Privacy Policy

What Personal Data We Collect and Why We Collect It

Contact Forms and Service Inquiries

When you submit our contact form or request engineering services, we collect:

• • Personal Information: Name, email address, phone number, mailing address
• • Project Information: Property address, project type, timeline, budget range
• • Technical Details: Lot dimensions, construction type, existing plans
• • Communication Preferences: Preferred contact method and timing
• • Purpose: To provide engineering services, respond to inquiries, schedule consultations, and communicate about your project.

Cookies and Tracking Technologies

We use cookies and similar technologies to improve your browsing experience:

• • Google Analytics to understand aggregate website usage patterns
• • PostHog product analytics and error tracking; if session replay is enabled, input values remain masked
• • Privacy-safe first-touch and last-touch attribution stored in the browser for up to 90 days
• • Campaign parameters and advertising click identifiers when they are present in the landing-page URL
• • Contact-form fields are excluded from analytics autocapture, and replay input values are masked
• • Browser Global Privacy Control and Do Not Track signals disable browser analytics collection
• • You can also clear or block browser storage through your browser settings

Newsletter and Marketing Communications

If NBE offers an optional newsletter or marketing-email signup, the signup may collect:

• • Email address
• • Name (if provided)
• • Subscription preferences
• • Engagement data (opens, clicks, unsubscribes)

Customer Relationship Management

We use a customer relationship management (CRM) system to manage client relationships and project communications, which may include:

• • Contact information and communication history
• • Project details and service preferences
• • Appointment scheduling and follow-up activities
• • Sales pipeline and lead tracking data

Appointment Scheduling

If NBE offers online consultation scheduling, the scheduling form may collect:

• • Name and contact information
• • Preferred appointment times
• • Project type and basic requirements
• • Time zone and scheduling preferences

Analytics and Website Usage

We collect website usage data using PostHog and Google Analytics, including:

• • Pages visited and time spent on site
• • Referral sources and search terms
• • Device type, browser, and operating system
• • Geographic location (city/state level only)
• • Approximate geographic context derived by analytics providers
• • Form-view, form-start, validation, and submission-result events without contact-form values
• • Campaign and referral attribution for measuring lead-generation effectiveness

How We Use Your Information

We use collected information to:

• • Provide engineering and architectural services
• • Respond to service inquiries and schedule consultations
• • Process project proposals and contracts
• • Communicate about your project status and updates
• • Send newsletters and marketing communications (with consent)
• • Improve our website and services
• • Comply with legal and regulatory requirements
• • Prevent fraud and ensure security

Legal Basis for Processing (GDPR)

For users in the European Union, we process personal data based on:

• • Consent: Newsletter subscriptions, marketing communications
• • Contractual Necessity: Providing engineering services
• • Legitimate Interest: Website analytics, security, business communications
• • Legal Obligation: Professional licensing requirements, building code compliance

Who We Share Your Data With

Service Providers and Partners

• • Google Analytics (aggregate website analytics)
• • OpenAI API (automated spam screening for contact form submissions)
• • PostHog (product analytics, conversion measurement, and error tracking; privacy-masked session replay may be enabled for troubleshooting)
• • Resend (contact-form email delivery)
• • Neon (lead-record storage)
• • DigitalOcean (website hosting)
• • Professional consultants (architects, contractors, building departments as needed for your project)

Legal Requirements

We may disclose information when required by:

• • Valid legal processes (subpoenas, court orders)
• • Professional licensing boards and regulatory agencies
• • Building departments and municipal authorities (for permit submissions)
• • Insurance providers (for professional liability coverage)

Business Transfers

In the event of a merger, acquisition, or sale of business assets, personal information may be transferred to the acquiring entity.

International Data Transfers

As a California-based business serving clients nationwide, your data may be transferred to and stored in different states. We ensure appropriate safeguards are in place for any international data transfers.

How Long We Retain Your Data

• • Project Files: We retain engineering project files and client communications for 10 years minimum to comply with professional licensing requirements and potential liability claims.
• • Marketing Data: Newsletter subscriptions and marketing preferences are retained until you unsubscribe.
• • Website Data: Comments and user accounts are retained indefinitely unless deletion is requested.
• • Analytics Data: Website usage data is retained according to the configured retention periods in PostHog and Google Analytics; browser attribution is limited to 90 days.
• • Legal Requirements: Some data may be retained longer to comply with legal, regulatory, or professional obligations.

Your Rights and Choices

All Users

• • Access: Request a copy of personal data we hold about you
• • Correction: Update or correct inaccurate information
• • Deletion: Request deletion of your personal data (subject to legal retention requirements)
• • Portability: Receive your data in a machine-readable format
• • Objection: Object to certain types of data processing

California Residents (CCPA Rights)

Under the California Consumer Privacy Act, you have the right to:

• • Know what personal information we collect and how it's used
• • Delete personal information (with certain exceptions)
• • Opt-out of the sale of personal information (we do not sell personal information)
• • Non-discrimination for exercising your privacy rights

EU Residents (GDPR Rights)

To Exercise Your Rights: Contact us at [email protected] with your request. We will respond within 30 days.

• • Right to withdraw consent at any time
• • Right to restrict processing in certain circumstances
• • Right to data portability
• • Right to file complaints with supervisory authorities

Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• • Encryption: Data transmission via SSL/TLS encryption
• • Access Controls: Limited access to personal data on a need-to-know basis
• • Regular Updates: Security software and system updates
• • Staff Training: Regular privacy and security training for team members
• • Backup Procedures: Secure data backup and recovery systems

Third-Party Services

Our website integrates with third-party services that have their own privacy policies:

• • Mailchimp Privacy Policy
• • Calendly Privacy Policy
• • Google Privacy Policy
• • Google Ads Privacy Policy
• • Facebook Privacy Policy

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected such information, we will take steps to delete it promptly.

Changes to This Privacy Policy

We may update this privacy policy periodically to reflect changes in our practices or applicable law. We will notify you of material changes by:

• • Posting the updated policy on our website with a new "Last Updated" date
• • Sending email notifications to active clients (for significant changes)
• • Providing notice during your next service interaction

Professional and Regulatory Compliance

As a licensed engineering firm, we are subject to:

• • Professional Engineering Licensing Requirements in multiple states
• • Professional Liability Insurance documentation requirements
• • Building Code Compliance and permit submission requirements
• • Client Confidentiality obligations under professional engineering ethics

Data Breach Procedures

In the event of a data breach that affects your personal information, we will:

• • Assess the scope and impact of the breach within 72 hours
• • Notify affected individuals via email within 72 hours when feasible
• • Report to relevant authorities as required by applicable law
• • Provide information about steps being taken to address the breach
• • Offer guidance on protective measures you can take

California "Shine the Light" Disclosure

California residents may request information about our disclosure of personal information to third parties for direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes.

Contact Us

If you have questions about this privacy policy or our data practices, please contact us:

Privacy Inquiries:

Email: [email protected]

Phone: +1 949-397-5191

Mail: 200 Spectrum Center Dr STE 300, Irvine, CA 92618, United States

Data Protection Officer: Jonathon Sipe, PE (if applicable)

For California residents exercising CCPA rights, please include "California Privacy Rights" in your subject line.

This privacy policy is designed to comply with applicable privacy laws including GDPR, CCPA, and other state privacy regulations. For specific legal advice regarding privacy compliance, consult with a qualified attorney.