Privacy Policy

Stiver Engineering (“Stiver”, “we”, or “us”) is an engineering firm. We are committed to safeguarding the personal data that you provide directly to us, that we collect in the course of our business, or that we receive from you when you visit our website www.stiverengineering.com or www.stiverengineering.ca.   This privacy policy explains to you how we collect, use, disclose and otherwise process your personal data. Personal data or “personal information” is any information that can be used, directly or indirectly, to identify an individual.   This policy applies to all Stiver offices and any other “Site” that is branded by Stiver Engineering. By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. Personal Data We Collect From or About You We collect the following types of personal data from you:

• Contact Information: this includes, for example, your name, your home or business address, your email address and your phone number.
• Technical Data: this includes, for example, data that we collect from you when you interact with our website, applications, and email communications, such as your IP address and device ID. Some of this information may be considered personal data
• Financial Data: this includes, for example, your bank account, and other related financial data.
• Marketing Data: this includes, for example, your preferences in receiving marketing or promotional information from us. We will only use your information to send you marketing materials when we have your consent.
• Other Data: any other personal data that you provide to us and which can be reasonably used to identify you.

How We Collect Your Information We collect personal data from you through a variety of sources. We strive to collect only personal data that is limited to achieve the purpose(s) for which it was collected. Examples of a ways in which we collect your information include:

• Direct Interaction: you may provide us with your personal data when you interact with us, for example, by enquiring about our services, giving us your contact details, registering for one of our events, subscribing to our updates or promotional material, or engaging in any way with our employees.
• Automated Technologies: we may collect personal data automatically when you visit our website through logging and analytics tools, cookies, or click on links in our emails.

How We Use Your Personal Data We process and use your personal data when we have your consent or as otherwise  permitted or required by applicable law. This means:

• We process your personal data if you have given us consent to process for one or more specific purposes;
• We process your personal data if it is necessary for the performance of a contract with you;
• We process your personal data if it is necessary for compliance with a legal obligation to which we are subject; and/or
• We process your personal data if it is necessary for the purposes of our or a third-party’s legitimate interests where those interests are not overridden by your interests or fundamental rights and freedoms that require protection of your personal data.

How We Share Information We share your personal data within Stiver and with our contracted third-party processors and/or service providers who assist us in the administration and operation of the company, and in providing our services to our clients. In addition, we share your personal data when required or permissible by applicable law. We may share the following information with Third-party service providers :

• Our information technology and telecommunications service providers, including data centers and cloud storage providers.
• Our marketing service providers.
• Professional services organizations (e.g., law, accountancy, auditing, insurance, and company formation service providers).
• Other service providers to whom we outsource aspects of the provision of our services and the administration and operation of the company.
• To another firm, in the event of a sale or merger of the company.
• Business partners, such as those that co-host events with us.
• Third parties when we believe it is required by, or necessary to comply with, applicable law, such as opposing parties in litigation or in response to law enforcement requests.

We maintain contractual relationships with third-party service providers that contain obligations pertaining to adherence with this privacy policy and applicable privacy and data protection law. We do not sell or rent your personal data to third parties for monetary or other valuable consideration and have not done so in the prior 12 months since the effective date of this privacy policy. Canadian Residents Right to Access and Accuracy. If you are a resident of Canada, you have certain rights under Canadian law. You have the right to request access to your personal information and you have the right that your information be accurate and complete for the purposes for which it was collected. . Data Transfers. Please note that we are an organization headquartered in the United States, and any information you provide to us will be transferred outside of Canada, either internally within Stiver or to third-party service providers. While located in the United States, your information will be subject to local laws, which may be less protective of your personal information than under Canadian privacy laws, as well as potential access by local law enforcement. Challenging Compliance. If you have any questions or wish to make a complaint about this policy or our practices, you may contact our Privacy Officer at (713) 526 – 3478 or sei@stivereng.com or Should your concern not be resolved, you may also contact the Office of the Privacy Commissioner at 1-800-282-1376 (toll-free) or the Alberta Office of the Information and Privacy Officer: Toll-Free: 1-888-878-4044, the Edmonton office at (780) 422-6860 or the Calgary office at (403) 297-2728. California Residents If you are a resident of California, you may have certain rights under applicable data protection laws in relation to your personal data, including the California Consumer Privacy Act of 2018 (CCPA). Subject to certain exceptions and limitations, these rights include:

