Privacy Policy

1. Introduction

CAJJIA EVENFALL OUTDOOR SERVICES LLC, together with the developer name Evenfall Outdoor, operates a professional expedition systems practice from 1060 Sherwood Dr, Ogden - 84404-4527, United States (US). We plan, assemble and certify outdoor equipment programmes and field operations systems for schools, guides, research teams and other organised groups.

We respect the privacy of every person who visits our website, requests a programme outline or engages our services. This policy describes the information we handle, the reasons we handle it and the controls available to you. We encourage you to read it in full before submitting any personal information through our site or by email.

This policy is written in plain language on purpose. We want a group leader, a school administrator or a research coordinator to understand our practices without needing a legal dictionary. Where a term has a specific meaning, we explain it in the paragraph where it first appears.

2. Scope Of This Policy

This policy covers personal information that we collect through the Evenfall Outdoor website, by email, by telephone, in our Ogden workshop and in the course of delivering a programme. It also covers information we receive when you complete an enquiry form, request a certification register or arrange a dry rig review.

This policy does not apply to information that a client organisation collects and controls independently. When we deliver a programme for a school or a guide company, that organisation may remain responsible for participant records, medical declarations and consent forms. We act only on the written instructions of that organisation for those records.

Where a client organisation provides us with information about its participants, we handle that information as a processor. Where we collect information directly from you for our own business purposes, such as responding to an enquiry, we handle that information as a controller. The distinction matters because it determines who you should contact to exercise a privacy right.

This policy applies regardless of how you reach us. It applies whether you browse anonymously, send one enquiry or work with us across several seasons.

3. Information We Collect

The information we collect depends on how you interact with us. We try to collect only what we need to answer a question, prepare a programme outline or deliver a service.

Information you give us directly may include your name, your organisation, your role, your email address, your telephone number, your postal address and the contents of the message you send. If you arrange a programme, we may also record your season dates, group size, route plans and equipment requirements.

Information we generate in the course of work may include programme notes, dry rig records, inspection results, certification tags, service histories and correspondence about a project. These records describe equipment and programmes, but they can also identify the people who requested or approved them.

Technical information may include the type of device you use, the browser you use, the pages you view on our site and the approximate region from which you connect. We use this information in aggregate to keep the site working and to understand which programme pages are useful.

We do not seek sensitive personal information through this website. We ask that you do not send medical details, government identification numbers or financial account numbers through the general enquiry form. If a programme genuinely requires such information, we will request it separately through a secure channel and with a clear explanation.

4. How We Obtain Information

We obtain information in several ways. You may provide it directly when you complete our contact form, send an email to our gear address, telephone our office or meet our team at a workshop visit. Each of these channels is voluntary, and you decide what to share.

We may receive information indirectly when a client organisation shares a participant roster or a programme schedule with us for planning purposes. In that situation we ask the organisation to confirm that it has a lawful basis to share the information and that the people concerned have been informed.

We may also receive limited information automatically when your browser requests our pages. This includes standard server information that helps us detect errors, block abusive traffic and measure whether the site is available.

Finally, we may receive information from a referral, such as when a partner organisation introduces a group to us. In that case the referring party usually shares only a contact name and a programme description, and we take it from there.

5. Why We Use Information

We use information to answer enquiries, prepare programme outlines, deliver services, maintain equipment records and improve our website. Each use is tied to a specific business purpose, and we avoid using information for anything unrelated to that purpose without telling you first.

Programme delivery requires us to understand a group, its route and its timing. We use contact details to arrange the dry rig review, to schedule inspection and delivery, and to keep a single point of contact informed across the season. Without this information we could not provide the service you requested.

Equipment records help us track certification, service intervals and replacement forecasts. A certification register is only useful if it can be matched to the organisation that owns the equipment, so these records necessarily include an organisational contact.

Site operation requires us to monitor availability, prevent misuse and understand which pages visitors find useful. We use technical information in aggregate for these purposes and do not attempt to identify individual visitors from it.

