Legal

Privacy Policy

This Privacy Policy explains how Burnhaven ("we", "us", or "our") collects, uses, discloses, and safeguards information when you access our website, terminal, or related services (collectively, the "Services"). This is a general draft provided for informational purposes and should be reviewed by qualified legal counsel before use, as it does not account for specific jurisdictional requirements that may apply to your use of the Services.

By accessing or using the Services, you acknowledge that you have read and understood this Policy. If you do not agree with the practices described here, please do not use the Services.

Overview

1. Information We Collect

We may collect information in the following categories when you interact with our Services:

01

Account Information

Details you provide when registering for or configuring access to the terminal, such as a name, email address, and organisational affiliation.

02

Usage Data

Technical information generated through your use of the Services, including device type, browser, IP address, pages viewed, and interaction timestamps.

03

Communications

Records of correspondence you send to us, including support requests, feedback, and any attachments you choose to provide.

We do not knowingly collect sensitive personal data (such as health, biometric, or financial account credentials) through the Services unless explicitly required and disclosed at the point of collection.

Purpose

2. How We Use Information

Information collected through the Services may be used to:

A

Operate the Services

Provide, maintain, and improve the functionality of the terminal and associated analytical tools.

B

Communicate

Respond to inquiries, send administrative notices, and provide updates relevant to your account or usage.

C

Maintain Security

Detect, investigate, and prevent fraudulent activity, unauthorised access, and other misuse of the Services.

We do not sell personal information to third parties. Any sharing of data described in this Policy is limited to the purposes outlined below.

Basis

3. Legal Basis for Processing

Where applicable data protection law requires a legal basis for processing personal information, we rely on one or more of the following: your consent, the necessity of processing to perform a contract with you, compliance with a legal obligation, or our legitimate interests in operating, securing, and improving the Services, provided such interests are not overridden by your rights.

Disclosure

4. How We Share Information

We may disclose information to the following categories of recipients:

  • Service providers who support hosting, analytics, customer support, or infrastructure functions on our behalf, under contractual confidentiality obligations.
  • Legal and regulatory authorities where disclosure is required to comply with applicable law, respond to lawful requests, or protect our rights, property, or safety, or that of others.
  • Business transferees in connection with a merger, acquisition, reorganisation, or sale of assets, subject to standard confidentiality arrangements.

We do not share personal information with third parties for their own independent marketing purposes without your consent.

Tracking

5. Cookies and Similar Technologies

The Services may use cookies and similar tracking technologies to maintain session state, remember preferences, and understand usage patterns. You can typically control cookie behaviour through your browser settings; however, disabling cookies may limit certain functionality of the Services.

Duration

6. Data Retention

We retain personal information only for as long as reasonably necessary to fulfil the purposes outlined in this Policy, including satisfying any legal, accounting, or reporting obligations. Retention periods may vary depending on the type of information and the context in which it was collected.

Safeguards

7. Data Security

We implement reasonable technical and organisational measures designed to protect information against unauthorised access, alteration, disclosure, or destruction. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security of information transmitted to or from the Services.

Transfers

8. International Data Transfers

Depending on how the Services are accessed and hosted, information may be transferred to, stored, and processed in countries other than your own. Where such transfers occur, we aim to apply appropriate safeguards consistent with applicable data protection requirements.

Control

9. Your Rights and Choices

Depending on your jurisdiction, you may have rights regarding your personal information, which can include the ability to request access to, correction of, deletion of, or restriction on the processing of your data, as well as the right to object to certain processing or to request portability of your information. To exercise any such rights, please contact us using the details provided on our Contact page. We may need to verify your identity before responding to certain requests.

Minors

10. Children's Privacy

The Services are not directed to individuals under the age of majority in their jurisdiction, and we do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us so that we can take appropriate action.

Updates

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Services, or applicable legal requirements. Any material changes will be indicated by revising the date associated with this Policy where such a date is displayed. Continued use of the Services after changes take effect constitutes acceptance of the revised Policy.

Questions

Need clarification on this Policy?

If you have questions regarding this Privacy Policy or how your information is handled, please refer to the contact details listed in the footer of this site. This document is a general template and does not constitute legal advice; it should be adapted to reflect the specific data practices, jurisdictions, and regulatory obligations applicable to Burnhaven.