Privacy Notice

Who we are

This website (hunzawater.co) is run by Hunza Water USA, a Hunza Global Ventures company based in Richardson, Texas (“we”, “us”). We are responsible for the personal information collected through this site. This notice covers the website and its forms, and the Hunza account service at accounts.hunzawater.co, which is the single sign-in used for our online portals (such as the customer, staff, careers and admin portals). Information about employees and job applicants that is used for employment and hiring decisions is handled under separate notices given to them; the account details described below apply to everyone who has a Hunza account.

What we collect

Information you give us. When you request a quote, contact us, book a site assessment, log a support request or download a brochure, we collect the details you enter: your name, company, job title, email, phone number, site address or location, the products or services you are interested in, and any notes you add. We also record the date and time of your request.

Information collected automatically. Like most websites, our hosting provider records basic technical information when you visit, such as your IP address, browser type, the pages you request and the time of the visit. This is used to keep the site running, secure and free of abuse. We do not use advertising trackers, and we do not use analytics tools that build a profile of you.

Sensitive information. We do not ask for sensitive personal data, such as health information, racial or ethnic origin, religious beliefs, biometric or genetic data, precise location, government ID numbers or payment card details. Please do not include them in your messages. We do not take payments through this website.

Your Hunza account

A Hunza account is created only when our team gives you access to one of our portals (for example as a customer, employee, job applicant or administrator). It is one account per person, and it is the master record of your sign-in details. For your account we keep:
• your name, your main email address and up to five extra email addresses you add and confirm (each can be used to sign in);
• your mobile phone number, if you add it;
• addresses you save, which the portals you use can read so you do not have to type them again;
• your password, stored only in a scrambled (hashed) form that we cannot read;
• if you choose to sign in with Google, the link to your Google account (your Google account ID, name, email and profile picture if Google provides it); we never see your Google password;
• two-step sign-in settings: the secret used by your authenticator app (stored encrypted) and your one-time backup codes (stored scrambled);
• signed-in devices: for each sign-in, the method used, the time, the device and browser type, the IP address and when it was last active, so you can see and end your sessions;
• your portal access: which portals you can use, whether that access is active, suspended or ended, who gave it and when, and the separate profile each portal keeps for you;
• your marketing choices (emails and texts), with the date you gave or withdrew consent;
• a security log of sign-ins, failed sign-ins and changes to your account and access.

You can see and update most of this yourself at accounts.hunzawater.co under Profile, Emails, Addresses and Security, including ending sessions on other devices and unlinking Google.

Why we use it

We use your information only for the purposes it was collected for: to answer your enquiry, prepare a quote, arrange an assessment or installation, handle a service or support request, send you a confirmation email, follow up about your request, run your Hunza account (signing you in, checking two-step sign-in, letting you move between the portals you have access to, and protecting your account from misuse), send marketing you have not opted out of or have agreed to, keep our website and systems secure, and meet our legal and accounting obligations. We only collect what is reasonably necessary for these purposes, and we will ask for your consent before using your information for a purpose that is not compatible with them.

Who we share it with

Your request is seen by the Hunza Water USA team who handle sales, service and support. Inside our company, access to account information is limited by role: each portal profile is seen only by the team that runs that portal (for example, human resources for staff and careers profiles and customer support for customer profiles), and only a small number of senior administrators can see accounts across portals. We also share information with service providers who work for us under contract and may use it only to provide their service to us: website hosting and database storage, email delivery, and the technology partner who builds and supports our systems.

To carry out a job or project, we share the job and project details needed for the work only with the installers and contractors that we have approved and selected for that specific project. They receive this information under a written agreement and a non-disclosure agreement (NDA), and may use it only to carry out that project. We do not share it with anyone else for this purpose.

We may also disclose information when the law requires it (for example, a valid court order), to protect the rights, safety or property of our customers, the public or our company, or as part of a merger, sale or reorganisation of our business, in which case this notice will continue to apply.

We do not sell your personal information, we do not use it for targeted advertising, and we do not use it for automated decisions or profiling that have legal or similarly significant effects on you.

Your privacy rights

Under the Texas Data Privacy and Security Act and similar laws, you can ask us to:
• confirm whether we hold your personal information and give you access to it;
• correct information that is inaccurate;
• delete information you gave us or that we hold about you;
• give you a copy of your information in a portable format;
• stop any sale, targeted advertising or significant profiling (we do none of these, but you can still ask).

We offer these choices to everyone who uses our site, wherever they live. If you have a Hunza account, you can view and correct most of your account details yourself at accounts.hunzawater.co. To make any other request, email us or use our contact page. We may need to confirm your identity before acting, and you can name someone to make an opt-out request for you. Requests are free (up to twice a year). We will reply within 45 days; if we need more time we will tell you why, and we may extend by up to another 45 days. We will never treat you differently or charge you more for using your rights. The right to delete does not override the law. When you ask us to delete your information, we will delete what we are not required to keep. Where the law requires us to keep records of business dealings and transactions (such as quotes, agreements, orders, invoices, payments and related correspondence), we keep them for the period the law requires, even after a deletion request, and delete them after that. If we keep anything for this reason, we will tell you.

