Privacy Policy

Introduction

Busilan Engineering LLC ("Busilan Engineering," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website at busilanengineering.com, submit information through our contact forms or career application process, or access our password-protected administrative areas.

By using our website, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our website.

Information We Collect

We may collect the following types of information:

• Contact inquiries: Name, email address, phone number, company name, service interest, and project description when you submit our consultation request form.
• Job applications: Name, email, phone number, LinkedIn profile URL, work authorization status, resume, and optional cover letter when you apply for a position or submit a general application.
• Administrative authentication: When authorized personnel sign in to our internal content management dashboard, Microsoft Entra ID (formerly Azure Active Directory) may collect and process account identifiers such as your name, work email address, organizational affiliation, and sign-in activity logs to verify identity and control access.
• Technical data: Browser type, device information, IP address, pages visited, and referring URLs collected through standard server logs and, on our public marketing pages, Google Analytics (GA4). See Cookies and Similar Technologies below for more detail. We do not enable analytics on employee sign-in, portal, or dashboard areas.

Cookies and Similar Technologies

Like many websites, we use cookies and similar technologies (such as local storage or pixels) to operate our site, understand how visitors use our public pages, and protect forms from spam.

What are cookies?

Cookies are small text files stored on your device when you visit a website. They may be session cookies (removed when you close your browser) or persistent cookies (stored for a defined period).

How we use cookies and similar technologies

• Analytics (Google Analytics 4): On public marketing pages (for example, the homepage and careers section), we use Google Analytics to understand traffic volume, pages viewed, approximate location (country, region, and city derived from IP address), devices, browsers, and referrers. Google may set first-party cookies (such as _ga) to distinguish visitors. We do not enable Google Analytics on employee sign-in, portal, or dashboard areas. Google's processing is described in the Google Privacy Policy. You may opt out using the Google Analytics Opt-out Browser Add-on or your browser's cookie controls.
• Security (Cloudflare Turnstile): Contact and careers forms use Cloudflare Turnstile to reduce spam and abuse. Turnstile may use cookies or similar signals to verify that a submission is from a human user. See Cloudflare's Privacy Policy.
• Strictly necessary / authentication: When authorized staff sign in to our dashboard or employee portal, Microsoft Entra ID and our hosting platform may set session cookies required for secure authentication. These are not used to track anonymous visitors on public marketing pages.

What we do not use

We do not use cookies for third-party advertising, cross-site remarketing, or the sale of your browsing data.

Managing cookies

Most browsers allow you to block or delete cookies. Blocking all cookies may affect certain features (for example, form security checks or staff sign-in). For analytics-specific opt-out, use the Google tools linked above.

How We Use Your Information

We use collected information to:

• Respond to consultation requests and business inquiries
• Review and process job applications
• Authenticate authorized users and secure access to internal administrative tools
• Communicate with you about our services or open positions
• Improve our website, content, and user experience
• Comply with applicable legal and regulatory obligations

We do not sell your personal information to third parties.

How We Store and Protect Information

Website content and job application data are stored using Supabase (PostgreSQL database and secure cloud storage). Application documents such as resumes and cover letters are stored in private storage buckets accessible only through our administrative systems.

Access to our internal dashboard and content management tools is restricted to authorized Busilan Engineering personnel and is protected by Microsoft Entra ID, our enterprise identity and access management platform. Entra ID supports secure sign-in, multi-factor authentication where enabled by your organization, and role-based access controls to help ensure that only verified users can view or modify website content and applicant data.

We implement reasonable administrative, technical, and organizational measures to protect your information. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Microsoft Entra ID Authentication

Busilan Engineering LLC uses Microsoft Entra ID to authenticate access to our administrative dashboard. Entra ID is a Microsoft cloud identity service that allows us to manage user sign-in through our Microsoft 365 / Microsoft Business account and domain.

When you sign in through Microsoft Entra ID, Microsoft may process:

• Your name and work email address associated with your Microsoft account
• Your organization or tenant identifier
• Sign-in timestamps, IP address, and device/browser information
• Multi-factor authentication status, if configured by your organization

We use this information solely to verify that you are an authorized user, maintain audit logs of administrative activity, and prevent unauthorized access to our systems. We do not use Microsoft Entra ID to authenticate public visitors to the marketing website or careers pages.

Microsoft's processing of authentication data is governed by the Microsoft Privacy Statement. We recommend reviewing Microsoft's policies to understand how they handle identity and sign-in data.

Third-Party Services

We use third-party service providers to operate our website and process submissions, including:

• Hosting: Vercel (website delivery)
• Database and storage: Supabase
• Email delivery: Resend
• Analytics: Google Analytics (GA4) on public marketing pages only
• Form security: Cloudflare Turnstile
• Administrative authentication: Microsoft Entra ID

These providers process data on our behalf and are expected to maintain appropriate security measures. Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies separately.

Data Retention

We retain contact inquiry and job application information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. Job applications may be retained to consider candidates for future opportunities, unless you request deletion.

Your Rights

Depending on your location, you may have the right to request access to, correction of, or deletion of your personal information. You may also object to or restrict certain processing activities. Contact us using the information below and we will respond within a reasonable time as required by law.

Visitors in certain U.S. states (including California) and Canada may have additional rights regarding personal information, as described in the next section.

Your Privacy Choices and Opt-Out

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. The options below explain how you can limit analytics and exercise privacy rights on our public website.

Opt out of website analytics

On our public marketing pages, you can opt out of Google Analytics in any of these ways:

• On this page: Use the Opt out of analytics button in the analytics opt-out control at the bottom of this Privacy Policy.
• Browser add-on: Install the Google Analytics Opt-out Browser Add-on.
• Browser settings: Block or delete cookies for busilanengineering.com in your browser.
• Global Privacy Control (GPC): If your browser sends a GPC signal, we do not load Google Analytics on our public pages.

Opting out of analytics does not affect strictly necessary cookies used for form security (Cloudflare Turnstile) or authentication cookies used when authorized staff sign in to internal areas.

California residents (CCPA / CPRA)

We do not sell or share personal information as those terms are defined under California law. We use Google Analytics only to understand aggregate website traffic and improve our site. California residents may request to know, access, correct, or delete personal information we hold about them, or opt out of analytics as described above. To submit a request, email admin@busilanengineering.com with the subject line California Privacy Request.

Canadian residents

Canadian residents may request access to, or correction or deletion of, personal information we hold about them, subject to applicable law. Contact us at admin@busilanengineering.com with the subject line Privacy Request.

Children's Privacy

Our website is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a minor, please contact us so we can delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect the most recent revision. Continued use of the website after changes are posted constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Busilan Engineering LLC
Richmond, VA area
admin@busilanengineering.com