top of page

CIVEX GROUP

Privacy Policy

Effective Date: June 15, 2026

Jurisdictions: United States (North Carolina) | Canada | United Kingdom

1. Introduction & Scope

Civex Group ("we," "us," or "our") is a civil engineering consultancy headquartered in North Carolina, USA, providing professional services to clients in the United States, Canada, and the United Kingdom. This Privacy Policy applies to our website at www.civex-group.com (the "Site") and describes how we collect, use, store, and protect personal information.

Because we operate across multiple jurisdictions, this Policy is designed to satisfy the requirements of applicable privacy laws in each region where we operate. Jurisdiction-specific rights and disclosures are set out in Section 9.

By using our Site, you acknowledge that you have read and understood this Policy.

2. Information We Collect

2.1 Information You Provide Directly

  • Contact form submissions: name, company name (optional), email address, phone number, and the content of your message or project inquiry, including the inquiry type you select from our form's dropdown menu

  • Business correspondence: information contained in emails, proposals, or other communications you initiate with us

2.2 Information Collected Automatically

  • Log data: IP address, browser type, operating system, pages visited, time and date of access, referring page URL, and other standard server log information

  • Strictly necessary cookies set by Wix for Site functionality and spam protection. We do not use analytics or advertising tracking tools and do not collect behavioral data through third-party scripts.

 

2.3 Information We Do Not Collect

We do not collect payment information, health information, social security or national insurance numbers, or any sensitive personal information through our Site. We do not knowingly collect personal information from children under 13 (US) or under 16 (UK/EU). Our Site is not directed at children.

3. How We Use Your Information

We use the information we collect to:

  • Respond to project inquiries, proposals, and general questions submitted through our contact form

  • Communicate with prospective and current clients about our services

  • Operate, maintain, and improve our Site

  • Analyze Site usage to understand how visitors interact with our content

  • Comply with applicable legal and regulatory obligations

  • Protect the security and integrity of our Site and business

 

We process personal data only where we have a lawful basis to do so. Depending on the applicable jurisdiction, our lawful basis includes: your consent (captured at the point of form submission), the performance of a contract or pre-contractual steps, our legitimate interests (e.g., responding to an inquiry), and compliance with a legal obligation.

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share information in the following limited circumstances:

  • Service providers: We may share data with trusted vendors who support our business operations (e.g., web hosting via Wix, email services). These providers are contractually bound to process data only as we direct and in compliance with applicable law.

  • Professional advisors: We may share information with attorneys, accountants, or insurers as necessary in connection with the operation of our business.

  • Legal compliance: We may disclose information where required by law, regulation, or court order, or to protect the rights, property, or safety of our firm, clients, or the public.

  • Business transfers: In the event of a merger, acquisition, or sale of our business, personal information may be transferred as part of that transaction, subject to appropriate notice.

5. Cookies

Our Site is hosted on Wix and uses cookies to support basic Site functionality. Wix automatically applies spam filtering and invisible reCAPTCHA to our contact form to protect against bot submissions.

 

5.1 Cookies We Use

  • Strictly necessary cookies: Required for the Site to operate (e.g., security, form submission, spam filtering). Cannot be disabled.

Beyond strictly necessary cookies required for Site functionality and spam protection (provided by Wix), we do not use analytics, advertising, or third-party tracking cookies on this Site.

5.2 Cookie Consent

For visitors accessing our Site from the United Kingdom or European Union, we will request your consent before placing any non-essential cookies, consistent with UK GDPR and the Privacy and Electronic Communications Regulations (PECR). You may withdraw consent at any time via your browser settings or our cookie preference tool.

5.3 Managing Cookies

You can control cookies through your browser settings (Chrome, Firefox, Safari, Edge). Disabling certain cookies may affect Site functionality.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected or as required by applicable law:

  • Contact form submissions and business correspondence: retained for 2 years from the date of submission, after which they are securely deleted

  • Analytics data: retained for [X] months in anonymized/aggregated form

  • Backup and archive data: may be retained for an additional 90 days before secure deletion

7. Data Security

We implement appropriate technical and organizational security measures to protect personal information against unauthorized access, disclosure, alteration, or destruction. These measures include encrypted data transmission (HTTPS), platform-level security provided by Wix, and restricted access to personal data within our organization.

No method of transmission over the internet is completely secure. While we take all reasonable precautions, we cannot guarantee absolute security. In the event of a data breach that requires notification under applicable law, we will notify affected individuals and relevant authorities as required.

8. International Data Transfers

As Civex Group operates across the US, Canada, and the UK, personal information may be transferred between these jurisdictions in the course of our business. Where personal data is transferred outside the UK or Canada, we ensure appropriate safeguards are in place consistent with applicable law (e.g., UK GDPR transfer mechanisms, PIPEDA cross-border transfer obligations). Our Site is hosted by Wix, whose servers may be located in the United States.

9. Your Rights by Jurisdiction

9.1 United States (North Carolina)

US federal law (including the FTC Act) and North Carolina law govern our data practices for US-based visitors. You have the right to:

  • Request access to personal information we hold about you

  • Request correction of inaccurate information

  • Opt out of marketing communications at any time

California residents: If you are a California resident, you have additional rights under the CCPA/CPRA, including the right to know what personal information we collect, the right to delete, and the right to opt out of the sale or sharing of personal information. We do not sell personal information. To exercise these rights, contact us via the method in Section 11.

9.2 Canada

For visitors and clients in Canada, our data practices are governed by the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. You have the right to:

  • Access personal information we hold about you

  • Correct inaccurate personal information

  • Withdraw consent for non-essential data processing (subject to legal and contractual limitations)

  • File a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca) if you believe your privacy rights have been violated

 

The individual accountable for privacy compliance at Civex Group is our Managing Principal, reachable via our contact form at www.civex-group.com.

9.3 United Kingdom

For visitors and clients in the United Kingdom, our data practices are governed by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. You have the right to:

  • Access: Obtain a copy of the personal data we hold about you

  • Rectification: Request correction of inaccurate or incomplete data

  • Erasure: Request deletion of your personal data ('right to be forgotten') in certain circumstances

  • Restriction: Request that we limit processing of your data in certain circumstances

  • Portability: Receive your data in a structured, machine-readable format

  • Object: Object to processing based on legitimate interests

  • Withdraw consent at any time where processing is based on consent

 

We will respond to data subject rights requests within the timeframes required by applicable law (generally within one month for UK GDPR requests). You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or 0303 123 1113.

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. The current version will always be available at www.civex-group.com. For material changes, we will provide additional notice as appropriate. The effective date at the top of this page indicates when this Policy was last revised.

11. How to Contact Us & Exercise Your Rights

To submit a privacy inquiry, exercise any of the rights described in Section 9, or raise a concern about our data practices, please contact us via our contact form at www.civex-group.com, selecting "Privacy Request" as your inquiry type. We do not publish a direct email address publicly to protect against spam and unauthorized data collection.

 

Company: Civex Group

Website & Contact Form: www.civex-group.com

 

For UK purposes, Civex Group acts as the Data Controller for personal data collected through this Site. If you are located in the UK and have unresolved concerns about our data practices, you may contact the Information Commissioner's Office at ico.org.uk or 0303 123 1113.

For Canada purposes, our designated privacy accountability contact is our Managing Principal, reachable via the contact form above.

bottom of page