Communication and administration include sending replies, confirming appointments, issuing programme documents and keeping records for accounting and tax purposes. We may also use contact details in limited circumstances to protect our legal rights or to comply with a legal duty.

6. Lawful Bases For Processing

Where applicable law requires a lawful basis, we rely on one or more of the following. We rely on your consent when you choose to send an enquiry or to receive programme updates. We rely on performance of a contract when we prepare or deliver a service you have requested.

We rely on our legitimate interests when we operate and secure our website, maintain business records and communicate with organisations that have approached us for a professional service. We assess these interests against your rights and expectations, and we limit the processing to what is proportionate.

We rely on legal obligation when we must retain records for tax, accounting or safety purposes, and when we must respond to a lawful request from a competent authority. We rely on vital interests only in the rare situation where processing is necessary to protect someone from serious harm.

Where we process information on behalf of a client organisation, that organisation is responsible for establishing the lawful basis and for providing notice to the people concerned. We follow written instructions and apply appropriate safeguards.

7. Cookies And Site Technology

Our website is a content site rather than an advertising platform, and it is designed to work without tracking you across the internet. We may use a small number of essential cookies or similar storage features to keep the site functioning and to remember basic preferences.

Essential storage may be used to remember whether a mobile menu is open or to preserve a form entry while you move between sections. This storage is limited to the operation of the site and is not used to build an advertising profile.

If we introduce analytics in the future, we will use a configuration that respects privacy, such as aggregated measurement without cross site tracking. We will update this policy and, where required, request consent before any non essential tracking is enabled.

Most browsers allow you to block or delete cookies and site storage. Doing so may affect the convenience of the site but should not prevent you from reading our pages or contacting us by email or telephone.

8. How We Share Information

We do not sell personal information. We do not rent contact lists. We share information only in the limited circumstances described in this section, and we require anyone who receives information from us to protect it.

Service providers may receive information when they perform a function on our behalf, such as hosting the website, providing email services or supporting our accounting. These providers act on our instructions and are bound by confidentiality obligations.

Client organisations may receive information when we deliver a programme on their behalf. For example, a school may receive a summary of a programme or a certification register covering equipment it owns. We share only what the organisation needs to manage its programme.

Professional advisers, insurers and auditors may receive information where necessary to obtain advice, manage risk or satisfy an audit requirement. Legal and regulatory authorities may receive information where we are required by law to disclose it or where disclosure is necessary to establish, exercise or defend a legal claim.

Business transfers may occur if our practice is reorganised, merged or acquired. If that happens, information may transfer as part of the business assets, and we will take reasonable steps to ensure the receiving party respects this policy.

9. How Long We Keep Information

We keep information only for as long as we need it for the purpose we collected it, plus any period required by law. Retention periods differ by category because a programme record and a marketing enquiry have different life cycles.

Enquiry correspondence is generally kept for the time needed to resolve the enquiry and for a reasonable follow up period, after which it is deleted or archived in a reduced form. If an enquiry becomes a programme, the related records move into our project files.

Programme and equipment records are kept for the duration of the working relationship and for a further period that allows us to honour service intervals, support warranty questions and satisfy accounting obligations. Certification records may be kept longer because they document the condition of equipment across several seasons.

Technical and security logs are kept for a short period, typically measured in weeks, unless a longer period is needed to investigate a security incident. When a retention period ends, we delete the information or render it non identifying.

10. How We Protect Information

We apply administrative, technical and physical safeguards to protect information against loss, misuse and unauthorised access. These safeguards are proportionate to the sensitivity of the information and to the size of our practice.

Administrative safeguards include written procedures for handling enquiries and programme records, role based access so that team members see only the information they need, and regular review of who holds access. Our team receives guidance on recognising suspicious requests and on handling information carefully.

Technical safeguards include access controls on our systems, protection for our email accounts, and the use of reputable service providers that maintain their own security programmes. We keep software current and monitor our website for availability and abuse.

