1. Principles of Data Minimization
Buddybeacon Vault BX Ltd ("we", "us", or "our"), operating the domain buddybeaconvaultbx.beauty, maintains an operational philosophy rooted in rigorous data minimization. As an organization dedicated to technical security, radio analysis, and defensive counter-surveillance education, we enforce identical strict boundaries upon our digital infrastructure.
We deliberately design our static web delivery infrastructure to prevent unnecessary tracking, cross-site telemetry, advertising profiling, or invasive browser fingerprinting.
2. Data Collection Categories and Operational Purpose
We only process personal information when explicitly submitted by the user or when technologically strictly necessary to serve the web application:
- Directly Provided Inquiries: When you complete our contact inquiry form, we collect your submitted name, organizational affiliation, email address, inquiry topic, and message content. This information is processed exclusively to address your technical inquiry and render security advisory communications.
- Technical Transmission Logs: Web server connections inevitably process your IP address, browser user-agent header, requesting URI, and access timestamps. These server access logs are captured strictly for transient network routing and cybersecurity intrusion prevention.
- Local Browser State: We store small client-side preferences (such as your chosen cookie consent tier) in your browser's local storage to prevent banner fatigue on subsequent page navigations.
3. Third-Party Service Processors & Cross-Border Transfers
We do not sell, rent, monetize, or lease visitor personal data to data brokers or advertising exchanges. Any technical infrastructure suppliers we engage (such as bare-metal server hosts, DNS routing providers, and TLS certificate authorities) are bound by rigorous Data Processing Addendums (DPAs) complying with the UK General Data Protection Regulation (UK GDPR) and EU Regulation 2016/679.
Where technical routing requires cross-border transmission outside the United Kingdom or the European Economic Area, such transfers occur exclusively pursuant to UK International Data Transfer Agreements (IDTAs) or approved Standard Contractual Clauses (SCCs).
4. Data Subject Rights (GDPR, UK DPA & CCPA/CPRA)
Subject to applicable statutory requirements in your jurisdiction, you maintain clear enforceable rights concerning your personal data:
- Right of Access: You may request confirmation of whether your data is being processed and obtain a portable copy of stored personal records.
- Right to Rectification: You may request immediate correction of inaccurate or incomplete contact records.
- Right to Erasure ("Right to Be Forgotten"): You may request permanent deletion of your inquiry messages and contact information from our active databases.
- Right to Restriction and Objection: You may object to or restrict processing based on legitimate business interests.
- California Privacy Rights (CCPA / CPRA): California residents have the right to opt out of the sale or sharing of personal information. We state unequivocally: we do not sell or share your personal information.
5. Retention Schedules
Inquiry communications submitted through our secure contact desk are retained for a maximum duration of twelve (12) calendar months from the date of final resolution, after which all electronic correspondence is securely purged. Transient server connection logs are automatically overwritten on a rolling thirty (30) day security retention cycle.
6. Data Protection Officer (DPO) & Inquiries
For formal privacy inquiries, data subject access requests, or regulatory oversight communications, contact our designated privacy officer:
Data Protection Officer
Buddybeacon Vault BX Ltd
44 Chancery Lane, Holborn, London WC2A 1JE, United Kingdom
Electronic Mail: [email protected]