Introduction and Who We Are
This Privacy Policy explains how HEBGEN RANCH LLC collects, uses, discloses, and protects information when you visit www.hebgene.mom, contact us through the website, or engage us for computer systems design and integration services. The services described on this website are developed and operated by the developer Hebgen, acting through HEBGEN RANCH LLC, a limited liability company organized in the State of Utah with its principal place of business at 878 S Chestnut Dr, Fruit Heights - 84037-3216, United States (US).
Throughout this Policy, HEBGEN RANCH LLC is referred to as the company, we, us, or our, and any person who visits the website or uses our services is referred to as you or the visitor. We prepared this Policy so that you can understand, in plain and direct language, what information moves through our hands and the care we apply to it. If any part of this Policy is unclear, we invite you to write to team@hebgene.mom and ask for clarification before you share anything with us.
Scope and Application of This Policy
This Policy applies to information gathered through the website at www.hebgene.mom, through electronic mail sent to our addresses, through telephone calls placed to our published number, and through the ordinary course of delivering professional services to clients. It applies to website visitors, prospective clients, current and former clients, vendors and subcontractors, and applicants who send us professional information.
This Policy does not apply to services we build or operate on behalf of a client under a separate written agreement. When we design, integrate, or operate a platform for a client, that client is the controller of the personal data within the platform, and our role is defined by the contract between us. In that situation, questions about personal data held in the client platform should be directed to the client, and we will support the client in answering them. This Policy also does not govern third-party websites linked from our pages, which are addressed in their own section below.
Information We Collect
The information we handle falls into four broad categories. The first is contact information, meaning names, postal addresses, electronic mail addresses, and telephone numbers that you choose to give us. The second is project information, meaning documents, diagrams, credentials to staging environments, configuration records, and technical details shared for the purpose of planning or delivering work. The third is technical information, meaning the records our website and mail systems generate automatically when you interact with them. The fourth is commercial information, meaning invoices, purchase orders, and payment records connected to our engagements.
We do not collect categories of information beyond those described in this Policy, and we do not gather sensitive categories such as government identifiers, health information, or biometric identifiers through this website. If a project requires handling of sensitive data on behalf of a client, the handling rules are set in that written engagement, not by this Policy.
Information You Provide to Us Directly
When you complete the contact form, send an electronic mail, or speak with us by telephone, you may provide your name, your organization, your email address, your telephone number, and a description of the systems or the assistance you are interested in. We use this information for one primary purpose: to respond to you accurately and to prepare a considered proposal if you ask for one.
Clients under an active engagement provide additional material in the ordinary course of the work. This can include access credentials, architectural documents, data dictionaries, sample records, and internal contacts for scheduling. We treat all such material as confidential business information, handle it under the terms of the signed agreement, and return or delete it at the end of the engagement as the agreement requires. You are never required to provide more information than the task reasonably demands, and we will tell you when a requested item seems disproportionate to the goal.
Information Collected Automatically
Like nearly every website on the internet, our pages generate server records when they are requested. These records typically include the internet protocol address of the requesting device, the type and version of the browser, the operating system, the page requested, the page that referred the request, and the date and time of the request. Hosting providers retain such records for security monitoring, abuse prevention, and capacity planning.
We use this technical information to keep the website available and fast, to diagnose errors, to understand which pages are useful to visitors, and to protect the site against automated misuse. We do not combine server records with project information to build individual profiles for advertising, and we do not sell server records to anyone. Where an internet protocol address can be associated with an approximate region, we treat that association as technical information and not as an attempt to establish your identity.
Cookies and Similar Technologies
A cookie is a small text file that a website places on your device so that the site can remember something between visits or between pages. Our website uses a minimal set of cookies and similar storage. Some are strictly necessary, meaning the page cannot function sensibly without them, such as records that preserve a security preference. Others are analytics cookies that show us aggregated patterns of use, such as which pages receive the most visits.
We do not use advertising cookies, cross-site tracking pixels, or social media beacons on this website. Most browsers allow you to refuse cookies or delete them through the settings menu, and the website will continue to display its content if you do so. If you refuse strictly necessary cookies, some interactive features, such as the contact form, may behave less reliably. Instructions for managing cookies are published by the maker of your browser, and we are happy to point you to them if you write to team@hebgene.mom.
How We Use Information
We use the information described in this Policy for the following purposes:
- To respond to inquiries, prepare proposals, and communicate about ongoing or potential engagements.
- To plan, deliver, test, and support computer systems design and integration projects under signed agreements.
- To issue invoices, process payments through our financial service providers, and keep the books required by law.
- To operate, secure, and improve the website, including measuring aggregate use and defending against abuse.