Physical safeguards include locked storage for paper records and controlled access to our Ogden workshop. Equipment and documents are stored so that casual visitors cannot read or remove them.

No safeguard is perfect, and no transmission over the internet can be guaranteed to be entirely secure. If we become aware of a breach that affects your information, we will notify you and any relevant authority as required by applicable law.

11. International Data Transfers

We are based in the United States, and information we collect is generally stored and processed in the United States. If you contact us from another country, your information will be transferred to the United States so that we can respond.

Some of our service providers may store information in other countries. When we use such a provider, we take steps to ensure that the transfer is protected by appropriate safeguards, such as contractual commitments that require a comparable level of protection.

If you are located in a region with specific transfer rules, you may contact us to ask about the safeguards that apply to your information. We will explain the mechanism we rely on and, where possible, provide a summary of the relevant commitments.

12. Your Privacy Rights

Depending on where you live, you may have rights regarding your personal information. These rights commonly include access, correction, deletion, restriction, objection and portability. We honour these rights for everyone who contacts us, regardless of where they live, to the extent the law allows.

The right of access lets you ask whether we hold information about you and, if so, to receive a copy together with an explanation of how we use it. The right of correction lets you ask us to fix information that is inaccurate or incomplete.

The right of deletion lets you ask us to remove information that we no longer need, subject to legal retention duties. The right of restriction lets you ask us to pause processing while a question about accuracy or lawfulness is resolved.

The right to object lets you ask us to stop processing based on legitimate interests. The right to portability lets you ask for a copy of information you provided in a structured, commonly used format. Where we rely on consent, you may withdraw it at any time.

To exercise a right, contact us using the details in the final section. We may ask for evidence of identity so that we do not disclose information to the wrong person. We will respond within the period required by applicable law and will explain any limitation that applies.

13. Marketing Choices

We send programme updates only when there is a reason to do so and only where we are permitted. We do not operate a high volume marketing programme, and we do not purchase contact lists for promotional purposes.

If you receive an update from us and you would rather not receive further updates, you can reply to the message and ask to be removed, or you can contact our office directly. We will action the request promptly and keep only the minimum record needed to honour it.

If you are a client contact, we may still send administrative messages that are necessary for a programme, such as scheduling confirmations and service reminders. These messages are part of the service you requested and are not affected by a marketing preference.

14. Privacy For Children

Our website and services are intended for organisations and adults who arrange programmes. We do not knowingly collect personal information from children through this website, and we do not direct marketing to children.

When a programme involves young participants, the organising school or group is responsible for obtaining consent from a parent or guardian for any participant information that is shared. We handle participant information as a processor on the instructions of that organisation and only for the purpose of delivering the programme.

If you believe that a child has provided personal information to us directly and without the appropriate consent, please contact us. We will investigate promptly and delete the information if we conclude that it was collected in error.

15. Third Party Sites And Services

Our website may link to external resources that we think are useful, such as land management pages or safety references. We do not control those sites, and this policy does not cover them. We encourage you to read the privacy notice of any site you visit.

If we embed a third party service in a page, that service may receive technical information such as your device type and the page you viewed. We choose providers that we believe act responsibly, and we limit embedded services to those that support our content.

A link from our site does not imply that we endorse the privacy practices of the destination. Responsibility for those practices rests with the operator of that site.

16. Changes To This Policy

We may update this policy from time to time to reflect changes in our practices, our services or the law. When we make a material change, we will update the date shown at the top of this page and, where appropriate, provide a more prominent notice.

The version published on this page is the current version and replaces any earlier version. We encourage you to review this page periodically so that you remain aware of how we protect information.

Your continued use of our website or services after an update takes effect indicates that you have had the opportunity to review the updated policy.

17. How To Contact Us

If you have a question about this policy or about the way we handle information, please contact us using any of the details below. We will route your question to the team member best placed to answer it.

This policy is provided by Evenfall Outdoor for the website at evenfalloutdoor.buzz and for the professional services described on it.