Privacy Policy
Last updated: July 2026
F&H Enterprises, LLC ("F&H STAC," "we," "us") provides custom health, safety & environmental (HSE) compliance software to operators. This policy explains what information we collect through this website and our services, how we use it, and the choices you have. Questions: bprice@fhstac.com.
Information we collect
- Information you give us. When you book a consult, email, or call, we collect your name, company, email, phone, and anything you choose to tell us about your operation.
- Client account & HSE data (processed on your behalf). For clients under contract, our software stores the records your team enters — personnel, sites, equipment, inspections, incident and injury reports, certifications, and related documents. You control this data; we process it to provide the service.
- Technical information. Standard server and security logs (e.g., IP address, browser type, pages visited) generated when you use the site or app.
How we use information
- To respond to inquiries, schedule consults, and prepare proposals.
- To build, host, operate, secure, support, and improve the software we provide to clients.
- To send service and account communications (not marketing spam).
- To comply with legal obligations and protect our rights, our clients, and their workers.
We do not sell your personal information, and we do not use client HSE data for advertising.
Service providers (sub-processors)
We use a small set of trusted providers to run the service. They process data only to provide their function to us:
| Provider | Purpose | More |
|---|---|---|
| Supabase | Application database & hosting (SOC 2 Type 2 / ISO 27001 certified infrastructure) | supabase.com/privacy |
| Netlify | Website & app hosting / content delivery | netlify.com/privacy |
| Calendly | Consult scheduling | calendly.com/privacy |
How we protect information
- Encrypted in transit (TLS) and at rest (AES-256), on Supabase's SOC 2 Type 2 & ISO 27001 certified infrastructure.
- Each client's data is isolated using database Row Level Security.
- Role-based access (administrators vs. limited field users) and authenticated API access.
- Automated daily backups.
No system is perfectly secure, but we work to protect your information using industry-standard measures.
Data retention & deletion
We keep information for as long as needed to provide the service and meet legal obligations. For clients, HSE data is retained for the life of the contract and permanently deleted within 30 days of contract end, unless a longer period is required by law or agreed in writing. You can request export of your data (CSV / JSON) at any time.
Your rights & choices
You may request access to, correction of, or deletion of personal information we hold about you by emailing bprice@fhstac.com. For client HSE data, the client organization controls access and deletion; we act on that organization's instructions.
Data ownership
Client data belongs to the client. We do not claim ownership of the records your team enters, and we provide full export on request with no export fee, as set out in your agreement.
Cookies
This website uses only what's needed to function and to load the scheduling widget. We do not run third-party advertising trackers. Third-party tools you interact with (e.g., Calendly) may set their own cookies under their policies.
Children
Our services are for businesses and are not directed to children under 16. We do not knowingly collect personal information from children.
Changes to this policy
We may update this policy from time to time. The "last updated" date above reflects the latest version. Material changes affecting clients will be communicated directly.
Contact
F&H Enterprises, LLC · Williston, ND · bprice@fhstac.com · (701) 651-6456