- To comply with legal obligations, court orders, and lawful requests from public authorities.
- To protect the rights, property, and safety of the company, our clients, and the public.
We do not use your information for automated decision-making that produces legal effects concerning you. If we ever introduce profiling of that kind, this Policy will be amended first, and you will be told before the practice begins. We also do not send marketing electronic mail except to addresses that have asked to receive it, and every such message carries a working way to stop receiving further messages.
Legal Grounds for Processing
Where the law of the European Union, the United Kingdom, or another jurisdiction requires a stated legal basis for processing, we rely on the following grounds. We process information to perform a contract with you or to take steps you request before entering a contract, for example when you ask for a proposal. We process information in our legitimate interests, for example to secure our systems, to keep business records, and to respond to inquiries, provided those interests are not overridden by your rights. We process information with your consent where consent is the appropriate ground, for example for optional communications, and you may withdraw that consent at any time. Finally, we process information to comply with legal obligations that apply to us as a United States company.
Each purpose listed in the section above maps to one of these grounds, and we keep an internal register that records the mapping so that our team can answer questions about any given processing activity consistently and quickly.
How We Share Information
We do not sell personal information, and we do not rent or trade contact lists. We share information only in the situations described here. We share information with service providers who perform functions on our behalf, such as hosting, electronic mail delivery, analytics, and accounting, always under written agreements that restrict their use of the information to our instructions. We share information with professional advisors, such as auditors, insurers, and counsel, when their professional duties require access. We share information with a successor organization in the event of a merger or sale of substantially all assets, on the condition that the successor honors this Policy.
We also disclose information when the law compels it, for example in response to a subpoena or a court order, and when disclosure is necessary to protect someone against imminent harm. In any compelled disclosure, we review the demand for legal sufficiency, and we notify affected individuals when notification is lawful and not prohibited. Any other sharing requires your informed and specific consent, which you may revoke at any time.
Service Providers and Subprocessors
We rely on a short list of commercial providers to operate the business: website hosting and content delivery, electronic mail and calendar services, analytics measurement, telephone service, document storage, and accounting software. Each provider is bound by contract to process information only on documented instructions, to apply security measures no weaker than our own, to restrict access to personnel who need it, and to assist us in responding to requests from individuals.
We evaluate providers before engagement and at regular intervals afterward, and we remove providers who cannot meet these requirements. A current list of the categories of providers, and the functions they perform, is available on request by writing to team@hebgene.mom. When a provider change affects the handling of client project information, we notify affected clients before the change takes effect so that contractual notice obligations are met on both sides.
International Transfers of Data
Our business is based in the United States, and our primary systems are operated from data centers located inside the United States. When a visitor writes to us from another country, the information travels to the United States by the nature of the request. For clients in the European Economic Area, the United Kingdom, or Switzerland, we put in place appropriate safeguards before transferring personal data, most commonly the standard contractual clauses published by the European Commission, together with supplementary technical measures where the assessment calls for them.
We keep a record of transfers, the safeguards applied, and the transfer impact assessments where they are required. If you have questions about the safeguards that apply to your situation, write to team@hebgene.mom and we will describe them in terms specific to your engagement rather than in generalities.
Retention of Data
We keep information only as long as the purpose for which it was collected requires it, plus the periods the law imposes on business records. Inquiry records from prospective clients are kept for twenty-four months from the last contact, so that a renewed conversation does not have to start from nothing. Client project records, including contracts, deliverables, and correspondence, are kept for seven years after the end of the engagement to satisfy tax and commercial record-keeping requirements. Server logs are kept for twelve months. Records of consent for optional communications are kept for the life of the consent and three years afterward, as proof that the consent existed.
When a retention period ends, information is deleted through secure methods or, where deletion is impractical in backups, is isolated and excluded from any further use until the backup cycle removes it. We maintain a retention schedule that assigns a period and a responsible owner to each category of record, and the schedule is reviewed at least once each year.
Security of Information
We apply administrative, technical, and physical safeguards appropriate to the sensitivity of the information. Administrative measures include background screening of personnel with system access, confidentiality undertakings in employment and subcontract agreements, and mandatory security training. Technical measures include encryption of information in transit, encryption of stored information where the platform supports it, multi-factor authentication on administrative accounts, least-privilege access reviews, and centralized logging of significant events. Physical measures include reliance on professional data centers with controlled entry, video monitoring, and environmental protection.
No method of transmission or storage is completely secure, and we state that plainly rather than pretend otherwise. We maintain an incident response plan that assigns roles, communication steps, and escalation paths, and we rehearse the plan so that a real incident is handled with discipline. If a breach of security affects your personal information, we will notify you and, where required, the appropriate authorities, without undue delay and in the manner the law prescribes.