If we turn down your request

If we decline your request, we will explain why. You can appeal by replying to our answer with the word “Appeal” in the subject line. We will respond in writing within 60 days and explain the outcome. If you are not satisfied with the result of your appeal, you can contact the Texas Attorney General.

Emails, calls and texts

We use the email address and phone number you give us to respond to your request. From time to time we also send marketing emails and text messages about our products, services and offers, and some of these are sent automatically using automated technology.

Every marketing email includes a way to unsubscribe, and we act on unsubscribe requests within 10 business days. For automated marketing texts, we ask for your consent first where the law requires it (for example, under the Telephone Consumer Protection Act). You can give it by ticking the optional, unticked marketing-texts box on our website forms or on the Profile page of your Hunza account; we keep a record of the wording you agreed to, the phone number and the date. Consent is never a condition of buying from us. You can stop marketing texts at any time by replying STOP, and stop marketing emails by using the unsubscribe link or emailing us. Message and data rates may apply. Service messages about your own request, quote or project are not marketing and may still be sent.

Cookies

When you fill in the form to download a brochure, we place one cookie called hw_dl in your browser. It remembers you for 12 months so you can download other brochures without filling in the form again; each later download is added to your existing request. It holds only a coded reference to your request, not your details, and it is not used for advertising or tracking across other websites. To remove it, choose “Not you?” on any download page or clear your browser’s cookies. Signing in to your Hunza account and to each portal uses essential cookies that keep you signed in securely; each portal address keeps its own sign-in cookie, and signing out or ending a session removes it. These cookies are needed for sign-in to work and cannot be switched off. We do not use advertising cookies. Because we do not sell personal information or use targeted advertising, browser privacy signals such as Global Privacy Control do not change how the site works for you, and we respect them.

Other websites and services

Our site links to other websites and services, such as WhatsApp for chatting with us and manufacturers’ websites. The map on our contact page is provided by Google Maps and loads only if you choose “Show map”; loading it connects you to Google. Share buttons on our articles only open the network you choose. When you use these services, their own privacy policies apply, not this one.

How we protect it

We keep the information you send us in good faith and protect it to the best of our ability, using reasonable administrative, technical and physical safeguards that fit the type of information we hold. These include encrypted connections (HTTPS), access limited to staff who need it based on their role, passwords stored only in hashed form, two-step sign-in (required for our admin and staff portals and available to everyone), encrypted storage of two-step secrets, checks on every request that your session is still valid, automatic locking after repeated failed sign-ins, and logging of sign-ins and administrative actions. This website does not take payments or hold financial or payment information.

No system is completely secure, and we cannot guarantee absolute security. TO THE FULLEST EXTENT ALLOWED BY LAW, WE ACCEPT NO LIABILITY FOR ANY UNAUTHORISED ACCESS TO, OR LOSS OR DISCLOSURE OF, INFORMATION THAT HAPPENS DESPITE THESE SAFEGUARDS. This does not limit any duty the law places on us that cannot be excluded, including notifying you of a breach as described below.

If there is a data breach

If a security breach affects your personal information, we will notify you, and where required the Texas Attorney General and other authorities, without unreasonable delay and within the time limits set by Texas law (Texas Business and Commerce Code, Chapter 521) and any other law that applies.

How long we keep it

We keep enquiries and requests only for as long as we need them to serve you. We keep records as required by law: information related to business dealings and transactions (such as quotes, agreements, orders, invoices, payments and related correspondence) is kept for the period the law requires for business, tax and accounting records. A request to delete your information does not override this legal duty. After that period we delete or anonymise it. You can ask us to update or delete your other details at any time.

Your Hunza account is kept while you have access to at least one of our portals. When all your access has ended, we close the account and delete the account details we no longer need, unless we must keep them for the legal reasons above. Signed-in device records are removed when you sign out or end the session, or as part of routine clean-up. Security logs (sign-ins and changes to accounts and access) are kept for up to 7 years, and records of changes to roles and permissions for up to 10 years, so we can investigate misuse and meet our audit obligations.

Children

This website is meant for businesses and adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. Hunza accounts are only for people aged 18 or over. If you believe a child has sent us information, please contact us and we will delete it.

Where your information is stored

Our website, database, email and the other services we use to handle your information are all hosted in the United States. Your information is stored and processed in the United States.

Changes to this notice

We may update this notice from time to time. When we do, we will change the date at the bottom of this page, and if the changes are significant we will make that clear on this page.

Contact us

For any question about your information, or to ask for it to be updated or deleted, email [email protected] or use our contact page.