A hosting provider stores the files of our sites and the databases that our applications depend on. A mail processing service helps route and deliver the electronic correspondence that we send. A security supplier may help us scan for vulnerabilities.

Each of these suppliers is chosen with care and bound by contract. Every agreement that we sign requires the supplier to keep your data confidential, to use it only for the purpose that we name, to maintain reasonable safeguards, and to return or destroy the data when the relationship ends. We review this roster from time to time to confirm that our standards are being kept.

This list of supplier roles is descriptive rather than exhaustive, and it changes as our technology choices evolve. Because our policy is written to follow the data rather than a fixed vendor menu, the commitments in this contract apply no matter which named organization happens to be providing a given role on any particular day. Where a supplier operates outside your own country, the safeguards described in the section on international transfers apply to that arrangement too.

10. How we protect your information

The security of your data matters as much to us as any single project in our portfolio. Because HYHDATA LLC is built around data engineering, we bring the same rigor that we apply to our clients to the protection of our own records. Nothing is stored without a reason, and very little is ever exposed beyond the people who need it for work.

On the network side, our connections use strong industry standard encryption so that data in transit cannot be read by a bystander. Access to any administrative system is limited to named staff who act through individual credentials, and every such credential requires a strong secret and, where practical, a second factor of verification. We rotate those credentials on a schedule rather than waiting for an incident to force our hand.

We take regular backups so that an accidental deletion or a hardware failure does not become a permanent loss. We test our ability to restore from those backups rather than assuming that they will work. We also keep a watch over our own logs for signs of intrusion, and we apply software updates in a timely manner so that known weaknesses are closed before they can be exploited. No method of guarding data is absolute, and we therefore describe these measures as reasonable steps rather than as guarantees of total safety.

11. Data retention periods

We do not keep information forever, and we are disciplined about the moments when a record has outlived its usefulness. Each category of data carries its own retention window, chosen to balance your interests against the practical needs of running an honest business.

Technical logs that exist purely for security and diagnosis are kept in their raw form for a short period, typically no longer than a few weeks, after which they are condensed into anonymous statistics. Contact correspondence is retained for as long as your account is active and for a reasonable period afterwards so that we can answer follow up questions about past work. Billing records are kept for whatever period the tax and accounting laws of the United States require us to observe.

When a retention window ends, we delete the information or strip it of its identifiers so that it can no longer be tied to you. Deletion is performed in a way that also removes the data from any backup that we control, within the normal rotation cycle of that backup. You may always ask us ahead of the schedule to delete your records sooner, and we will honor that request subject to the legal obligations that bind us to keep certain documents a little longer.

12. Your rights and your choices

The law of your region grants you a set of rights over your own data, and we honor them regardless of where you happen to live. You may ask us for a copy of the personal information that we hold about you, and we will give it to you in a clear and readable form. You may ask us to correct any detail that is outdated or wrong.

You may ask us to delete the information that we hold about you, in which case we will remove it unless we are required by law to keep a copy. You may ask us to limit how we process your data, or to move your data to a format that you can hand to another provider. You may instance to the use of your data where that use depends on our legitimate interests rather than on your consent.

To exercise any of these rights, the simplest path is to send a message to mail@hyhdata.lat describing what you would like us to do. We will confirm your identity through a reasonable check before we act, so that we never release your records to someone who only claims to be you. We aim to respond within the period that your local law allows, and we will tell you plainly if we need more time or if a particular request cannot be granted.

13. Privacy for children

Our services are tools for data engineering, analytics, and the operations of professional organizations. They are not designed for, or aimed at, children. In the terms used by many data protection laws, our offerings are directed at a business audience and do not knowingly gather information from children below the age of thirteen.

We take no deliberate action to collect, store, or process the personal data of a child. If a parent or guardian becomes aware that their child has sent us information without permission, perhaps through a misplaced message or an accidental form submission, we ask that adult to contact us directly at mail@hyhdata.lat. We will delete the information from our active systems and confirm that the deletion has taken place.

Because this policy covers children last, it is important to state the practical consequence plainly: a child should not provide us with any name, address, school, or contact detail of their own. Any adult who supervises a child is welcome to reach out on the child behalf when a genuine question or a learning exercise requires it, and our team will be glad to help within the normal bounds of this policy.

14. International transfers of data

HYHDATA LLC is an organization registered in the United States. This means that some of the infrastructure on which our services depend may be located outside the country where you live. When your data travels across a border, we make sure that it receives a level of protection that matches, at a minimum, the promises that this policy makes.

Where an international transfer is controlled by a special rule, such as the rules that govern transfers from the European Economic Area, we rely on recognized mechanisms to keep the transfer lawful. These include frameworks approved for transatlantic data flows as well as standard contractual clauses that we sign with any supplier to establish clear obligations on both sides of the border.

In addition to whatever legal mechanism applies, we apply our own judgment about which nations and which regions deserve a higher measure of caution. Data that is especially sensitive, or data that belongs to a region with strong privacy expectations, is kept closer to home when that is technically feasible. If you would rather not have your data stored internationally at all, that preference matters to us, and we will work to identify a configuration that respects it wherever we can.

15. Third party links and external services

From time to time our pages may include a link that points to a website we do not own. That is as far as our responsibility travels. When you select such a link, you leave our environment and enter a place that is governed by its own rules, its own privacy notice, and its own security arrangements.

We do not control what those external pages do, and this Privacy Policy simply does not apply once you have left our own pages. We encourage you to read the privacy notice of any external site before you hand it any of your details. The presence of a link on our page is an editorial convenience, not an endorsement of that site handling of your information.

When we send you a report that includes figures drawn from another service, that report is assembled by us from data we hold under our own contracts. The only external element is the tool that happens to display it to you. We remain responsible, in every case, for the content that we produce and for the care that we take with the underlying records, because no matter which display software is in use, the duty sits with the developer HyhData and the organization behind it.

16. Changes to this policy

We live in a field that changes quickly, and this policy must be able to change with it. When we make a material change to the way that we handle your information, we will revise the date at the top of this document and place a notice in a visible position so that you have the chance to see what is new before you keep using the service.

We will not lightly reduce the protection that you have come to expect. If a change would mean that we intend to use your existing data in a way that is meaningfully different from the reason we originally collected it, we will seek your permission before that new use begins. Routine clarifications and typographical corrections will not trigger a separate notice.

Because you may rely on this text at any moment, the version that is published on our website is always the version that governs. Where a printed copy that predates this revision conflicts with the current online text, the current online text wins. Should any single clause of this policy be judged unenforceable by a court, that decision will not shake the rest of the document, which continues to stand on its own.

For any matter arising from your data, including a request to review, amend, or remove your records, the address of record is 7533 S Center View Ct Pmb R, West Jordan - 84084-5526, United States (US), the mailbox mail@hyhdata.lat, and the telephone line +14707699578. We read every message and we answer with care.