This Privacy Policy describes how Peak Maintenance (the developer practice operating the website at https://www.peakmaintenance.buzz) collects, uses, stores and protects information about visitors, clients and correspondents. The practice is operated by Peak Maintenance Pros Llc, a company of 1550 S 1000 E Apt 1804, Clearfield - 84015-1669, United States (US). The depot can be reached by email at reply@peakmaintenance.buzz and by telephone at +15078005394. This document explains in plain language what happens to information before it reaches the desk, what happens while it is held there and what happens when the time comes to remove it.
1. Who We Are
Peak Maintenance Pros Llc is a company registered in the United States that designs and maintains integrated building systems. The company is often referred to in this policy as the Company, we, us or our. The company operates from 1550 S 1000 E Apt 1804, Clearfield - 84015-1669, United States (US), and the website linked to this policy is published under the address https://www.peakmaintenance.buzz.
The Company is the controller of the personal information described in this policy. That means the Company decides why information is collected and how it is handled. Where the Company acts on behalf of a client in respect of systems installed at a client site, the Company may act as a processor for that client, and the separate agreement with the client governs that relationship.
The developer name associated with this website is Peak Maintenance, and the desk responsible for privacy questions sits at the Clearfield depot listed above. Any question about this policy may be sent to reply@peakmaintenance.buzz or raised by telephone at +15078005394 during the hours published on the contact page.
The Company does not operate a large consumer platform. The website exists to explain the six maintenance rounds, to share the depot address and to allow a visitor to write to the desk. Because the scope of the site is narrow, the amount of personal information handled through it is also narrow, and this policy reflects that reality rather than a general template written for a different business.
2. Scope of This Policy
This policy applies to information collected through the website, through email and telephone contact with the desk, and through the ordinary administration of client relationships. It does not apply to information that the Company processes on a client site under the direction of that client, except where this policy says otherwise in the section on systems on client sites.
Information that is collected by a third party website linked from this site is governed by that third party policy, not by this one. The Company does not control the privacy practices of external sites and does not accept responsibility for them. A visitor who follows an external link should read the privacy notice published at that destination before providing information there.
This policy also does not apply to employment records, which are governed by separate internal notices provided to staff, nor to information that is required to be kept confidential by law. Where a legal obligation conflicts with a provision of this policy, the legal obligation prevails and the Company will limit any divergence to what the law requires.
The policy is written to be read alongside the Terms of Service published at the terms page of this site. Together they describe the arrangement between the Company and the people who use the website, and neither document should be read in isolation.
3. Information We Collect
The Company collects only the information it needs to answer a message, schedule a visit, keep a work order and meet its accounting duties. The categories below describe what that means in practice.
Information you provide directly
- Your name, and the name of any colleague you ask us to copy into a reply.
- Your email address, postal address and telephone number, where you choose to give them.
- The subject and content of any message sent through the contact form or by email.
- The address of a building that you would like the Company to visit.
- Information about systems already installed at that building, where you share drawings, schedules or key lists.
- Billing details for clients who have an account with the Company, limited to what is necessary to raise and settle an invoice.
Information collected automatically
When a browser requests a page from this website, the server that answers the request records a small amount of technical information in a log file. This commonly includes the internet protocol address of the requesting device, the date and time of the request, the address of the page requested, the address of the referring page where one is supplied, the browser and operating system identification strings and the response code returned by the server.
This technical information is ordinary web server logging. It is not used to build advertising profiles and it is not combined with the information you provide through the contact form. It exists so that the Company can investigate faults, detect abuse and confirm that a site was available at the time a visit was booked.
Information inferred or derived
The Company may record a short internal note about the context of a request, such as whether it concerns a seasonal check window or an urgent access problem. These notes are written by a person at the desk and are used to route the request to the right round. They are not produced by automated profiling and no decision that produces a legal effect is made about you by automated means.
Information we do not seek
The Company does not ask for government identification numbers, financial account credentials, passwords, health information or precise location of a private individual. If such information is sent unsolicited, the desk will note its arrival, avoid copying it into general correspondence and, where the sender agrees, delete it from the working file.
4. How Information Is Collected
The most common route is the contact form on the contact page. That form does not submit to a remote database owned by the Company. It prepares a message in your own email application, which means the message is sent from your mail account and arrives at reply@peakmaintenance.buzz like any other email. The Company receives only what you choose to include and what your mail provider appends in the ordinary course of sending a message.
