This Privacy Policy describes how Downshyft LLC collects, uses, stores, shares and protects personal information in connection with the website at www.downshyft.lat and with the slope watch, sensor monitoring and reporting services offered by the company. The policy is written for clients, prospective clients, site visitors, contractors and other individuals who interact with the company. It is meant to be read in full, although the summary below offers a plain statement of the main points.
Downshyft is the developer name used for the digital tools, monitoring dashboards and website work produced by the company. Downshyft LLC, 7533 S Center View Ct, West Jordan - 84084-5526, United States (US), is the entity that operates this website, administers the services and acts as the controller of the personal information described here.
1. Scope of This Policy
This Privacy Policy applies to personal information that Downshyft LLC collects through the website at www.downshyft.lat, through email correspondence, through telephone calls, through the contact form on the website, and through the delivery of slope watch services in the field. It applies to individuals who visit the website without contacting the company, to individuals who send an enquiry, to staff of client organisations who appear in project correspondence, and to contractors and site visitors whose details are recorded during a monitoring round.
The policy does not apply to information that is not personal information, such as aggregate slope measurements, instrument readings, weather records or site plans that contain no information about an identifiable individual. It also does not apply to third party websites that may be reached through links on this site. Those websites operate under their own privacy notices, and Downshyft LLC has no control over their practices.
The policy covers all personal information regardless of the format in which it is held, whether in email, in cloud storage, in a monitoring dashboard, in a printed field note or in an archived report at the West Jordan desk. Where a client organisation provides its own privacy notice to its staff and contractors, that notice may apply alongside this policy in respect of the client own processing activities.
2. Identity of the Controller
The controller responsible for the processing described in this policy is Downshyft LLC, with registered address at 7533 S Center View Ct, West Jordan - 84084-5526, United States (US). The company can be reached by email at contact@downshyft.lat and by telephone at +18285913640. Enquiries about privacy may be directed to either channel and will be routed to the person responsible for data protection matters within the company.
Downshyft LLC is a small practice, and privacy questions are handled directly by a named member of the team rather than by an outsourced function. This arrangement is deliberate. The person who answers a privacy question is also the person who can check the underlying records, explain how a monitoring report was produced and correct an entry if it is wrong. The company believes that a short chain of accountability produces better outcomes than an anonymous ticketing system.
Where a client organisation acts as a controller in respect of personal information that Downshyft LLC processes on its behalf, for example a staff roster provided for site access purposes, the company acts as a processor for that information. In those circumstances the client organisation remains the primary point of contact for the individuals concerned, and the company processes the information only on documented instructions.
The company publishes this policy in a form that can be read without a specialist. Short sentences and named examples are used so that a site supervisor, a procurement officer or an individual who has simply sent an email can understand what happens to their information. Where a term carries a special meaning, the meaning is explained at the point where the term is used rather than left to a definitions schedule at the end.
The policy also reflects the scale of the company. Downshyft LLC is not a large platform and does not operate a commercial data brokerage. The amount of personal information held is modest, the purposes are narrow and the people who can reach the records are few. That structure is a security advantage, and the policy is written to preserve it rather than to describe a complexity that does not exist.
3. Information We Collect
Downshyft LLC collects personal information in several categories. The categories depend on how an individual interacts with the company, and the company does not collect information that is not needed for a stated purpose.
Contact and identity details
When an individual sends an enquiry through the contact form, by email or by telephone, the company receives a name, an email address and, where provided, a telephone number, a job title, an organisation name and a site location. These details are needed to answer the enquiry and to maintain a record of the conversation.
Correspondence and enquiry content
The company retains the content of enquiries, quotations, scheduling messages and project correspondence. This includes any attachments such as site plans, photographs of slopes, inspection notes or instrument readings that a client chooses to send. Attachments that depict individuals, for example photographs of a site team, are treated as personal information and handled under this policy.
Field records and site access details
During a watch round the observer may record the names and roles of site contacts, access instructions, escort arrangements and the signature of the person who received a report. The company also records the name of the technician who walked the round, because every report must be attributable to a person who can stand behind its findings.
Technical and device information
When an individual visits the website, the hosting environment may record technical information such as an IP address, a browser type, a device type, a referring page and the time of the request. This information is used for security, for diagnosing faults and for understanding which pages are useful. It is not used to build a profile of an individual for advertising purposes.
Billing and payment details
Where a client engages the company under a written agreement, the company may receive billing contact details, a purchase order reference and, where required by the client accounting system, a tax identifier. The company does not store full payment card numbers on its own systems. Card payments, where used, are handled by a payment provider under its own security standards.
