Skip to content

Legal / Data Policy

Data Policy

Last updated:

How website information, support material, and self-managed security data are handled.

1. Scope and relationship to privacy

This policy describes the handling of data associated with bhim.si and BHIM KVH support. The Privacy Policy explains personal information, privacy choices, and requests. Any separately agreed data processing terms apply to the services they cover.

2. Website and communication data

Website requests may include IP addresses, timestamps, requested URLs, user-agent details, and response codes. Emails include your address, message, and attachments. These records are used to operate and protect the website, answer questions, and investigate reported issues.

3. Data in your infrastructure

A self-managed deployment can process access logs, IP addresses, authentication events, incidents, block lists, configuration, and metrics on infrastructure you control. You determine what is collected, who can access it, and how long it is kept. Installing BHIM KVH does not by itself give BHIM access to all deployment data.

4. Your responsibilities

Only process data that you are entitled to use. Configure collection and retention for your needs and legal obligations, restrict access, maintain backups where appropriate, and give notices or obtain consent where required. Review exported JSON and logs before sharing them.

5. Support files and minimisation

Share the smallest useful reproduction or log excerpt. Remove passwords, private keys, tokens, session cookies, customer records, and unrelated personal information. Use synthetic or anonymised examples where possible. Ask team@bhim.si about an appropriate transfer method before sending sensitive files.

6. External connections and providers

Downloads, updates, public-IP lookups, or integrations may contact external services depending on the installed version and configuration. Those services receive the requests addressed to them. Review the relevant code, settings, and provider policies rather than assuming all processing is offline.

7. Access, sharing, and retention

Data received for support may be handled by personnel and providers involved in resolving the request. Retention depends on the support purpose, security needs, and legal requirements. Contact us to request information about a specific record or to request deletion, subject to applicable exceptions.

8. Requests and updates

Send data-handling questions to team@bhim.si. Identify the relevant deployment or correspondence without including unnecessary secrets. This policy may change as services evolve; the revision date identifies the latest version.