OVERVIEW
This Privacy Policy describes how NULLPOINT ENGINEERING ("NULLPOINT," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit our website at nullpoint.engineering (the "Site"), communicate with us, or engage our professional services. It also explains your choices and rights.
By using the Site or otherwise interacting with us, you agree to the practices described here. If you do not agree, please do not use the Site. Where we process personal data on behalf of a client under a services agreement, that agreement and the client's instructions may also apply.
DATA_CONTROLLER
NULLPOINT ENGINEERING is the controller of personal information described in this policy for activities relating to the Site and our own business operations (such as responding to inbound inquiries). For client projects, the client may be an independent controller or we may act as a processor; we address that relationship in agreements with clients where relevant.
Contact. info@nullpoint.engineering
INFORMATION_WE_COLLECT
Information you provide. When you fill out forms, email us, schedule a meeting, subscribe to updates, or otherwise contact us, we may collect identifiers and contact details such as your name, job title, company name, email address, phone number, time zone, and the content of your messages or attachments. If you engage us for Professional Services, we may collect billing information, contract details, and project-related communications.
Information collected automatically. When you visit the Site, we and our service providers may collect device and usage data such as IP address, approximate location derived from IP, browser type and version, operating system, referring URLs, pages viewed, timestamps, and identifiers associated with cookies or similar technologies.
Information from third parties. We may receive information from business partners, referral sources, or publicly available sources (for example, to verify company details or enrich contact records), consistent with applicable law.
HOW_WE_USE_INFORMATION
We use personal information to:
- Respond to inquiries, provide quotes, and manage prospective client relationships
- Deliver, administer, and improve Professional Services and client engagements
- Operate, secure, debug, and improve the Site; monitor performance and reliability
- Send administrative messages, service notices, and (where permitted) marketing communications
- Analyze aggregate or de-identified usage to understand how the Site is used
- Detect, prevent, and address fraud, abuse, security incidents, and technical issues
- Comply with legal obligations, enforce our terms, and protect rights and safety
LEGAL_BASES_EEA_UK
If you are in the European Economic Area, Switzerland, or the United Kingdom, we process personal data on these legal bases, as applicable:
- Contract — processing necessary to perform a contract with you or take steps at your request before entering a contract (for example, responding to a services inquiry).
- Legitimate interests — operating and securing the Site, understanding use patterns, business development, and internal administration, where not overridden by your rights.
- Consent — where we rely on consent (for example, certain cookies or marketing), you may withdraw consent at any time without affecting prior lawful processing.
- Legal obligation — where we must process data to comply with law.
COOKIES_AND_SIMILAR_TECHNOLOGIES
We use cookies and similar technologies (such as local storage) for essential Site functionality, remembering preferences where applicable, security, and analytics. You can control or delete cookies through your browser settings; blocking strictly necessary cookies may affect Site behavior.
Performance analytics. We use Vercel Speed Insights to collect anonymized or aggregated performance metrics about how the Site loads and behaves. Vercel may process technical data (such as device type and region) in accordance with Vercel's documentation and privacy practices. For more information, see Vercel Speed Insights and Vercel's Privacy Policy.
DISCLOSURE_AND_PROCESSORS
We do not sell your personal information for money. We may share personal information with:
- Service providers who assist us with hosting, infrastructure, email delivery, analytics, customer relationship tools, calendar scheduling, security, and similar functions, acting on our instructions and subject to appropriate safeguards
- Professional advisors such as lawyers and accountants, under confidentiality obligations
- Authorities when required by law, legal process, or to protect rights, safety, and security
- Business transfers in connection with a merger, acquisition, financing, or sale of assets, subject to standard protections
Our Site is hosted on Vercel; Vercel processes technical and log data as part of providing hosting and related services.
INTERNATIONAL_TRANSFERS
We may process and store information in the United States and other countries where we or our providers operate. If we transfer personal data from the EEA, UK, or Switzerland to countries not deemed adequate by the relevant authority, we use appropriate safeguards such as Standard Contractual Clauses or other mechanisms permitted by law, unless an exception applies.
RETENTION
We retain personal information for as long as necessary to fulfill the purposes described in this policy, including satisfying legal, accounting, or reporting requirements, resolving disputes, and enforcing agreements. Retention periods vary depending on the nature of the data and whether you have an ongoing relationship with us. When retention is no longer required, we delete or anonymize information where feasible.
YOUR_RIGHTS
Depending on your location, you may have rights to access, correct, update, or delete your personal information; restrict or object to certain processing; request portability of data you provided; withdraw consent where processing is consent-based; and lodge a complaint with a data protection authority. We will respond in accordance with applicable law.
To exercise these rights, contact info@nullpoint.engineering. We may need to verify your identity before fulfilling certain requests.
CALIFORNIA_RESIDENTS
If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA") may apply. We describe our practices below for the twelve months preceding the "Last updated" date.
Categories collected. We may collect: identifiers (such as name, email, IP address); commercial information (such as services considered or purchased); internet or network activity (such as browsing on our Site); professional or employment-related information; and inferences drawn from the above. We collect these categories from you, automatically when you use the Site, and in limited cases from third parties, as described in Information We Collect.
Business purposes. We use each category for the operational and legal purposes described in How We Use Information.
Sensitive personal information.We do not use or disclose sensitive personal information for purposes that require a "limit" under the CPRA beyond permitted business purposes.
Your rights. You may have the right to know what personal information we collect, use, and disclose; to request deletion; to correct inaccurate information; to opt out of sale or sharing (we do not sell personal information in the conventional sense; we do not sell personal information of minors under 16); and to limit use of sensitive personal information where applicable. You may designate an authorized agent as permitted by law. We will not discriminate against you for exercising CCPA rights.
Submit requests to info@nullpoint.engineering. We may verify your request as required by law.
OTHER_US_STATES
Residents of certain other U.S. states may have similar privacy rights under state law. Contact us at info@nullpoint.engineering to exercise applicable rights, and we will respond as required by law.
CHILDREN
The Site is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe we have collected such information, contact us and we will take steps to delete it as required by law.
AUTOMATED_DECISION_MAKING
We do not use personal information for automated decision-making or profiling that produces legal or similarly significant effects on individuals in connection with the Site.
SECURITY
We implement reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, or alteration. No method of transmission over the Internet or electronic storage is completely secure; we cannot guarantee absolute security.
THIRD_PARTY_SITES
The Site may link to third-party websites or services. This policy does not apply to those sites. Review their privacy notices before providing information.
CHANGES
We may update this Privacy Policy from time to time. We will post the revised policy on the Site and update the "Last updated" date. If changes are material, we may provide additional notice (for example, a notice on the Site or email where appropriate). Your continued use of the Site after the effective date constitutes acceptance of the revised policy where permitted by law.
CONTACT
Questions about this Privacy Policy or our data practices: info@nullpoint.engineering