A second route is direct email or a telephone call. A call is answered by a person at the desk, and the notes taken during the call become part of the work order record. The Company does not record calls by default. Where a recording is made for training or for the avoidance of a dispute, the person answering will say so at the start of the conversation and the recording will be retained only for as long as the purpose requires.
A third route is a visit to the depot or to a client site. On arrival, a visitor may be asked to sign a key log or an attendance sheet, which records a name, a time and the reason for the visit. These sheets are paper documents kept in the depot cabinet described in the retention section.
A fourth route is passive. Server logs are written whenever a page is requested, without any action by the visitor. The Company does not use form analytics, session recording, heat mapping or cross site tracking on this website. The only passive record is the ordinary server log described above.
Finally, information may arrive through a referral from a client who asks the Company to contact a colleague or a building engineer. In that case, the referring client is expected to have told the person that their details would be shared. The Company confirms the identity of the referral before adding the person to any mailing or correspondence list.
5. Why We Use Information
Information is used to answer messages, to schedule and perform the six maintenance rounds, to maintain the work order bays and to keep the financial records that every trading company must keep. Each purpose below is tied to a specific, reasonable need.
- To reply to a message sent to the desk and to keep a record of that reply.
- To arrange an inspection sheet run, a seasonal check window, a filter change review or a walkthrough sitting.
- To open, track and close work order bays, including any note needed to explain a delay.
- To operate the key log desk, recording who has signed for a ring and when it was returned.
- To raise, send and reconcile invoices and to comply with tax and accounting rules.
- To protect the website and the depot from abuse, fraud and unauthorised access.
- To investigate a complaint, a fault or an incident and to keep the correspondence that shows what was done.
- To send an occasional service reminder where a client has asked to receive one.
The Company does not sell personal information, does not rent contact lists and does not exchange information with marketing brokers. The Company does not use contact details for advertising networks, does not build lookalike audiences and does not place pixel tags on the site for third party marketing.
Where the Company wishes to use information for a purpose not described here, it will first explain the new purpose and, where the law requires it, obtain consent. A change of purpose is never made quietly in the background of an unrelated update.
6. Legal Basis for Processing
Where data protection law requires a stated basis, the Company relies on the following grounds. Performance of a contract covers the handling needed to deliver a service that a client has asked for, including the work order, the inspection sheet and the invoice. Legitimate interests cover the ordinary running of the business, including replying to enquiries, protecting the website and keeping records that are reasonable to keep.
Consent is relied upon where the law requires it, for example where a client asks for a service reminder or where an optional newsletter is offered. Consent is never bundled into an unrelated agreement, and it may be withdrawn at any time by writing to the desk. Withdrawal of consent does not affect processing that happened before the withdrawal.
Legal obligation covers records that must be kept for tax, accounting or regulatory reasons. Where a record is kept only because a law demands it, the Company retains it for the period that the law sets and no longer. Where the law is silent and no other ground applies, the Company removes the record rather than keeping it in case it becomes useful.
Vital interests may apply in an emergency where a person is at risk and information must be shared with an emergency service. The Company will always limit such a disclosure to what is necessary for the emergency and will tell the affected person afterwards unless doing so would create a further risk.
9. Service Providers and Processors
A small number of service providers help the Company run the website and the depot. Each provider is chosen for a specific function, is bound by a written agreement and is permitted to use information only in accordance with the Company instructions. Providers are not permitted to sell information, to combine it with information from other clients or to use it to train a general marketing model.
Hosting is provided by an infrastructure company that stores the static pages of the site and writes the server logs described earlier. Email is handled by a mail provider that delivers messages to the desk and stores them in the company mailbox. Accounting records are prepared by a bookkeeping service that receives invoices and receipts but not the content of client correspondence.
The Company reviews the security posture of each provider at least once a year and requires prompt notification of any incident that affects Company data. Where a provider is located outside the United States, the Company takes reasonable steps to confirm that the transfer is supported by an appropriate safeguard, such as a contractual clause or an adequacy decision.
A provider that fails to meet the agreed standard is replaced. The Company does not continue to use a provider merely because a change would be inconvenient, and a provider that refuses to explain its security measures is not engaged in the first place.
10. Retention of Records
Records are kept for as long as they are needed and no longer. The periods below are the ordinary rules; a specific matter may require a longer or shorter period, in which case the reason is noted with the record.
