Privacy Policy
Effective date: January 1, 2026. Last reviewed: November 3, 2026.
1. Who We Are
This Privacy Policy describes how VADASZ ENTERPRISES LLC collects, uses, stores, shares and protects personal information when people visit our website, contact us, or engage our services. VADASZ ENTERPRISES LLC is a computer systems design and related services firm with its principal place of business at 2444 N 800 E, Logan - 84341-1808, United States (US). Throughout this document the words we, us and our refer to VADASZ ENTERPRISES LLC, while the words you and your refer to any person whose personal information we handle.
The website and the practice described here are maintained under the developer name Vadasz Ent, which is the operating label used for the design and engineering work delivered by the company. When you read about a developer in connection with this website, that label refers to the team that builds, maintains and operates the digital properties and field programs of VADASZ ENTERPRISES LLC. The legal entity responsible for the handling of personal information remains VADASZ ENTERPRISES LLC at the address given above.
We take a deliberately conservative approach to privacy. Our work depends on observation and on careful record keeping, but that discipline is applied to systems and to operations rather than to the private lives of individuals. We collect what we need to answer enquiries, deliver our services, meet legal obligations and keep the business running, and we try to keep that footprint small. Where a choice exists between collecting more and collecting less, we try to choose less.
This policy is written to be read by an ordinary person rather than by a lawyer. It sets out in plain language what happens to information that reaches us, why we hold it, who else may see it and how you can ask us to change or remove it. If any part of it is unclear, we would rather you ask us than guess, and the contact details at the end of this document are there for exactly that purpose.
2. Scope of This Policy
This policy applies to personal information that we collect through our website, through email and telephone contact, through written briefs and proposals, and through the delivery of our professional services. It also applies to information we receive from clients about their own staff and contractors where that information is necessary to carry out an engagement, subject to the limits described in this document.
This policy does not apply to information that a client collects and controls independently inside its own systems. During a field engagement we may observe and document a client operation, but we do not take ownership of the client records we are shown, and we do not use client records for our own purposes. Where we process client records, we do so only on the instructions of the client and only for the duration of the engagement. The client remains responsible for its own privacy notices and for the consents it has obtained from its staff.
This policy does not apply to third party websites, applications or services that you may reach from our website. Those services have their own privacy practices, and we encourage you to read them before sharing personal information. A link from our website to another destination is not an endorsement of that destination and does not mean that we control what happens there.
Some of our engagements involve regulated industries or special categories of information. Where that is the case, we agree additional written terms with the client before work begins, and those terms take priority over this general policy for the information they cover. We do not knowingly accept engagements that would require us to handle sensitive personal information outside a documented agreement.
3. Information We Collect
The information we collect depends on how you interact with us. In most cases the volume is modest, and in many cases a visitor will share nothing more than an email address and a short message. The categories below describe the range of information that may reach us.
Contact and identity information
When you write to us, call us or complete a contact form, we may receive your name, your email address, your telephone number, your employer or organisation, your role and your preferred method of contact. If you send a brief, we may also receive the content of that brief, which can include details about your operation that you choose to share. We recommend that you send only the detail necessary for us to understand your request.
Engagement and commercial information
If you become a client, we hold the information required to run the engagement: correspondence, meeting notes, proposals, statements of work, invoices, payment records and routine administrative records. Payment records are handled through banking and accounting channels and we do not store full payment card numbers on our own systems.
Technical and usage information
When you visit our website, our hosting environment may automatically record standard technical information such as the address from which a request arrives, the time of the request, the page that was requested, the browser type and the operating system. This information is used to keep the website available and secure and to diagnose faults. It is not used to build advertising profiles.
Information you send about other people
Sometimes a brief or a message will mention colleagues, contractors or other individuals. We ask that you share such information only where it is necessary and only where you are entitled to share it. If you send information about another person, you confirm that you have an appropriate basis for doing so.
4. How We Collect Information
Most information reaches us directly from you. You send an email, you call the camp line, you submit a contact form, you reply to a question or you attend a meeting. In those cases you decide what to share and when. We do not require you to create an account, and we do not require you to submit personal information merely to read our website.
Some information is collected automatically by our hosting environment when a visit is made. This is limited to the technical records described in the previous section and is used for the safe operation of the website. We do not deploy intrusive tracking technology, we do not sell advertising and we do not build cross-site profiles of visitors.