• The Right to Know. You have the right to request certain information about parties to whom we have disclosed or sold your personal data in the prior calendar year and a description of the categories of personal data shared.
• The Right to Data Portability. A subset of the Right to Know, this requires us to provide you the specific personal data about you that we collect and process in a portable and, to the extent technically feasible, readily-useable format that allows you to transmit the information to another entity without hindrance.
• The Right to Delete. Subject to exceptions, the right to delete requires us to delete or de-identify your personal data.
• The Right to Opt-Out. This right allows you to opt-out of the disclosure of your personal data when that disclosure (also known as a “sale” as defined in the CCPA) is made by us in exchange for valuable consideration (whether for money or otherwise). Though you may submit such a request, we do not sell or rent your personal data to third parties for monetary or other valuable consideration and have not done so in the prior 12 months since the effective date of this privacy policy.
• The Right to Request a Record of Third-Party Direct Marketing Disclosures: Also known as the “Shine the Light” law, this permits California residents to request and obtain from us a list of what personal data we disclosed to third parties for direct marketing purposes in the preceding calendar year and the names and addresses of those third parties.

If you exercise your applicable California rights, Stiver will not discriminate against you. Requests to know, port, or delete your personal data will be honored within 45 days. Requests to opt-out of the sale of personal data will be honored, to the extent applicable, within 15 calendar days. Requests for a record of direct marketing disclosures will be honored within 30 calendar days. If more time is needed to respond, we will notify you. Notice to California Residents Do Not Track. We use analytics systems and providers that may collect information about your online activities, and these services may provide some of this information, which may include personal data, to us. We do not currently process or comply with any web browser’s “do not track” signal or similar mechanisms. Note, however, that you may find information about how to opt-out of these analytics and/or block or reject certain tracking and cooking technologies in our Cookies Policy. How We Protect Your Information We have put in place physical, administrative, and organizational security measures to protect your information from unauthorized access  or loss. Internet data transmission is not always secure, and we cannot guarantee that information you transmit to us is or will be secure.

Retaining Information

We retain your personal data for as long as necessary to fulfil the purpose for which we collected it, including any legal, regulatory, tax, accounting, or reporting requirements, and to the extent we reasonably deem necessary to protect our rights, property, or safety, and the rights, property, and safety of our users and other third parties. For details on the retention periods applicable to specific elements of your personal data, please contact us.

Third-Party Websites and Links

Our website and other services may contain links to other websites or otherwise direct you to a third party over which we have no control and whose privacy policies may differ from ours. You should consult the privacy policies or statements for those third parties and we do not accept any responsibility for their use of your personal data that you may provide.

Your Choices

In addition to the applicable rights outlined, above, you have choices about how we communicate with you and how we process certain personal data about you.

• Communications Opt-Out. You may opt-out of receiving marketing, promotional, or other communications from us at any time by following the link in a marketing communication email or email us at sei@stivereng.com. Will only send you marketing materials with your consent.
• Cookies and Web Tracking. Consult our Cookies Policy for more information about how to control and/or opt out of certain cookies and web tracking technologies.

Minors

We do not promote, market, or direct our services to minors. As a result, we do not knowingly collect or solicit personal data from anyone under the age of 18. By using our site or by providing us your personal information, you represent that you are not under 18 years of age.

Revisions to this Privacy Policy

Stiver reserves the right to revise or modify any part of this Privacy Policy from time to time. This Privacy Policy is effective as of April 1, 2023. Please review the policy periodically to check for changes. For substantive revisions, we will ensure that the notice of revision, along with a summary of such revisions, is conspicuous and accessible.