4. How We Collect Information
The company collects information directly from individuals in most cases. Direct collection occurs when an individual completes the contact form, sends an email, makes a telephone call, signs a field report, attends a site meeting or provides a business card. Direct collection also occurs when a client supplies a staff roster for access control purposes or names a site contact for a monitoring programme.
The company collects some information automatically through the website. Server logs record requests to the site, and a small number of technical cookies may be set to keep the site working correctly. The company does not use tracking pixels for advertising and does not allow third party advertising networks to place cookies on this site.
The company may receive information from a client organisation about individuals who work at a monitored site, for example the name of a foreman who receives the weekly round report. In those cases the information is limited to what is necessary for the service to function and is handled in accordance with the instructions of the client organisation.
In limited circumstances the company may receive information from a public source, such as a business registry or a public tender notice, where a prospective client has published a contact address for procurement purposes. The company uses that information only to make a relevant business contact and does not combine it with other information for profiling.
5. Purposes of Processing
Downshyft LLC processes personal information for a defined set of purposes. Each purpose is connected to the operation of the website or the delivery of slope watch services, and the company does not process information for unrelated reasons.
- Responding to enquiries. The company uses contact details and message content to answer questions, prepare quotations and arrange site visits.
- Delivering the service. The company uses site contacts, access details and field records to plan rounds, issue reports and maintain the monitoring archive.
- Maintaining safety records. The company records who walked a round, who received a report and what action was recommended, because these records may be needed to support a safety decision or an incident review.
- Managing client relationships. The company uses correspondence and project history to keep track of schedules, renewals and outstanding actions.
- Billing and accounting. The company uses billing details to issue invoices, process payments and meet its accounting and tax obligations.
- Operating and securing the website. The company uses technical information to keep the site available, diagnose faults and protect against abuse.
- Improving services. The company reviews aggregate usage and feedback to decide which pages and reports are useful and where the service can be made clearer.
- Meeting legal obligations. The company may process information where the law requires it, for example in response to a valid legal request or for the retention of business records.
The company does not sell personal information. It does not rent contact lists. It does not use personal information to train advertising models. Any new purpose that emerges in future will be assessed before processing begins, and this policy will be updated where the change is material.
6. Legal Bases for Processing
Where data protection law requires a legal basis for processing, Downshyft LLC relies on one or more of the following bases, depending on the situation.
Processing is necessary for the performance of a contract, or for steps taken at the request of an individual before a contract is formed. This covers the delivery of monitoring services, the issue of reports and the handling of billing information under a client agreement.
Processing is necessary for the legitimate interests of the company or a third party, where those interests are not overridden by the rights of the individual. This covers the operation of the website, the security of the company systems, the maintenance of business correspondence and the improvement of service quality. The company has assessed these interests and considers them proportionate to the limited information involved.
Processing is necessary to comply with a legal obligation, such as the retention of accounting records, the response to a lawful request from a competent authority, or the preservation of records relevant to an investigation.
Where none of the above applies, and where consent is required, the company asks for consent in a clear and specific manner before processing begins. Consent may be withdrawn at any time by contacting the company, and withdrawal does not affect processing that took place before the withdrawal.
7. Field Records and Site Data
Slope watch work produces a distinctive kind of record. A round report includes photographs of the terrain, instrument readings, notes on debris and the names of the people who observed and received the report. The company treats these records with the same care as any other personal information, while recognising that the technical content of a slope observation is usually not personal in itself.
Photographs are taken to show the ground, not the people on it. Where a person appears incidentally in a photograph, the image is retained only if it is useful to the technical record, and it is not published on the website or used in marketing material without a separate request for permission. Where a client asks that a particular image be restricted, the company records the restriction in the project file.
Field notes are stored in a way that links them to a named observer. This link is essential because a report must be attributable, and because an observer may be asked to explain a judgement months after the visit. The company does not use this link for performance monitoring beyond the legitimate need to ensure that rounds are completed to the required standard.
Reports issued to a client are archived at the West Jordan desk so that future rounds can be compared with past ones. The archive is access controlled and is retained for the period described in the retention section of this policy.
9. Measurement and Analytics
The company uses aggregate measurement to understand whether the website serves its visitors. Measurements include the number of page views, the pages that are most often read and the general region from which requests originate. The company prefers aggregate reporting over individual tracking and configures any measurement tool to avoid collecting more detail than is necessary.
