How do we protect your facility data?

This policy details how Westbridge collects, verifies, and protects engineering records, advertising click identifiers, and facility telemetry. We operate under strict ledger discipline with zero commercial data brokers.

Ref Clause Category Plain-Language Meaning Regulatory & Technical Basis
POL-01 Effective Date & Continuous Revision This privacy policy took effect on October 30, 2026. Material updates to technical intake procedures or legal regimes are published here immediately upon adoption. Effective as of 2026-10-30 under commercial record disclosure mandates.
POL-02 Data Controller & Operating Facility The controller responsible for all personal and technical data processed on this site is Westbridgeo, trading at westbridgeo.com. Our principal physical engineering office is located at 1210 North Tryon Street, Charlotte, North Carolina 28206, Charlotte, North Carolina, United States. Telephone: +1 (984) 555-3933. Direct records email: [email protected]. Westbridgeo at 1210 North Tryon Street, Charlotte, North Carolina 28206, Charlotte, North Carolina, United States.
POL-03 Categories of Information Collected When you submit an engineering intake via zivu345.php, we record your name, telephone number, business email, facility street address, audit scope selection, project notes, requested technical specifications, and affirmative consent timestamp. Concurrently, the web server captures your IP address, browser user-agent string, referring URL, time of page render, and transmission timestamp. When you initiate our support desk via cocue4b.php, we retain the chat transcript and store an operational session token locally in your browser so your active inquiry persists across page visits. When reaching our site via digital marketing campaigns, incoming URLs carry platform attribution click tokens. We do not maintain user accounts, passwords, or payment cards; we charge no fees through this website. Inquiry forms, support chat payloads, server access logs, and persistent local storage keys.
POL-04 Operational Purposes for Processing Data is evaluated strictly to generate preliminary energy audit cost scopes, coordinate field engineer site visits in the Charlotte metro area, evaluate mechanical utility schedules, troubleshoot real-time technical questions, and determine advertising attribution across active search campaigns. Scoping engineering services, executing on-site audits, and measuring campaign effectiveness.
POL-05 Legal Bases for Processing Processing relies upon three distinct lawful bases: (1) Contractual necessity where you request a commercial proposal or walkthrough estimate; (2) Legitimate business interests in safeguarding web server infrastructure and debugging facility performance calculators; and (3) Explicit consent for non-essential tracking cookies and marketing attribution signals under regional privacy frameworks. Contractual necessity, legitimate interest, and affirmative consent.
POL-06 Paid Advertising Attribution Platforms This site actively receives paid traffic from commercial ad networks. The networks google ads, microsoft advertising, and Meta Ads deliver traffic to this destination. Google Ads directs clicks containing the gclid parameter. Microsoft Advertising routes targeted commercial search queries carrying the msclkid identifier. Meta Ads sends visitors carrying the fbclid click token. We inspect these identifiers strictly to determine ad engagement and calculate marketing acquisition expenditure. We never share raw building audit telemetry, internal mechanical drawings, or facility utility figures with any advertising platform. google ads (gclid), microsoft advertising (msclkid), and Meta Ads (fbclid).
POL-07 Consent Mode v2 Technical Enforcement We enforce consent mode v2 directly at the network boundary. Four discrete parameter signals are defaulted to denied upon every first visit: ad_storage, ad_user_data, ad_personalization, and analytics_storage. These four states remain denied until a visitor affirmatively selects 'Accept' in the site consent banner. If a visitor clicks 'Decline' or later revokes permission, all four signals are returned immediately to denied status, halting persistent cookie creation. consent mode v2 holding ad_storage, ad_user_data, ad_personalization, and analytics_storage denied.
POL-08 Third-Party Data Processors We transmit data strictly to authorized technical service vendors under written data processing agreements: Google Ireland Ltd / Google LLC (Google Ads analytics and Consent Mode telemetry); Microsoft Ireland Operations Ltd (Microsoft Advertising attribution, governed under the Microsoft privacy statement at https://privacy.microsoft.com/privacystatement); Meta Platforms Ireland Ltd (Meta Ads attribution); the hosting provider that serves this site and stores the enquiry database, and the mail provider that carries the notification to the operator’s inbox at our Charlotte engineering desk. Sub-processors bound by privacy.microsoft.com and enterprise data handling agreements.
POL-09 Cross-Border Data Transfers Our primary servers and engineering operations reside in North Carolina, United States. Inbound inquiries originating from international jurisdictions are transferred to the United States under standard contractual clauses, technical transport encryption (TLS 1.3), and strict role-based access limits. U.S. server location, Standard Contractual Clauses (SCCs), and TLS 1.3 transport security.
POL-10 Specific Retention Schedules We adhere to exact, unhedged retention boundaries: formal engineering inquiries and their associated email copies are retained for exactly 24 months to reference past mechanical baselines; real-time chat transcripts are purged after 6 months; raw web server and access logs are overwritten every 30 days; visitor consent preferences stored in site_consent_v2 expire after 12 months. When these retention windows expire, records are permanently purged from active and archive databases. Inquiries 24 months, chat transcripts 6 months, server logs 30 days, consent choices 12 months.
POL-11 Information Security & Network Controls Facility schematics, sub-meter data logger downloads, and client contact profiles are secured with AES-256 server-side encryption at rest and TLS 1.3 in transit. Administrative access to raw inquiry databases requires multi-factor authentication and is restricted solely to practicing Westbridge field consultants. TLS 1.3 transit encryption, AES-256 storage safeguards, and strict least-privilege access.
POL-12 European Visitor Rights (GDPR) Visitors reaching this platform from the European Economic Area or United Kingdom hold full rights under the General Data Protection Regulation (gdpr): the right to access stored records, rectify factual inaccuracies, request erasure of personal data, restrict processing operations, receive a structured copy under data portability, object to legitimate interest processing, and withdraw consent at any time without penalty. gdpr Articles 15–22 statutory rights enforceable without commercial detriment.
POL-13 United States State Privacy Rights (CCPA/CPRA) Residents of California, North Carolina, and other states with applicable comprehensive privacy statutes hold specific statutory protections under the California Consumer Privacy Act (ccpa) and CPRA: the right to know what personal records are collected, request deletion of personal information, correct inaccurate records, and opt out of the sale or sharing of personal data. Westbridge does not sell personal data, commercial lease agreements, or facility mechanical data to any third party for financial or barter consideration. ccpa / CPRA compliance with zero commercial sale or cross-context behavioral sharing.
POL-14 Global Privacy Control (GPC) Verification Our servers and client scripts automatically inspect the browser Sec-GPC header. If a global privacy control signal is broadcast by your browser, our consent controller interprets it as a permanent opt-out instruction, preventing the initialization of ad attribution cookies without displaying redundant preference banners. global privacy control automated signal compliance without secondary confirmation gates.
POL-15 Children’s Privacy Exclusion Westbridge provides business-to-business commercial real estate energy auditing services. We do not knowingly collect, request, or retain personal information from individuals under the age of 18. Any discovered record pertaining to a minor is deleted immediately upon identification. Strict B2B operating mandate in compliance with COPPA and state child safety standards.
POL-16 Supervisory Authority & Complaint Procedures You retain the right to submit a formal grievance regarding our data custody practices. In the United States, complaints may be lodged with the North Carolina Attorney General’s Office or, for California residents, the California Privacy Protection Agency. European visitors may register complaints with their national Data Protection Authority. Statutory escalation pathways via state Attorneys General and national DPAs.
POL-17 Data Subject Access Request (DSAR) Protocol To initiate a formal access, deletion, or portability request, submit an email to [email protected] or utilize the structured submission module documented below. Every verified data request is processed and answered within 10 days of identity confirmation. We require no processing fee unless a request is manifestly unfounded or repetitive. Formal DSAR handling procedure resolved within 10 days of verified submission.
POL-18 Policy Modifications & Ledger Versioning Revisions to our technical logging practices, legal jurisdictions, or ad platform integrations will be posted directly to this clause ledger with a revised effective timestamp. Material adjustments are accompanied by an on-site alert notice. Public changelog and explicit effective date versioning.
POL-19 Direct Compliance & Engineering Contacts Direct inquiries regarding technical logging, data security, or facility records custody to Westbridgeo, 1210 North Tryon Street, Charlotte, North Carolina 28206, Charlotte, North Carolina, United States. Direct phone: +1 (984) 555-3933. Direct compliance email: [email protected]. Governed by the laws of North Carolina, United States, with exclusive venue in the courts of Charlotte. Jurisdiction: Charlotte, North Carolina, United States. Phone: +1 (984) 555-3933.