How to Contact Us

You may contact us at sei@stivereng.com. In most cases, you will not have to pay a fee to access your personal data or to exercise your other rights. However, to the extent permitted by applicable law, we may either charge a reasonable fee or refuse to comply if your request is unfounded, repetitive, or excessive. In most instances, we are legally required to request specific information from you, including personal data, to verify your request and identity. We may also contact you to ask for further information and clarification of a request to enable us to comply with it as quickly as possible. This is a security measure to ensure that your personal data is not disclosed to anyone not authorized to receive it. In addition, if you request that we provide you with specific pieces of personal data, we require you to sign a declaration under penalty of perjury that you are the data subject whose personal data is the subject of the request. Finally, you may use an authorized agent to make a request under the CCPA on your behalf. If you designate an authorized agent to make an access or deletion request on your behalf (a) we may require you to provide the authorized agent written permission to do so, and (b) for access and deletion requests, we may require you to verify your own identity directly with us. If you have any questions relating to this privacy policy, or our processing of your personal data, please contact us at: Email: sei@stivereng.com Postal: Stiver Engineering 1305 Peden St. Houston, Texas 77006 Attn: Privacy Officer  

Cookies Policy

Consent By using our website https://stiverengineering.com you consent to the use of cookies in accordance with this Cookies Policy. We use Cookies and similar tracking technologies to track the activity on our service and store certain information. What are Cookies? Cookies are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website among its many uses. Types of Cookies There are two main types of cookies: (i) Session cookies: these are temporary cookies that expire when you close your browser. Session cookies allow the Services to recognize your computer as you navigate between pages during a single browser session, allowing you to use the Services most efficiently. (ii) Persistent cookies: these are stored on your computer between browsing sessions until they expire or are deleted.  They allow the Services to remember your preferences and tailor services to you. Changing your cookie settings Please note that internet browsers allow you to change your cookie settings. These settings are usually found in the ‘options’ or ‘preferences’ menu of your internet browser. In order to understand these settings, the following links may be helpful. Otherwise you should use the ‘Help’ option in your internet browser for more details.

• Cookie settings in Internet Explorer
• Cookie settings in Firefox
• Cookie settings in Chrome
• Cookie settings in Safari

Information Collected by our Analytics Software Some of the cookies we use are ‘analytical’ cookies.  Our analytics software (Google analytics and NetInsight) allows us to recognize and count the number of visitors and to see how visitors move around the Services when they are using the Services.  This helps us to improve the way the Services work, e.g.., by making sure that users are finding what they need easily.  The following types of information are collected by our analytics software:

• User’s demographic information, e.g., language preference and location (city, country/territory, continent, sub-continental region).
• User’s behavior, e.g., whether the user is a new or returning visitor, the frequency of visits/date of last visit.
• User’s technology, e.g., operating system, network/service provider (ISP and network host).
• Mobile information, e.g. whether the user accessed the Services via a mobile device and, if so, the type of device (brand, service provider, operating system and input selection method).
• Traffic source, e.g., direct (i.e., the user typed in the URL themselves) or referral (i.e., the user clicked on a link) and for referral traffic, the traffic source (search engine or link); also the Google search term (if applicable) that resulted in the link to the Website.
• Content viewed, e.g., pages, files, and directories clicked on, landing pages/exit pages and search words (if any) used on the Website.

Disabling cookies If you do not want information collected through the use of cookies please disable them by following the instructions for your browser. Information about the procedure you are required to follow in order to disable cookies can be found on at https://www.allaboutcookies.org/manage-cookies/index.html. After your initial visit to this website we may change the cookies we use. This cookies policy will always allow you to know who is placing cookies, for what purpose and give you the means to disable them so you should check it from time to time. Please be aware that if cookies are disabled not all features of the Services may operate as intended.