Where a measurement tool is used, the company reviews its settings to reduce data retention, to avoid advertising features and to avoid sharing data with third parties for their own purposes. Search console tools provided by search engines may report aggregate query data to the company. That data is used to improve page titles and descriptions, not to identify individuals.
The company does not use heat maps that record individual keystrokes, session replay tools that reconstruct an individual visit, or fingerprinting techniques that attempt to identify a device across websites. If any of these tools is introduced in future, this policy will be updated and any required consent will be obtained before the tool is switched on.
11. Service Providers and Processors
Downshyft LLC uses a limited number of service providers to operate the website and the business. These providers process information on the instructions of the company and are not permitted to use it for their own purposes.
Website hosting and content delivery are provided by infrastructure companies that store the pages and serve them to visitors. Email is handled by a mail provider that stores correspondence in a controlled environment. Accounting and invoicing are supported by software that holds billing records. Field data is stored in an access controlled repository with version history so that changes can be traced.
Each provider is selected with attention to security posture and data location. Where a provider offers a data processing agreement, the company reviews and accepts it. Where a provider is located outside the United States, the company considers the safeguards available for the transfer and documents its reasoning.
The company reviews its provider list periodically and removes any provider that no longer meets its requirements. A current list of provider categories, without confidential contract details, is available to clients on request.
12. Retention of Information
Downshyft LLC keeps personal information only for as long as it is needed for the purpose for which it was collected, or for as long as the law requires. Retention periods differ by category, and the company applies them consistently.
- Enquiries that do not become projects. Correspondence and contact details are kept for up to two years after the last exchange, so that a follow up conversation can refer to the earlier context. After that period the records are deleted or reduced to an anonymous count.
- Project correspondence. Emails, schedules and site contact details are kept for the duration of the engagement and for six years afterwards, reflecting the period during which a question about the service is most likely to arise.
- Field reports and safety records. Round logs, check sheets and closure reports are kept for the life of the monitoring programme and for a further ten years, because comparison across seasons is central to the value of the record.
- Billing records. Invoices and related accounting records are kept for seven years, in line with ordinary accounting practice and tax requirements.
- Website logs. Server logs are kept for a short period, normally no more than ninety days, unless a security investigation requires a longer hold.
- Marketing preferences. A record of an opt out is kept indefinitely so that the company can honour the choice.
When a retention period ends, records are deleted or made permanently unreadable. Where deletion of an individual document would damage a technical record that is still needed, the company removes the personal details from the document and keeps the anonymous technical content.
13. Security Measures
Downshyft LLC applies technical and organisational measures to protect personal information against loss, misuse, unauthorised access and alteration. The measures are proportionate to the size of the company and the sensitivity of the information it holds.
Access to systems is limited to people who need it for their work. Accounts are protected by strong passwords and, where available, multi factor authentication. Administrative access is reviewed when a person leaves the company or changes role. Shared accounts are avoided so that actions can be attributed to an individual.
Data in transit is encrypted using standard transport security. Data at rest is protected by the security features of the hosting and storage providers, including encryption where the provider offers it. Backups are taken regularly and tested so that a failure can be recovered from without losing the monitoring archive.
Physical records, including signed field sheets, are held in a locked cabinet at the West Jordan desk. Visitors to the desk are accompanied, and documents are not left in view outside working hours.
The company trains its small team on phishing, password hygiene and the handling of client information. A security incident that affects personal information is assessed promptly, contained where possible and, where required, reported to affected individuals and to the relevant authority.
14. International Transfers
Downshyft LLC is based in the United States and primarily stores information within the United States. Some service providers may process information in other countries, and a client or correspondent may be located outside the United States.
Where information is transferred across a border, the company takes steps to ensure that the transfer is lawful and that the information continues to receive an appropriate level of protection. Steps may include the use of standard contractual clauses, a review of the provider security programme, or reliance on a recognised adequacy decision where one applies.
Individuals who wish to know whether their information is transferred outside their country may contact the company using the details at the end of this policy. The company will explain the relevant safeguard in plain terms.
The company does not transfer personal information to a jurisdiction for the purpose of avoiding legal protections. Transfers are driven by the practical needs of hosting, email and service delivery, and the provider landscape is reviewed as part of the regular provider assessment described earlier.
15. Your Privacy Rights
Depending on where an individual lives, data protection law may give that individual a set of rights in relation to personal information. Downshyft LLC honours these rights for all individuals who contact the company, regardless of location, unless a specific legal exception applies.
- Right of access. An individual may ask whether the company holds personal information about them and may request a copy of that information.
