Privacy Policy

Burden & Co. provides business engineering services and the Business Infrastructure Diagnostic™. This platform is operated by Burden & Co., LLC, a single-member limited liability company formed in the State of Georgia (referred to in this policy as "Burden & Co.", "we", "us", or "our").

We collect the following categories of information:

• Account fields — business name, contact name, work email address, and, where you provide them, industry, revenue range, employee count, and how you heard about us.
• Business-contact fields — information you provide when requesting or discussing our services, such as inquiry forms and correspondence.
• Diagnostic responses — your answers to the Business Infrastructure Diagnostic™ questions and the scores, findings, and results derived from them.
• First-party behavioral lead events — limited, first-party records of interactions with our platform that are relevant to qualifying fit for our services (for example, that an offer page was viewed). Staff-only: these records are used by Burden & Co. staff for qualification and service delivery and are never rendered in your client-facing results.

We collect information you provide directly and limited first-party information generated by your use of the platform. We do not collect payment card credentials — see Section 4.

We use the information we collect to:

• deliver the diagnosis and scoring of your Business Infrastructure Diagnostic™ results (your Infrastructure Score, maturity classification, and findings);
• qualify fit for our services and respond to inquiries;
• deliver services you purchase or engage, including the client workspace and related deliverables;
• operate, secure, and improve the platform, and provide support;
• comply with applicable law and legal obligations.

Burden & Co. does not sell personal information. We may disclose personal information to service providers and technology vendors reasonably necessary to operate, secure, administer, process payments for, and deliver the platform and services, subject to applicable agreements and law.

Payment card credentials are processed by the applicable payment processor and are not stored by Burden & Co.

The platform does not use marketing pixels or third-party advertising trackers. The first-party behavioral lead events described in Section 2 are collected by our own platform and used only as described in this policy.

We may also disclose information where required or permitted by law, or in connection with a corporate transaction, subject to applicable law.

We retain personal information for as long as needed to provide the platform and services, to operate our business, and to meet legal, accounting, or reporting obligations. Diagnostic responses and derived results are retained as part of your organization's commercial record while your account is active and as otherwise required by law.

We protect personal information with organizational and technical safeguards, including:

• Argon2id password hashing for account credentials;
• row-level security that isolates each organization's data;
• HTTPS encryption of data in transit;
• audited staff actions — staff access to and changes of client data are recorded in an audit log.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You may request access to, correction of, or deletion of your personal information, and you may ask questions about this policy, by contacting us through the details in Section 10. We will respond within a reasonable time and as required by applicable law.

The platform uses local storage on your device to autosave your diagnostic progress so you can continue where you left off. We do not use cookies for advertising or cross-site tracking.

We may update this Privacy Policy from time to time. The current version is always available at this page, and material changes will be reflected here.

Questions or requests under this policy: [contact@burdenengineering.com]