Some information is received from third parties. A client may send us a directory of staff contacts, a supplier may send us correspondence that mentions our client, or a payment channel may confirm that an invoice has been settled. Where we receive information indirectly, we treat it with the same care as information we collect directly, and we keep it only for the purpose for which it was shared.
Finally, some information arises through our own written record. Our working practice involves keeping dated notes of what was observed and what was decided. Those notes focus on systems, processes and decisions rather than on the personal affairs of individuals, but they may incidentally mention the name of a person who took a decision or performed a step. Where that happens, the mention is incidental to the operational record and is handled under this policy.
5. Purposes and Legal Bases
We use personal information for a small number of clearly defined purposes. The first is to respond to enquiries and to decide whether an engagement is a good fit. The second is to deliver, administer and improve the services we have agreed with a client. The third is to maintain accurate business records, including accounting and tax records, as required by applicable law. The fourth is to protect our legal position and the security of our systems. The fifth is to send occasional service updates to people who have asked to receive them.
Where the laws of a jurisdiction require us to identify a legal basis for processing, we rely on one of the following. We rely on our performance of a contract, or on steps taken at your request before a contract, when we handle information necessary to prepare or deliver an engagement. We rely on our legitimate interests in running a professional practice, responding to enquiries and keeping secure records, where those interests are not overridden by your rights. We rely on consent where consent is specifically required, for example for optional marketing messages. We rely on legal obligation where we must retain records for tax or regulatory reasons.
We do not use personal information for automated decision making that produces legal or similarly significant effects. The systems we design for clients are the subject of agreements with the client, and the assessment work we perform is carried out and reviewed by people. Any automated behaviour inside a delivered system is documented in the design and is governed by the client own obligations.
We do not sell personal information. We do not rent contact lists. We do not provide personal information to advertisers or data brokers. If our practice ever changes in a way that would require a different purpose to be added, we will update this policy and, where the change is material, we will tell affected people directly before the new purpose takes effect.
6. Field Observation and Client Systems
Our services involve watching a working operation and writing down what happens. This practice is central to the quality of our work, and it deserves a clear explanation in a privacy document so that nobody is surprised by it. When we observe a client operation, our notes are directed at the flow of work: how a record travels, where it waits, where it is copied by hand, and which exception paths are taken when the normal path fails. We are not interested in the private lives of staff, and we do not record personal conversations, health details or off-duty activity.
During an engagement we may see client data on a screen. That might include customer names, order details or supplier records. We do not copy client data out of the client environment, we do not transfer it to our own marketing or analytics tools, and we do not use it to serve any purpose other than the engagement. Where a design task requires test data, we prefer synthetic or anonymised data, and we agree the handling rules with the client in the written terms of the engagement.
If a client asks us to observe a location where individuals are present, we ask the client to inform those individuals in advance and to make sure the observation is proportionate to the task. We will decline to observe a space where the client cannot establish a lawful basis for the observation, and we will record the decline in writing. This is not a courtesy we offer reluctantly; it is a rule of the practice.
Our written notes are stored in controlled locations, with access limited to the people working on the engagement and to a small number of colleagues who support the practice. Notes are reviewed before they leave our control so that incidental personal details can be removed where they are not needed. At the end of an engagement the notes are either returned to the client, archived under the agreed terms, or destroyed, according to the written agreement and the requirements described later in this policy.
9. Service Providers
Running a professional practice requires a small number of dependable providers. Our website is served from a hosting environment, our correspondence moves through email infrastructure, our financial records are kept in accounting software, and our documents are stored in controlled file storage. Each of these providers may process personal information on our behalf, and each is selected with care.
We require providers to process information only on our documented instructions, to apply appropriate technical and organisational safeguards, to restrict access to personnel who need it, and to assist us in responding to requests from individuals. Providers that cannot meet these expectations are not used for matters that involve personal information. Where a provider suffers a security incident that affects our information, we expect prompt notice and we will make any notification that the law requires.
Some providers operate across national borders, which means that information may be stored or processed in a country other than the one in which it was collected. We select providers that offer recognised transfer safeguards, and we take reasonable steps to confirm that those safeguards are in place before information is transferred. The subject of international transfers is treated in more detail in a later section of this policy.
We review the list of providers periodically and remove any that are no longer necessary. We do not permit a provider to use our information for its own marketing purposes or to combine it with information gathered from other customers for advertising. Where a provider offers optional features that would change the way our information is used, we leave those features switched off.