- Contact form messages and email enquiries: retained for two years after the last exchange, so that a follow up can be answered without starting again.
- Work order bays and inspection sheets: retained for seven years after the order is closed, because a building history is useful and the accounting link must be preserved.
- Key log sheets: retained for three years after the final entry on the sheet.
- Invoices and financial records: retained for the period required by tax and accounting law, which the Company treats as seven years unless a rule says otherwise.
- Server log files: retained for ninety days in the ordinary course and then deleted, unless a log is preserved for a specific investigation.
- Consent records: retained for as long as the consent is relied upon, plus a reasonable period to demonstrate that it was given.
When a retention period ends, the record is deleted or destroyed. Paper records are shredded at the depot, and digital records are removed from the working system and from the provider backup within the next backup cycle. The Company does not maintain a shadow copy of deleted material for marketing or research, and does not promise to restore a deleted record on request.
Where a person asks for deletion and no legal duty requires retention, the Company will delete the information promptly and confirm the deletion in writing. Where a duty does require retention, the Company will explain which duty applies and will restrict access to the smallest possible group until the period ends.
11. How We Protect Information
The Company takes a deliberately modest approach to security: fewer systems hold client information, and each system is simple enough to be understood by the people who operate it. The website is a set of static files, which means there is no login and no database of visitors to breach. The mail provider used for the desk is protected by a strong password, multi factor authentication and device level encryption.
Paper records are kept in a lockable cabinet in the depot at 1550 S 1000 E Apt 1804, Clearfield - 84015-1669, United States (US). The cabinet is the same key cabinet that appears in the design of the site, and the key log desk records who has opened it and when. Paper is removed from the cabinet only for a scheduled run and is returned at the end of the day.
Staff are told to use the work order bay note field for observations and to keep client correspondence inside the company mailbox rather than on a personal account. Devices used on site are enrolled with a screen lock and encryption, and a device that is lost is reported at once so that remote access can be revoked.
No system is perfectly secure, and the Company does not claim otherwise. If an incident occurs that is likely to result in a risk to the rights of an individual, the Company will investigate, contain the incident, notify the affected person without undue delay and notify a supervisory authority where the law requires it. The notice will describe what happened, what information was involved and what steps the person can take.
12. Your Privacy Rights
Depending on where you live, you may have some or all of the rights listed below. The Company applies these rights consistently to everyone who writes to the desk, whether or not a specific law compels it, because a fair process is easier to run than a set of exceptions.
- The right to know whether the Company holds information about you and to receive a copy of it.
- The right to have inaccurate information corrected.
- The right to have information deleted where there is no legal duty to keep it.
- The right to restrict or object to certain uses, including direct marketing.
- The right to receive information in a portable, machine readable format where the law provides for portability.
- The right to withdraw consent at any time where processing is based on consent.
- The right to complain to a supervisory authority or to the Company directly.
- The right not to be discriminated against for exercising a privacy right.
A request is free of charge in the ordinary case. Where a request is manifestly unfounded or excessive, for example a repeated request made within weeks of a previous complete answer, the Company may charge a reasonable fee or decline the request, and will explain the reason in writing.
The Company does not sell personal information and therefore does not offer a separate opt out of sale. It also does not share information for cross context behavioural advertising, which means there is no advertising opt out to exercise on this site.
13. Making a Privacy Request
A request may be sent by email to reply@peakmaintenance.buzz or by letter to Peak Maintenance Pros Llc at 1550 S 1000 E Apt 1804, Clearfield - 84015-1669, United States (US). A telephone request at +15078005394 is accepted as well, though the desk will usually follow up in writing so that the exact scope of the request is recorded.
The desk will acknowledge a request within five business days and will aim to complete it within thirty days. Where a request is complex, the Company will explain why more time is needed and will give an expected date. Verification is proportionate: for a simple copy request, confirming control of the email address used to write to the desk is usually enough, while a deletion request may require a short call to confirm identity.
If the Company cannot fulfil a request, it will explain the reason, identify the legal duty that prevents action and describe how the person may complain. The Company will not use a refusal as a reason to stop answering ordinary service questions, which remain available to every client regardless of any privacy dispute.
An authorised agent may make a request on behalf of another person where the agent provides written authority. The Company may still contact the person whose information is involved to confirm that the authority is genuine, because a privacy right is not a tool for obtaining another person details.