How do you request an immediate extract or deletion of your records?

You may file a formal Data Subject Access Request (DSAR) directly through this engineering desk. We acknowledge and fulfill verified requests within 10 days.

In accordance with CCPA/CPRA, GDPR, and North Carolina commercial records standards, property owners and facility managers can request a machine-readable export of all contact records, audit inquiry forms, and server interaction logs associated with their email address or telephone number.

How does Westbridge ensure architectural accessibility across digital tools?

Our digital platform is designed and evaluated against Web Content Accessibility Guidelines (WCAG) 2.1 Level AA and Section 508 federal criteria.

Digital accessibility is an engineering requirement, not an aesthetic afterthought. We test the site using screen readers, keyboard-only tab sequencing, and automated contrast analyzers to guarantee that property managers, facility technicians, and auditors with diverse sensory requirements can inspect our fee schedules and diagnostic scope without barriers.

Accessibility Engineering Criteria

  • Contrast Ratios 15.2:1 Primary Ink, 9.3:1 Soft
  • Interactive Tap Targets ≥ 44 × 44 px on all viewports
  • Keyboard Traversal Direct skip link, visible focus rings
  • Semantic Structure Single H1, strict hierarchical H2–H3
  • Reduced Motion Support Prefers-reduced-motion overrides

Accessibility Feedback Desk

If you experience difficulty reading tabular data, navigating our live audit price estimator, or accessing technical audit specifications, contact our accessibility coordinator directly.