10. Retention of Information
We keep personal information only for as long as it serves a legitimate purpose. Enquiry correspondence that does not lead to an engagement is normally kept for a short period so that we can follow up and then removed. Engagement records are kept for the duration of the engagement and for a reasonable period afterwards, because clients sometimes return with questions months or years later and because professional records support the quality of the service.
Financial and tax records are kept for the period required by the applicable rules in the jurisdiction where we operate. Marketing preferences are kept until the person withdraws consent or asks to be removed. Technical records generated by the hosting environment are kept for a short rolling period and are then discarded unless they are needed to investigate a security incident.
When information is no longer needed, we delete it or anonymise it. Deletion is performed through the provider tools we rely on, and where a provider cannot delete information promptly we confirm that the information has been placed beyond routine access. Anonymisation is used where the operational value of a record survives without any identifying detail, for example when a pattern of work is useful for training but the identity of the person involved is not.
Retention depends on context. A single email may be deleted quickly, while a signed engagement record may be kept for several years. If you would like to know how long a particular item is likely to be kept, you may ask us, and we will explain the basis for the period that applies to your situation as clearly as we can.
11. Security Measures
We apply technical and organisational measures that are appropriate to the size and nature of the information we hold. Access to our systems is restricted to named individuals, authentication is strong, devices are managed and kept current, and sensitive documents are stored in controlled locations rather than in personal folders or open shared drives. Correspondence with clients is handled through professional channels, and we discourage the use of unencrypted consumer messaging for matters that involve confidential records.
Our people are trained to recognise phishing and to handle personal information carefully. Support colleagues work within documented routines, and access rights are reviewed when a role changes or a colleague leaves. Where a client requires additional controls, such as a dedicated workspace, an encryption arrangement or a specific retention routine, we agree those controls in the written terms of the engagement and confirm them before work begins.
No system is perfectly secure. We cannot promise that a breach will never occur, and we do not pretend otherwise. What we can promise is that we take security seriously, that we maintain reasonable safeguards, that we review our arrangements periodically, and that if an incident occurs we will act promptly to contain it, inform affected people where the law requires and explain what happened in plain language.
If you believe you have found a vulnerability in our website or in any system we operate, please tell us through the contact details at the end of this policy. We ask that you do not access, modify or disclose the data of other people while investigating. We will acknowledge a genuine report and work with you on a reasonable timeline. We do not pursue legal action against good faith researchers who follow this guidance.
12. International Transfers
VADASZ ENTERPRISES LLC operates from Logan, Utah, in the United States, and our primary records are held in the United States. Some of the providers we rely on maintain infrastructure or support teams in other countries, which means that information may be processed outside the country in which it was collected.
Where information moves across borders, we take reasonable steps to make sure that it remains protected. Those steps may include selecting providers that offer recognised transfer mechanisms, requiring contractual safeguards, and limiting transfers to the information that is genuinely necessary. We do not transfer information to a country or a provider simply because it is convenient, and we review transfer arrangements when a provider changes its infrastructure.
If you are located in a jurisdiction that grants specific rights in relation to international transfers, you may contact us to ask about the safeguards that apply to your information. We will explain what we can disclose without compromising the security of our systems or the confidentiality of other people. Where a safeguard depends on a provider document that we cannot share in full, we will describe its substance so that you can still form a clear view.
Because our practice is small and our client base is primarily regional, most engagements do not require unusual transfer arrangements. The common case is that a client in the United States works with us in the United States, and correspondence flows through standard email infrastructure. The more complex cases are handled individually and are documented in the engagement terms.
13. Your Privacy Rights
Depending on where you live, you may have rights in relation to your personal information. Those rights commonly include the right to be informed about how information is used, the right to see a copy of the information held about you, the right to correct information that is inaccurate, the right to ask for deletion in certain circumstances, the right to object to or restrict particular uses, and the right to withdraw consent where processing is based on consent.
You may exercise any of these rights by writing to us at the email address given at the end of this policy. Please describe your request clearly and tell us how we can verify that the request is yours. We may ask for additional information where necessary to protect against unauthorised disclosure, but we try to keep that step light. We will respond within the period required by the applicable law and, where the law does not set a period, within a reasonable time.
There are limits to these rights. For example, we cannot delete records that we are legally obliged to keep, and we cannot disclose information that belongs to another person. Where a request is limited by an exception, we will explain the reason. Where a request concerns information that we process on behalf of a client, we may refer you to the client, because the client is the controller of that information and is responsible for responding.
