Privacy Policy

Effective August 19, 2026

1. Who this policy covers

This policy applies to BasisWeb (“BasisWeb”, “we”, “us”), a sole proprietorship operated by Ethan Chacko and based in Surprise, Arizona, United States. It covers every part of what we do:

• Our website at basisweb.net, including the free calculators and any forms on it.
• Our client and prospect relationships — proposals, contracts, support and the systems we build and operate for clients.
• Our data products — the business datasets and research files we build and license, including those listed on data marketplaces.

Where we build or operate a system on behalf of a client, that client decides what data goes into it and why. In that arrangement the client is the controller of the data and we act as their service provider or processor, under the terms of our written agreement with them. This policy describes our own practices; it does not replace a client’s own privacy policy.

2. What BasisWeb does with data

Being specific here matters more than being reassuring, so here is the plain version.

• We build datasets about businesses. A typical record describes a company, a licensed premises, a storefront or a filing: names of businesses, addresses, websites, categories, license or registration facts, and where each fact came from.
• We do not build consumer profiles. We do not compile datasets about individuals in their personal capacity, and we do not sell consumer personal information such as home addresses, personal phone numbers, purchase histories, location histories or inferred personal characteristics.
• Some public business records name people. Business registries, license filings and company websites sometimes list an owner, a registered agent or a named officer. Where that is the case, the information is a public record about a business role, not a consumer profile. Section 9 explains how to have such a record removed from our future outputs.
• We do not sell information you give us. If you fill in a form, email us or become a client, that information is used to respond to you and to do the work. It is never sold, rented or licensed to anyone.

3. Information we collect

Website visitors

• Information you submit: name, email address, phone number, company name and whatever you write in a message or form.
• Technical information: IP address, browser and device type, referring page, pages viewed and approximate region. This is standard server and analytics information.
• Calculator inputs: the free tools on this site run in your browser. The numbers you type into them are not sent to us or stored by us unless you separately submit them in a form.

Clients and prospects

• Business contact details for you and the people we work with at your company.
• Project information: requirements, specifications, files you send us, correspondence, and the credentials or access you grant us to systems we are engaged to build or operate.
• Billing information: invoices, amounts and payment records. Card and bank details are handled by our payment provider and are not stored by us.

Business records in our datasets

• Business identity: legal name, trading or “doing business as” name, entity type, registration or license number.
• Business location and contact: premises and mailing address, business phone, website, marketplace or storefront URL.
• Business attributes: category or industry classification, license or permit type and status, filing and issue dates, size or activity indicators, and facility or location listings.
• Provenance: for every record we deliver, the source it came from, how it was verified, and a confidence score.
• Where a public record names an individual in a business role — for example an owner, officer, registered agent or license holder — that name may appear as part of the record.

4. Where the information comes from

• Directly from you, when you submit a form, email us, or work with us.
• Automatically from your device, when you visit the website.
• Government and public records — for example state business registries, licensing authorities, permit databases and securities filings.
• Publicly available business sources — company websites, public business directories and listings, and public marketplace storefront pages.
• From a client, when they ask us to verify, enrich or process a list they already hold. In that case the data remains theirs and we process it only on their instructions.

We do not collect data from sources that prohibit it, and we do not access anything behind a login we are not authorised to use.

5. How we use information

• To respond to enquiries and provide quotes and proposals.
• To deliver, support and improve the services and systems we are engaged to build.
• To build, verify, score and deliver the datasets described above.
• To operate, secure and improve our website.
• To send transactional and service messages, including invoices and delivery notices.
• To keep business records and comply with tax, accounting and legal obligations.
• To detect, prevent and investigate fraud, abuse and security incidents.

We do not use your information for automated decision-making that produces legal or similarly significant effects about you.

6. Legal bases for processing (UK/EU)

If you are in the United Kingdom or the European Economic Area, we rely on the following legal bases under the UK GDPR and EU GDPR:

• Contract — to provide services you or your organisation have engaged us for.
• Legitimate interests — to operate and secure our website, to respond to business enquiries, and to compile business-level records from public and publicly available sources. We balance this against your rights, and we limit our datasets to business information for that reason.
• Legal obligation — to meet tax, accounting and regulatory requirements.
• Consent — where we ask for it, for example for optional marketing messages. You can withdraw consent at any time.

7. When we disclose information

We disclose information in these situations, and no others:

• Service providers who help us operate: hosting, email, analytics, payment processing and file delivery. They may process information only to provide that service to us.
• Clients and buyers of our datasets, who receive the business records described in section 3, together with the sourcing and confidence information for each record.
• Professional advisers such as accountants and lawyers, where needed.
• Legal and safety — where required by law, legal process or a government request, or to protect our rights, safety or property.
• Business transfer — if BasisWeb is sold or merged, information may transfer as part of that transaction. You would be told before your information became subject to a different policy.

8. Sale and sharing of personal information

We do not sell or share the personal information of our website visitors, prospects or clients. We do not disclose it for cross-context behavioural advertising, and we do not exchange it for money or other value. There is nothing to opt out of, because we do not do it.

