NuPath Engineering LLC

Privacy Policy

Effective date: October 7, 2026

Introduction and scope

This Privacy Policy describes how NuPath Engineering LLC (“NuPath,” “we,” “us,” or “our”) handles personal information collected through our website at nupathllc.com and through the contact form on that site.

This policy is intended to reflect the Texas Data Privacy and Security Act (TDPSA) and generally accepted United States privacy practices.

If you do not agree with this policy, please do not use the website or submit the contact form.

Information we collect

Information you provide

If you use the contact form, we collect the fields you submit:

You may also contact us directly by email. In that case we collect whatever you choose to include in the message.

Technical data in server and CDN logs

Our website is hosted on Amazon Web Services (AWS). AWS and our site infrastructure may record technical data in server or content-delivery network (CDN) logs, which can include:

Cookies and similar technologies

We set no cookies on this website. We do not use analytics services, advertising pixels, session replay, or other tracking technologies. We do not load third-party scripts. Any storage that a browser keeps on its own (for example, a cache of pages you visited) is under your control, not ours.

How we use information

We use personal information to:

We do not use contact-form submissions for advertising. We do not build marketing profiles from website visits.

How we share information

We share personal information only in the following situations.

Service providers

We use Amazon Web Services for hosting, content delivery, and email delivery. AWS processes information on our behalf in order to provide those services. Submissions from the contact form are sent by email through AWS; they are not stored in a website database.

Legal requirements

We may disclose information if we believe it is required by law, regulation, legal process, or a lawful government request, or to protect the rights, safety, or property of NuPath, our users, or others.

Business transfers

If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction, subject to this policy or a successor policy.

We do not sell personal data. We do not process personal data for targeted advertising. We do not process personal data for profiling in furtherance of decisions that produce legal or similarly significant effects.

Retention

Contact-form submissions are not stored in a website database. They are delivered by email and retained only as long as needed to respond and for ordinary business records (for example, a copy in our email system).

Server and CDN logs are retained for a limited period needed to operate and secure the site, then deleted or overwritten in the ordinary course of those systems.

We may keep information longer if we are required to do so by law, or if we need it to resolve a dispute.

Security

We use reasonable administrative, technical, and physical safeguards appropriate to the nature of the information we handle. The website is served over HTTPS.

No method of transmission or storage is 100% secure. We cannot guarantee absolute security.

Your privacy rights

If you are a resident of Texas, the TDPSA may give you the right to:

As noted above, we do not sell personal data, we do not use this website for targeted advertising, and we do not profile people for decisions that produce legal or similarly significant effects. An opt-out request is still welcome and will be recorded.

Residents of other states may have similar rights under their state laws, for example the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). We will honor applicable requests.

These rights are not unlimited. The TDPSA and other laws allow us to deny or limit a request in specified situations (for example, if we cannot verify your identity, or if we must keep a record to comply with law).

How to exercise your rights

Email privacy@nupathllc.com with your request. Please say which right you want to exercise and provide enough information for us to find your records (typically the email address you used to contact us).

We will take reasonable steps to verify that the request comes from the person it concerns. We may ask for additional information if needed.

We will respond within 45 days of receipt. If reasonably necessary, we may extend that period once by 45 additional days. If we extend, we will tell you within the first 45 days.

You may make a request free of charge up to twice in a 12-month period. We may charge a reasonable fee, or decline, for requests that are manifestly unfounded, excessive, or repetitive, as permitted by law.

Where the law permits, you may use an authorized agent to submit a request on your behalf. We may require proof that the agent is authorized to act for you, and we may still need to verify your identity.

Appeals

If we decline your request, you may appeal by emailing privacy@nupathllc.com with the subject line “Privacy Appeal.” Explain why you believe the decision should be reconsidered.

We will respond to an appeal in writing within 60 days, including an explanation of our decision.

If we deny your appeal, you may contact the Office of the Texas Attorney General.

Sensitive data

We do not intentionally collect sensitive data through this website. Please do not submit sensitive data through the contact form (for example, government identifiers, financial account numbers, health information, or information about children).

We do not sell sensitive data.

If you believe you have sent us sensitive data by mistake, email privacy@nupathllc.com and we will take reasonable steps to delete it from our records.

Children

This website is not directed to children under 13. We do not knowingly collect personal information from children under 13, consistent with the Children’s Online Privacy Protection Act (COPPA).

If you believe a child under 13 has provided us with personal information, contact privacy@nupathllc.com and we will delete it.

Marketing communications

We do not add people who submit the contact form to a marketing list without their consent.

If we ever send commercial email, we will do so in a manner consistent with the CAN-SPAM Act. That email will identify us as the sender and will include a way to opt out of future commercial messages. Transactional messages (for example, a reply to an inquiry you sent) are not marketing and may still be sent after an opt-out of commercial email.

Do Not Track and Global Privacy Control

We do not track visitors across other websites. Because we do not sell personal data and do not use this site for targeted advertising, there is nothing additional to opt out of for those purposes in ordinary use of the site.

Where a Global Privacy Control (GPC) signal applies, we treat it as a valid opt-out request.

There is no single industry standard for Do Not Track (DNT) browser signals. We do not alter this site’s behavior in response to DNT headers beyond the practices already described here.

Regulated data

We are not a financial institution under the Gramm-Leach-Bliley Act (GLBA) through this website. We are not a covered entity or business associate under the Health Insurance Portability and Accountability Act (HIPAA) through this website. Please do not send financial account details or health information through the contact form.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will post the revised policy on this page and change the effective date at the top. The updated policy applies to information we collect after the new effective date, and to our ongoing use of information already collected, except where a different notice is required by law.

Contact us

Questions about this policy, or requests to exercise privacy rights, should be sent to:

Bob Peterson, Privacy Officer
NuPath Engineering LLC
21750 Hardy Oak 104 8955, San Antonio, TX 78258
privacy@nupathllc.com