Privacy Policy
Effective Date: August 25, 2025
Last Updated: August 25, 2025
Who We Are
New Beginnings Engineering, Inc. (NBE) is a comprehensive architectural and structural engineering firm established in 2014. Our website address is: https://nbesocal.com. We are committed to protecting your privacy and handling your personal information with care and transparency.
What Personal Data We Collect and Why We Collect It
Contact Forms and Service Inquiries
When you submit our contact form or request engineering services, we collect:
- Personal Information: Name, email address, phone number, mailing address
- Project Information: Property address, project type, timeline, budget range
- Technical Details: Lot dimensions, construction type, existing plans
- Communication Preferences: Preferred contact method and timing
Purpose: To provide engineering services, respond to inquiries, schedule consultations, and communicate about your project.
Comments
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor's IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Cookies and Tracking Technologies
We use cookies and similar technologies to improve your browsing experience:
Essential Cookies:
- Session management cookies
- Security and authentication cookies
- Form submission cookies
Analytics Cookies:
- Google Analytics to understand website usage patterns
- Conversion tracking for marketing effectiveness
- Heat mapping tools to improve user experience
Marketing Cookies:
- Advertising platform pixels (Facebook, Google Ads)
- Retargeting cookies for relevant advertisements
- Lead tracking and attribution cookies
Cookie Duration:
- Session cookies expire when you close your browser
- Persistent cookies may last up to 2 years
- You can manage cookie preferences through your browser settings
Newsletter and Marketing Communications
If you subscribe to our newsletter or marketing emails via Mailchimp, we collect:
- Email address
- Name (if provided)
- Subscription preferences
- Engagement data (opens, clicks, unsubscribes)
Customer Relationship Management
We use GoHighLevel CRM to manage client relationships and project communications, which may include:
- Contact information and communication history
- Project details and service preferences
- Appointment scheduling and follow-up activities
- Sales pipeline and lead tracking data
Appointment Scheduling
When you book consultations through Calendly, we collect:
- Name and contact information
- Preferred appointment times
- Project type and basic requirements
- Time zone and scheduling preferences
Analytics and Website Usage
We collect anonymous usage data using Google Analytics, Google Tag Manager, Facebook Pixel, and Google Ads including:
- Pages visited and time spent on site
- Referral sources and search terms
- Device type, browser, and operating system
- Geographic location (city/state level only)
- IP address (anonymized for analytics)
- Conversion tracking for marketing campaigns
- Social media advertising effectiveness
How We Use Your Information
We use collected information to:
- Provide engineering and architectural services
- Respond to service inquiries and schedule consultations
- Process project proposals and contracts
- Communicate about your project status and updates
- Send newsletters and marketing communications (with consent)
- Improve our website and services
- Comply with legal and regulatory requirements
- Prevent fraud and ensure security
Legal Basis for Processing (GDPR)
For users in the European Union, we process personal data based on:
- Consent: Newsletter subscriptions, marketing communications
- Contractual Necessity: Providing engineering services
- Legitimate Interest: Website analytics, security, business communications
- Legal Obligation: Professional licensing requirements, building code compliance
Who We Share Your Data With
Service Providers and Partners
- Mailchimp (email marketing and newsletter services)
- GoHighLevel (customer relationship management and communication)
- Calendly (appointment scheduling and calendar management)
- Google Analytics & Tag Manager (website analytics and tracking)
- Facebook/Meta (advertising and conversion tracking)
- Google Ads (advertising and conversion tracking)
- Web hosting providers (website hosting and data storage)
- Professional consultants (architects, contractors, building departments as needed for your project)
Legal Requirements
We may disclose information when required by:
- Valid legal processes (subpoenas, court orders)
- Professional licensing boards and regulatory agencies
- Building departments and municipal authorities (for permit submissions)
- Insurance providers (for professional liability coverage)
Business Transfers
In the event of a merger, acquisition, or sale of business assets, personal information may be transferred to the acquiring entity.
International Data Transfers
As a California-based business serving clients nationwide, your data may be transferred to and stored in different states. We ensure appropriate safeguards are in place for any international data transfers.
How Long We Retain Your Data
- Project Files: We retain engineering project files and client communications for 10 years minimum to comply with professional licensing requirements and potential liability claims.
- Marketing Data: Newsletter subscriptions and marketing preferences are retained until you unsubscribe.
- Website Data: Comments and user accounts are retained indefinitely unless deletion is requested.
- Analytics Data: Website usage data is retained for 26 months in Google Analytics.
- Legal Requirements: Some data may be retained longer to comply with legal, regulatory, or professional obligations.
Your Rights and Choices
All Users
- Access: Request a copy of personal data we hold about you
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your personal data (subject to legal retention requirements)
- Portability: Receive your data in a machine-readable format
- Objection: Object to certain types of data processing
California Residents (CCPA Rights)
Under the California Consumer Privacy Act, you have the right to:
- Know what personal information we collect and how it's used
- Delete personal information (with certain exceptions)
- Opt-out of the sale of personal information (we do not sell personal information)
- Non-discrimination for exercising your privacy rights
EU Residents (GDPR Rights)
- Right to withdraw consent at any time
- Right to restrict processing in certain circumstances
- Right to data portability
- Right to file complaints with supervisory authorities
To Exercise Your Rights: Contact us at [email protected] with your request. We will respond within 30 days.
Data Security
We implement appropriate technical and organizational measures to protect your personal information:
- Encryption: Data transmission via SSL/TLS encryption
- Access Controls: Limited access to personal data on a need-to-know basis
- Regular Updates: Security software and system updates
- Staff Training: Regular privacy and security training for team members
- Backup Procedures: Secure data backup and recovery systems
Third-Party Services
Our website integrates with third-party services that have their own privacy policies:
Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected such information, we will take steps to delete it promptly.
Changes to This Privacy Policy
We may update this privacy policy periodically to reflect changes in our practices or applicable law. We will notify you of material changes by:
- Posting the updated policy on our website with a new "Last Updated" date
- Sending email notifications to active clients (for significant changes)
- Providing notice during your next service interaction
Professional and Regulatory Compliance
As a licensed engineering firm, we are subject to:
- Professional Engineering Licensing Requirements in multiple states
- Professional Liability Insurance documentation requirements
- Building Code Compliance and permit submission requirements
- Client Confidentiality obligations under professional engineering ethics
Data Breach Procedures
In the event of a data breach that affects your personal information, we will:
- Assess the scope and impact of the breach within 72 hours
- Notify affected individuals via email within 72 hours when feasible
- Report to relevant authorities as required by applicable law
- Provide information about steps being taken to address the breach
- Offer guidance on protective measures you can take
California "Shine the Light" Disclosure
California residents may request information about our disclosure of personal information to third parties for direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes.
This privacy policy is designed to comply with applicable privacy laws including GDPR, CCPA, and other state privacy regulations. For specific legal advice regarding privacy compliance, consult with a qualified attorney.