- Right to correction. An individual may ask the company to correct information that is inaccurate or incomplete.
- Right to deletion. An individual may ask the company to delete information where there is no continuing lawful reason to keep it.
- Right to restriction. An individual may ask the company to limit the processing of information while a question about its accuracy or use is resolved.
- Right to object. An individual may object to processing that is based on the legitimate interests of the company. The company will stop the processing unless it can show compelling grounds that override the objection.
- Right to portability. An individual may ask for information that they provided to be supplied in a structured and commonly used format.
- Right to withdraw consent. Where processing is based on consent, the individual may withdraw it at any time.
- Right to complain. An individual may lodge a complaint with a supervisory authority in their country of residence or with the company directly.
Requests should be sent to contact@downshyft.lat or by post to Downshyft LLC, 7533 S Center View Ct, West Jordan - 84084-5526, United States (US). The company will acknowledge a request within a reasonable time and will respond within the period required by applicable law, normally one month. Where a request is complex, the company may extend the period and will explain the reason for the extension.
To protect the information of others, the company may ask for evidence of identity before acting on a request. The company will not charge a fee for a reasonable request, although it may charge a reasonable fee for repetitive or manifestly unfounded requests where the law allows.
16. Privacy for Children
The website and the services of Downshyft LLC are intended for businesses, contractors and professionals. They are not directed at children, and the company does not knowingly collect personal information from a child under the age of thirteen.
Site photographs taken during a monitoring round are intended to record the ground rather than the people on it, and the company does not request information about children in connection with its work. If a client supplies information that appears to relate to a child, for example a school site visit photograph, the company will ask the client to confirm that appropriate permission has been obtained.
If a parent or guardian believes that the company has received information about a child without permission, they should contact the company using the details at the end of this policy. The company will investigate promptly and will delete the information where it has no lawful basis to keep it.
17. Marketing Communications
Downshyft LLC sends occasional service updates and seasonal notes to clients and to individuals who have asked to receive them. The company does not add an individual to a marketing list merely because that individual sent an enquiry, unless the individual has indicated that updates would be welcome.
Every marketing message includes a clear way to opt out. An opt out request is processed promptly, and the company keeps a minimal record of the opt out so that the preference is honoured in future. Opting out of marketing does not affect messages that are necessary to deliver a service, such as a round schedule or a closure report.
The company does not buy contact lists and does not use personal information from social media platforms to build marketing audiences. If the company attends a trade event, contact details collected at the event are used only for the follow up requested by the individual.
18. Third Party Links and Services
The website may contain links to third party sites, such as a mapping service, a professional body or a client organisation. These links are provided for convenience. Downshyft LLC does not control the content or the privacy practices of those sites, and a visit to a third party site is governed by that site own privacy notice.
Where the company embeds a third party tool, for example a map or a form, the company reviews the tool to understand what information it collects and whether it sets cookies. Embedded tools are kept to a minimum, and none is used to track an individual across other websites.
If a client dashboard links to a third party monitoring platform, the client is responsible for reviewing the privacy notice of that platform. The company can provide a summary of the platform data handling on request, but the platform operator remains responsible for its own practices.
19. Changes to This Policy
Downshyft LLC reviews this Privacy Policy at least once a year and whenever a material change occurs in the way information is collected or used. The effective date at the top of the page shows when the current version took effect.
Where a change is material, the company will take reasonable steps to notify affected individuals, for example by a notice on the website or by an email to clients with an active engagement. Minor corrections, such as a clarification of wording or an update to a contact detail, may be made without individual notice, and the version number will be updated.
Continued use of the website after a change takes effect indicates acceptance of the revised policy for information collected through the website. For services delivered under a written agreement, any change that affects the processing of client information will be discussed with the client before it is applied where the agreement requires that discussion.
20. How to Contact Us
Questions, requests and complaints about privacy should be sent to the company using the details below. The company welcomes the opportunity to resolve a concern directly before an individual escalates it to a supervisory authority.
Downshyft LLC
7533 S Center View Ct, West Jordan - 84084-5526, United States (US)
Email: contact@downshyft.lat
Telephone: +18285913640
Correspondence is read during business hours, Monday to Friday, 8:00 to 17:30. A privacy request is logged on arrival so that it can be tracked through to a response, and the company will tell the individual who is handling the matter.
If an individual is not satisfied with the response of the company, they may complain to the data protection authority in their country of residence. The company will cooperate with any such authority and will provide the information needed to review the matter.
This policy is published in English. Where a translation is provided for convenience, the English version governs in the event of a discrepancy.