Privacy Policy

1 Information We Collect

CTH Handy collects information that you voluntarily provide to us when you interact with our website, submit inquiries through our contact form, request a consultation, or engage our systems design and integration services. The types of information we may collect include:

• Contact Information — Your full name, email address, phone number, company name, and job title when you fill out our contact form or communicate with us directly.
• Project Details — Information about your technology infrastructure, system requirements, business objectives, and other technical details you share when describing your project needs.
• Communication Records — The content of emails, form submissions, phone conversations, and any other correspondence between you and our team.
• Website Usage Data — Information automatically collected when you browse our website, including your IP address, browser type and version, device type, operating system, referring URLs, pages visited, time spent on pages, and click patterns.
• Technical Log Data — Server logs, error logs, and diagnostic data that help us maintain website performance, identify technical issues, and protect against unauthorized access or malicious activity.

We do not knowingly collect sensitive personal information such as government identification numbers, financial account credentials, health records, or biometric data through this website. If you are a business client, we may receive additional information necessary for project delivery, which is governed by separate contractual agreements.

2 How We Use Your Information

The information we collect serves specific business purposes directly related to the computer systems design and technical consulting services that CTH Handy provides. We use your information for the following purposes:

1. To respond to your inquiries, service requests, and consultation bookings in a timely and professional manner.
2. To assess your project requirements, prepare proposals and technical assessments, and design customized systems architecture solutions tailored to your needs.
3. To communicate with you about project status, deliverables, timelines, and any changes or updates to our services.
4. To improve and optimize our website experience, including analyzing user behavior patterns and identifying areas where our content or navigation can be enhanced.
5. To maintain the security and integrity of our website and systems, including detecting and preventing fraudulent activity, unauthorized access, or misuse.
6. To comply with legal obligations, enforce our terms of service, and protect the rights, property, and safety of CTH Handy, our clients, and the public.
7. To send you relevant information about our services, industry insights, and technology updates, but only when you have explicitly consented to receive such communications.

3 Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and collect usage analytics. A cookie is a small text file stored on your device by your web browser. We use the following categories of cookies:

Essential Cookies

These cookies are necessary for the website to function properly. They enable basic features such as page navigation, form submission, and secure access to certain areas of the website. The website cannot operate correctly without these cookies, and they do not require your consent under applicable privacy laws.

Analytics Cookies

We use analytics cookies to understand how visitors interact with our website, which pages are most frequently visited, how users navigate through our content, and whether they encounter any errors. This information is aggregated and anonymized, helping us improve website performance and user experience. We may use third-party analytics services, such as Google Analytics, which operate under their own privacy policies.

Functional Cookies

Functional cookies allow the website to remember choices you make, such as your preferred language or region, and provide enhanced, more personalized features. These cookies may be set by us or by third-party providers whose services we have integrated into our pages.

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies, set preferences for specific websites, or enable a do not track signal. Please note that disabling certain cookies may affect the functionality and performance of our website. For more detailed information about managing cookies, consult your browser documentation or visit industry resources such as aboutcookies.org.

4 How We Share Information

CTH Handy respects the confidentiality of your information. We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information only in the following limited circumstances:

• Service Providers — We engage trusted third-party service providers who assist us in operating our website, managing our business operations, and delivering our services. These may include hosting providers, email delivery services, analytics platforms, and customer relationship management tools. All service providers are contractually bound to protect your information and use it solely for the specific purposes we authorize.
• Legal Compliance — We may disclose information when required by law, regulation, legal process, or governmental request. This includes responding to subpoenas, court orders, or requests from law enforcement authorities with proper jurisdiction.
• Business Transfers — In the event of a merger, acquisition, restructuring, or sale of all or a portion of CTH handyman LLCs assets, client information may be transferred as part of the transaction. You will be notified via email or a prominent notice on our website of any such change in ownership or control of your personal information.
• Protection of Rights — We may share information to protect the rights, property, or safety of CTH Handy, our clients, employees, or the public, including exchanging information with other organizations for fraud protection and security purposes.
• With Your Consent — We may share your information with third parties when we have your explicit consent to do so, such as when you request that we coordinate with another technology vendor or service provider on your behalf.