14. Privacy for Children
This website is directed at building owners, managers and engineers, and is not intended for children. The Company does not knowingly collect personal information from a child under the age of thirteen, and does not market any service to children. The contact form asks for a name and an email address in the expectation that it will be used by an adult acting for a building.
If a parent or guardian believes that a child has sent information to the desk, they may write to reply@peakmaintenance.buzz and the Company will remove the information promptly. Where information is removed because it came from a child, the Company will confirm the removal and will not use the incident to add the child or the family to any list.
Information about visitors to a client site is governed by the client policy for that site, not by this website policy. The Company follows the site rules given by the client and does not create a separate record of individuals who merely pass through a lobby or a corridor.
15. Systems on Client Sites
The Company designs and maintains connected systems, which may include access control, sensors, controllers and the small networks that connect them. Those systems belong to the client, not to the Company. Where the Company processes information on a client site, it does so on the instruction of the client and under the terms of the service agreement between the parties.
A controller or access system may log a credential, a door event or a sensor reading. The Company configures logging according to the client policy and does not copy site logs to the depot unless a work order requires it for fault finding. When a copy is taken, it is kept with the work order for the retention period described earlier and then removed.
A person who wishes to exercise a right in respect of information held in a client system should normally contact the client, since the client is the controller of that system. The Company will assist the client in responding to such a request and will not obstruct it. Where a system is monitored by the Company under a service agreement, the Company will follow the client instruction on access, correction and deletion.
The Company does not use a client system to observe individuals for its own purposes and does not retain site video or access events for marketing, research or resale. A technician who needs an export for fault finding records the reason on the work order and removes the export once the fault is closed.
16. International Visitors
The website is hosted in the United States and the depot is located in Clearfield, Utah. A visitor who writes from another country should understand that the message will be received and stored in the United States, where privacy law may differ from the law of the visitor home country.
Where a transfer of personal information from another region is required to answer a message, the Company relies on a lawful transfer mechanism such as a standard contractual clause. The Company keeps the number of overseas providers small so that the transfer map is easy to explain and easy to review.
A visitor from a region with additional rights, such as the European Economic Area, the United Kingdom or Brazil, may exercise those rights in the same way as any other person by writing to the desk. The Company will apply the higher standard where it applies, rather than the more convenient standard, and will explain in the reply which standard has been used.
The Company does not target advertising at any region and does not operate a localised marketing programme. The site is published in English only, and correspondence is handled in English so that the record of a work order remains unambiguous.
17. Changes to This Policy
This policy may change as the practice grows or as the law develops. The last updated date at the top of the page records the most recent revision, and a material change will be described in a short notice at the top of the legal page rather than buried in the text.
Where a change affects the basis on which information is used, the Company will give reasonable notice before the change takes effect and, where consent is required, will ask for it again. A visit to the site after the effective date indicates acceptance of the revised policy for information collected after that date.
Earlier versions of the policy are kept with the company records so that a person who wrote to the desk under an older version can be told which version applied at the time. The Company will provide a copy of an earlier version on request, provided that the request can be verified.
Changes are not made to weaken the protection of information already collected without a valid reason. Where a weakening is proposed for a strong operational reason, the Company will first consider whether the information can be deleted instead, which is usually the better answer.
18. Complaints and Contact
A concern about this policy or about the handling of information should be sent first to the desk at reply@peakmaintenance.buzz, with a short description of the concern and the date of any relevant correspondence. The Company will acknowledge the concern within five business days and will aim to give a substantive reply within thirty days.
If the reply does not resolve the concern, the person may escalate the matter to the management of Peak Maintenance Pros Llc by letter at 1550 S 1000 E Apt 1804, Clearfield - 84015-1669, United States (US). Management reviews every escalated complaint and records the outcome with the work order file.
A person also has the right to complain to a supervisory authority in the place where they live or work. The Company will cooperate fully with a supervisory authority and will provide the records needed to answer a complaint, subject only to the legal protections that apply to the records of other people.
The telephone number for the desk is +15078005394. The desk answers calls during the business hours published on the contact page and returns calls made outside those hours on the next working day. Written correspondence is preferred for a privacy matter because it creates a record that both parties can rely on. This policy is effective from the date shown at the top of the page and applies to the website at https://www.peakmaintenance.buzz together with the desk at the Clearfield depot.