Your Rights and Choices
You have real choices about the information you share with us, and several enforceable rights over information we already hold. Subject to the limits the law allows, you may ask us to confirm whether we process your personal information and to give you a copy of it. You may ask us to correct information that is inaccurate or incomplete. You may ask us to delete information that we no longer need for the purpose it was collected. You may object to processing based on our legitimate interests, and you may ask us to restrict processing while a dispute about accuracy or lawful basis is resolved. Where processing rests on consent, you may withdraw that consent at any time, and withdrawal will not affect the lawfulness of processing done before the withdrawal.
To exercise any of these rights, write to team@hebgene.mom or call +12296966871. We will verify your identity with reasonable questions before acting, because a right that can be exercised by an impersonator protects no one. We answer requests within thirty days where the law permits, and within the shorter statutory period where a specific regulation requires it. We do not charge a fee for a first request, and we do not treat you differently because you made one.
Rights of California Residents
If you are a resident of California, the California Consumer Privacy Act as amended by the California Privacy Rights Act gives you specific rights. You may request to know the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes, and the categories of third parties to whom the information is disclosed. You may request deletion or correction of your personal information, and you may request portability in a usable format. You may limit the use of sensitive personal information, although our website is not designed to collect sensitive personal information at all.
We do not sell or share personal information as those terms are defined by California law, and we have not done so in the preceding twelve months. Exercising your rights will never result in discriminatory treatment by us. Requests may be submitted to team@hebgene.mom, and we will respond within the statutory period of forty-five days, extendable once with notice. California Civil Code Section 1798.83 also permits residents to ask annually for a notice describing disclosures made for direct marketing purposes to third parties for their own use; our answer, as stated above, is that we do not engage in that practice.
Rights in the European Economic Area, the United Kingdom, and Switzerland
If the General Data Protection Regulation or the comparable law of the United Kingdom or Switzerland applies to you, you have the rights described in the section on rights and choices, and additional protections under those laws. You may lodge a complaint with the supervisory authority in your country of residence if you believe our processing infringes the law, and we ask that you also tell us about the complaint so that we can try to resolve it directly. Where we act as a processor for a client, the client remains your primary contact, and we will forward your request to the client and assist them in responding within the legal timelines.
You will not usually be required to pay for the exercise of these rights. A fee may be charged only where the law expressly allows it for manifestly unfounded or excessive requests, and we will explain any such charge before incurring it.
Children and Minors
Our website and our services are directed to professionals and organizations, not to children. We do not knowingly collect personal information from anyone under the age of sixteen, and the content of the site assumes a business audience. If you are a parent or guardian and believe a child has sent us personal information, write to team@hebgene.mom, and we will delete the information promptly after verifying the request.
Where a client engagement could involve data about minors, for example a school district platform, the engagement contract sets specific handling rules, and our teams are trained to follow them without exception.
Third-Party Websites and Links
Our pages may link to third-party resources, such as standards bodies, technology documentation, or professional registries, that we believe are useful to visitors. We do not control those destinations and are not responsible for their content or their privacy practices. A link is not an endorsement, and the presence of a link does not mean that the third party acts on our behalf.
Before submitting personal information to any third-party website, read its privacy notice carefully. If you arrive at a destination from our site and find its practices unclear, we would genuinely like to know, because we review the outbound links on our pages and remove the ones that fall below a reasonable standard of care.
Changes to This Privacy Policy
We may update this Policy to reflect changes in the law, in our services, or in our operating practices. The current version is always published on this page, and the effective date at the top of the page tells you when the latest revision took effect. For material changes, ones that alter how we handle information in a way that matters to you, we will add a visible notice on the website home page for a reasonable period, and we will notify clients under active agreements directly.
Previous versions are retained on request, so that a client or visitor can compare what changed and when. Continued use of the website after the effective date of a revision means you accept the revised Policy; if you do not accept it, you should stop using the website and write to us, because we would rather answer your concern than lose you over a misunderstanding.
How to Contact Us About Privacy
Questions, requests, and complaints about privacy can be sent to team@hebgene.mom or made by telephone to +12296966871 during business hours, Monday to Friday, 8:00 to 18:00 Mountain Time. Written correspondence may be mailed to HEBGEN RANCH LLC, 878 S Chestnut Dr, Fruit Heights - 84037-3216, United States (US).
We answer every privacy message, including the short ones and the difficult ones. The services described on this website are developed and operated by the developer Hebgen, and the name behind the answer you receive will be a person, not a form letter.