5 Data Security

Protecting your information is a fundamental priority for CTH Handy. As a computer systems design and cybersecurity firm, we apply the same rigorous security standards to our own operations that we recommend to our clients. Our security measures include:

• Encryption — All data transmitted between your browser and our website is encrypted using Transport Layer Security (TLS) protocols. We encrypt sensitive information both in transit and at rest using industry-standard encryption algorithms.
• Access Controls — We implement strict role-based access controls, ensuring that only authorized personnel with a legitimate business need can access personal information. Access is granted on a least-privilege basis and is regularly reviewed and audited.
• Network Security — Our infrastructure is protected by enterprise-grade firewalls, intrusion detection and prevention systems, distributed denial-of-service protection, and continuous security monitoring tools.
• Security Audits — We conduct regular security assessments and vulnerability scans of our systems, applications, and network infrastructure to identify and remediate potential risks proactively.
• Incident Response — We maintain a documented incident response plan and procedures to address any suspected data breach or security incident. In the unlikely event of a breach affecting your personal information, we will notify affected individuals and relevant regulatory authorities in accordance with applicable laws.
• Employee Training — All employees and contractors receive regular training on data protection practices, security protocols, and their obligations to maintain the confidentiality and integrity of client information.

While we implement comprehensive security measures, no method of electronic storage or transmission over the Internet is completely secure. We continuously monitor the threat landscape and update our security practices to address emerging risks, but we cannot guarantee absolute security against all possible threats.

6 Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, contractual, or reporting requirements. Our retention practices follow these principles:

• Contact form submissions and inquiry records are retained for the duration of our business relationship plus a reasonable period thereafter for follow-up and record-keeping purposes.
• Client project data, technical specifications, and systems documentation are retained in accordance with contractual obligations and industry best practices for professional services engagements.
• Website usage logs and analytics data are retained in an aggregated or anonymized form for business analysis purposes. Raw log data containing identifiable information is periodically purged.
• Marketing communications data, including email subscription preferences, is retained until you unsubscribe or request deletion.
• Legal and financial records are retained for the minimum period required by applicable statutes of limitation and regulatory requirements.

When personal information is no longer required for the purposes described above, we securely delete or anonymize it using methods designed to prevent unauthorized recovery or reconstruction.

7 Your Rights and Choices

You have certain rights regarding the personal information we hold about you. Subject to applicable law and any contractual obligations, these rights may include:

• Right to Access — You may request a copy of the personal information we hold about you, along with details about how we process it. We will provide this information in a commonly used electronic format unless you request otherwise.
• Right to Rectification — If you believe that any personal information we hold about you is inaccurate, incomplete, or outdated, you may request that we correct or update it.
• Right to Deletion — You may request that we delete your personal information, subject to legal obligations or legitimate business interests that require us to retain certain data.
• Right to Restrict Processing — You may request that we limit how we use your personal information in certain circumstances, such as while we verify the accuracy of disputed data.
• Right to Data Portability — Where technically feasible and legally required, you may request that we transfer your personal information directly to another organization or provide it to you in a structured, machine-readable format.
• Right to Object — You may object to our processing of your personal information for direct marketing purposes or when our processing is based on legitimate interests rather than consent or contractual necessity.
• Right to Withdraw Consent — Where our processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact us using the information provided in the Contact Information section below. We will respond to your request within the timeframe required by applicable law, typically within thirty days. We may need to verify your identity before processing certain requests.

8 Third-Party Services and Links

Our website may contain links to third-party websites, tools, platforms, or services that are not owned, operated, or controlled by CTH Handy or CTH handyman LLC. This Privacy Policy applies solely to information collected through our website and does not extend to any third-party services.