You also have the right to complain to a supervisory authority if you believe that our handling of your information does not comply with the law. We would prefer that you speak to us first, because most concerns can be resolved quickly by a direct conversation, but this does not affect your right to complain to an authority. We will never penalise a person for exercising a privacy right.
We do not charge a fee for handling a reasonable request. Where a request is manifestly unfounded or excessive, the law may allow us to charge a reasonable fee or to decline the request, and we will explain our reasoning if we take that step. In practice, such situations are rare, and we approach each request in good faith.
14. Privacy for Children
Our services are designed for organisations and for adults acting in a professional capacity. We do not knowingly collect personal information from children under the age of thirteen, and we do not direct our website or our marketing at children. If you believe that a child has provided personal information to us, please contact us and we will take reasonable steps to remove it.
If a client engagement happens to involve a workplace where young people are present, for example an apprentice programme, our observation focuses on the process rather than on individuals. We do not record personal details about young workers beyond what is necessary to understand the flow of work, and we ask the client to make sure that appropriate permission has been obtained.
Our policy is reviewed when legal requirements change, and any change to the rules about children is reflected in this section. If we ever offer a service aimed at a younger audience, we will carry out a dedicated assessment before that service starts and we will update this policy to describe the additional protections that apply.
15. Marketing Communications
We do not run a broad marketing programme and we do not send unsolicited bulk email. From time to time we may send a short service note to people who have worked with us or who have asked to hear about new field programs. Those messages are relevant to the practice and are written in the same plain style as the rest of our correspondence.
Every marketing message includes a simple way to opt out, and an opt out request is honoured promptly. You can also ask us at any time to remove your address from our contact list without giving a reason. We keep a small suppression record so that we do not accidentally contact a person who has asked us not to, and that record contains only the minimum needed for the purpose.
We do not buy contact lists, we do not use tracking pixels in email, and we do not share email addresses with advertising platforms. If we run a paid advertisement in future, the audience selection will be handled by the advertising platform under its own policies, and we will not upload personal information to create a custom audience without an appropriate basis and clear disclosure.
16. Third Party Links
Our website may contain links to other websites, including the websites of clients, professional bodies or technology providers. Those websites are controlled by other organisations, and their privacy practices may differ from ours. We do not control what they collect, how they store it or with whom they share it, and we do not accept responsibility for their practices.
We encourage you to read the privacy notice of any website before you share personal information there. A link from our pages does not mean that we have reviewed the destination or that we endorse its handling of information. If you find a link on our website that points to a destination you believe to be unsafe, please tell us and we will review it promptly.
Where we embed content from another provider, we aim to choose a method that limits the information that provider receives until you actively interact with the content. Our current website does not rely on embedded third party content for its core function, and we intend to keep it that way so that reading our pages remains a simple and private experience.
17. Changes to This Policy
We review this policy periodically and update it when our practice changes or when the law requires it. When we make a change, we revise the effective date and the review date shown at the top of this document. If a change is material, we will make a reasonable effort to inform people who are currently engaged with us or who have asked to receive updates.
A material change might include a new category of information, a new purpose for using information, a new class of recipient, or a significant change in how long information is kept. Minor changes, such as a clarification of wording or a correction of a typographical error, do not usually require a separate notice, but they are still recorded in the revision history that we keep internally.
Earlier versions of this policy are retained for reference. If you would like to see the version that applied at a particular date, you may ask us, and we will provide it where we are able. We keep this document concise enough that a reader can compare versions without needing specialist help.
Continuing to use our website or our services after an updated policy takes effect indicates that you have had the opportunity to review the update. If you do not agree with a material change, you may contact us to discuss it, and where the change affects an active engagement we will try to find a workable path forward.
18. How to Contact Us
Privacy questions, requests and concerns should be sent to the address below. Please use a clear subject line so that your message reaches the right person quickly. If your request concerns an engagement, include the name of the client organisation and the approximate dates so that we can locate the relevant records without delay.
VADASZ ENTERPRISES LLC 2444 N 800 E, Logan - 84341-1808, United States (US)Email: service@vadaszent.surf
Telephone: +17745728542
We aim to acknowledge privacy correspondence within a few working days and to give a substantive answer within the period required by applicable law. If a request needs more time, we will tell you why and when to expect a further reply.
This policy is provided for information and forms part of the public record of VADASZ ENTERPRISES LLC. It does not create obligations beyond those that apply under the law or under a specific written agreement.