Separately, we license business datasets to buyers. Those datasets are business records, and we build them to be business-level. Where a public record includes an individual’s name in a business role, we treat requests about that record under section 9 and honour them regardless of whether a particular law requires it.

We do not sell or license any information about anyone we know to be under 16.

9. If your information appears in a dataset we built

Public business records sometimes carry a person’s name — an owner, a registered agent, a licence holder, a named officer. If you have found yourself in something we produced, or you simply want to be excluded from future outputs, here is what happens.

• Write to ethan@basisweb.net with enough detail to identify the record. You do not need to explain why.
• We will acknowledge within 10 business days and complete the request within 45 days, or tell you if we need longer and why.
• We will remove the record from our working sources and add it to a suppression list so it is excluded from future builds and deliveries.
• We will tell you honestly what we cannot do. We cannot delete a record from the government registry it came from, and we cannot retrieve a file already delivered to a buyer. Where we have a current relationship with a buyer who received the record, we will pass your request on.
• There is no charge and we will not treat you differently for asking.

Because our datasets are assembled per order from public sources rather than maintained as a standing database, suppression is the reliable mechanism: it stops the record reappearing next time we build.

10. How long we keep information

• Enquiries that do not become projects: up to 24 months, then deleted.
• Client project records: for the life of the engagement and up to 7 years afterwards, for tax, accounting and dispute-resolution purposes.
• Client-supplied data we process on their behalf: deleted or returned at the end of the engagement, or sooner on the client’s instruction.
• Dataset working files: retained only as long as needed to build, support and reproduce a delivery.
• Suppression lists: kept indefinitely, because their whole purpose is to keep a record excluded.
• Website analytics: retained in aggregate.

11. How we protect information

We use encryption in transit, access controls, credential management and least-privilege access to client systems. Files are delivered over secure channels. No system is perfectly secure, and we will not claim otherwise. If a breach affects your information, we will notify you and any relevant authority as required by law and without undue delay.

12. Your rights (United States)

Depending on where you live, you may have the following rights over personal information we hold about you. California residents have these rights under the California Consumer Privacy Act as amended; residents of other states with comprehensive privacy laws have comparable rights.

• Know and access — what we collect about you, where it came from, why we use it and who we disclose it to, and a copy of it.
• Delete — request deletion of personal information we hold about you, subject to legal exceptions.
• Correct — ask us to fix inaccurate personal information.
• Opt out of sale or sharing — we do not sell or share personal information as described in section 8, but you may exercise this right at any time and we will record it.
• Limit use of sensitive personal information — we do not collect sensitive personal information for the purposes that would trigger this right.
• Non-discrimination — we will not deny service, charge a different price or provide a lesser quality of service because you exercised a right.

You may use an authorised agent to submit a request. We will ask for proof of the agent’s authority and may ask you to verify your own identity directly.

13. Your rights (UK/EU)

If you are in the United Kingdom or the European Economic Area, you have the right to access, rectify, erase, restrict processing of, and port your personal data; to object to processing based on legitimate interests; and to withdraw consent where processing is based on consent. Where we obtained your information from a public source rather than from you, you have the right to be told about it and to object — section 9 is how we handle that in practice.

You also have the right to lodge a complaint with your national data protection authority, or with the Information Commissioner’s Office in the United Kingdom.

14. How to exercise your rights

Email ethan@basisweb.net with the subject line “Privacy Request”. Tell us what you want and enough detail for us to find your information.

We will acknowledge within 10 business days and respond within 45 days. If we need more time we will tell you why, and we will not take longer than 90 days in total. Verification is proportionate: for a record in a public business filing we generally only need enough information to match the record, and we will not ask you for identity documents unless a request genuinely requires it. If we decline a request, we will explain the reason.

15. Cookies and analytics

Our website uses cookies and similar technologies that are necessary for it to work, plus privacy-conscious analytics so we can see which pages are useful. We do not run advertising networks, retargeting pixels or cross-site tracking on this site, and we do not sell analytics data. You can block or delete cookies in your browser; the site will still work.

We honour the Global Privacy Control signal where your browser sends one.

16. International transfers

We are based in the United States and our service providers are primarily United States based. If you are outside the United States, your information will be processed there. Where we transfer personal data out of the United Kingdom or the European Economic Area, we rely on appropriate safeguards, including the Standard Contractual Clauses or the UK Addendum where applicable.

17. Children

Our website and services are for businesses and are not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, write to us and we will delete it.

18. Changes to this policy

We will update this policy when our practices change, and we will move the effective date at the top. If a change materially affects how we handle your information, we will say so clearly on this page rather than change it quietly.

19. How to contact us

BasisWeb
Ethan Chacko, Owner
Surprise, Arizona, United States
ethan@basisweb.net

We have not appointed an EU or UK representative because we do not currently target or monitor individuals in those territories at a scale that requires one. If that changes, this section will change with it.

This policy describes BasisWeb’s actual practices as of the effective date. It is provided for transparency and is not legal advice. Privacy law changes frequently; if our data practices change materially — in particular if we begin licensing datasets that describe individuals rather than businesses — this policy and our registration obligations will be reviewed with counsel before that happens.