When you click on links to third-party websites, you will be directed to their sites, which have their own privacy policies and data collection practices. We strongly encourage you to review the privacy policies of every website you visit and every service you use. We do not accept any responsibility or liability for the content, privacy practices, or security of third-party websites or services, regardless of whether we link to them from our website.

We may also integrate third-party services into our website for functionality purposes, such as embedded maps, analytics tools, or content delivery networks. These third parties may collect information about your interaction with their services independently of our website. Where feasible, we select third-party providers who demonstrate robust privacy and security commitments.

9 Childrens Privacy

Our website and services are designed for business professionals and organizations engaged in computer systems design and integrated technology solutions. We do not knowingly collect, solicit, or maintain personal information from individuals under the age of thirteen, and our services are not directed toward children.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately using the contact details provided below. Upon verification, we will take prompt steps to remove such information from our records and terminate any associated accounts.

If we become aware that we have inadvertently collected personal information from a child under thirteen without verified parental consent, we will delete that information as quickly as possible.

10 International Data Transfers

CTH Handy is headquartered in the United States at 4889 W Hillside Dr, Vernal, Utah 84078-9403. Our website and services are hosted on infrastructure located within the United States. If you access our website or services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where our servers and central database are located.

The data protection laws and regulations of the United States may differ from those in your country of residence. By using our website or providing us with your personal information, you acknowledge and consent to the transfer of your information to the United States for processing in accordance with this Privacy Policy.

For clients and website visitors located in the European Economic Area, the United Kingdom, or other jurisdictions with specific data transfer requirements, we implement appropriate safeguards, such as standard contractual clauses or other legally recognized transfer mechanisms, to ensure that your personal information receives an adequate level of protection.

11 Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will notify you by posting a prominent notice on our website, updating the Effective Date at the top of this page, and, where appropriate, sending an email notification to clients with whom we maintain an active business relationship.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website and services after any changes to this Privacy Policy constitutes your acceptance of the updated terms. If you disagree with any changes, you should discontinue use of our website and contact us regarding your concerns.

Material changes that significantly affect how we use or share your personal information will not be applied retroactively. If we intend to use previously collected personal information for a new purpose that is materially different from the original purpose of collection, we will seek your consent before doing so.

12 Your California Privacy Rights

If you are a resident of California, you may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). These rights include the right to know what personal information we collect, use, disclose, and sell; the right to request deletion of your personal information; the right to opt out of the sale or sharing of your personal information; and the right to non-discrimination for exercising your privacy rights.

We do not sell personal information as the term sell is defined under California law. We do not share personal information for cross-context behavioral advertising purposes. If this practice changes in the future, we will update this Privacy Policy and provide you with the necessary opt-out mechanisms as required by law.

To exercise your California privacy rights, please contact us using the information in the Contact Information section below. You may designate an authorized agent to submit requests on your behalf, provided that the agent provides written proof of authorization and we can verify your identity directly.

13 Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us using the information below. We take all privacy inquiries seriously and will respond promptly and thoroughly.

We aim to acknowledge all privacy-related inquiries within two business days and provide a substantive response within fourteen days. If your inquiry is particularly complex or requires legal review, we will communicate an expected timeline for resolution.

14 Governing Law

This Privacy Policy and any disputes arising from or relating to it shall be governed by and construed in accordance with the laws of the State of Utah and the applicable federal laws of the United States of America, without regard to conflict of law principles.

Any legal action or proceeding arising out of or related to this Privacy Policy or the collection, use, or disclosure of your personal information shall be brought exclusively in the state or federal courts located in Uintah County, Utah. By using our website and services, you consent to the personal jurisdiction of these courts.

The invalidity or unenforceability of any provision of this Privacy Policy shall not affect the validity or enforceability of the remaining provisions, which shall remain in full force and effect.