Legal information
Privacy notice
This notice explains how Hfield Systems handles information submitted through the public website and the invited customer portal.
Information you provide
The contact form asks for your name, work email address, project or message information, and acknowledgment that you have read this notice. You may also provide an organization, telephone number, and service-interest information.
Please do not submit unnecessary sensitive information through the contact form or portal. This includes passwords, private keys, API keys, access tokens, recovery codes, credentials, authentication secrets, infrastructure secrets, or unnecessary customer confidential information.
Invited customer portal
Invited customers may be shown customer-safe job status, timeline or status updates, next actions, and related public resources. The portal is intentionally a customer-safe status interface; it is not a record of every internal engineering note, task, credential, or administrative record.
Invitation and session records are used for authentication, authorization, access management, and security. Invitations can expire or be revoked, and sessions are checked when protected portal content is requested.
Information processed to operate the site
Hfield Systems uses Cloudflare for site delivery, serverless application hosting, static assets, database infrastructure, and security-related network processing. Cloudflare and the application may process limited request, security, timestamp, and audit metadata needed to deliver, secure, troubleshoot, and operate the service. The application is designed to avoid placing customer portal content in public analytics.
Cloudflare Turnstile protects the public contact form from automated abuse. Cloudflare may process technical signals for that purpose under its own privacy practices; Hfield Systems does not control Cloudflare's separate processing.
Analytics and tracking
Hfield Systems does not currently use advertising trackers on this website. Cloudflare Web Analytics is not currently enabled. If privacy-respecting aggregate analytics are added later, this notice will be updated to reflect the resulting data flow.
How information is used
- Responding to inquiries and evaluating potential work.
- Operating invited portal access and providing customer-safe job status.
- Authenticating users, preventing abuse, maintaining security, and troubleshooting.
- Maintaining administrative and publication records.
- Meeting applicable legal obligations and protecting legitimate rights.
Sharing and independent services
Cloudflare provides the infrastructure and security services described above. Hfield Systems does not sell personal information or share it with advertising networks.
If you contact, hire, pay, or communicate with Hfield Systems through an independent third-party marketplace, that marketplace may independently collect and process information. Its own privacy policy governs that independent processing. This notice governs Hfield Systems' handling of information it receives or controls; Hfield Systems does not control a marketplace's independent processing.
Retention
Contact requests are normally retained for up to 90 days. The current process requires manual deletion or purge of records that become eligible for deletion; it does not automatically delete them. Relevant records may be retained longer when reasonably needed for an active business discussion or customer relationship, a security or abuse investigation, applicable legal obligations, or the establishment, exercise, or defense of legal rights.
Portal, security, and administrative records are retained only as long as reasonably needed for the customer relationship, operation of the service, security or audit needs, or applicable obligations.
Security
Hfield Systems uses safeguards appropriate to this website and portal, including hashed invitation tokens, expiring invitations, server-side sessions, authorization checks, and Cloudflare Access protection for administration. Private application surfaces are designed to avoid shared caching and search indexing, and public content follows a controlled publication process. No Internet service can be guaranteed completely secure.
Privacy requests
Privacy rights vary by location and circumstances. To submit a privacy-related request, use the contact form without sending additional sensitive information. Hfield Systems may need to verify your identity before acting on a request and will respond to applicable requests as required by law.
Changes to this notice
Material changes to this notice will be reflected on this page with an updated effective or revision date.