1. Who this policy covers
This Privacy Policy explains how BHIM handles personal information in connection with bhim.si, enquiries, and support for BHIM KVH. References to “we”, “us”, and “our” mean BHIM. You can contact us about privacy at team@bhim.si.
This policy covers information received by BHIM. When you install a self-managed security product on your own infrastructure, you are responsible for the personal information you collect and process through that deployment.
2. Information we receive
Enquiries and support: when you email us, we receive your email address, the name you provide, the contents of your message, and any attachments or technical details you choose to share.
Website and download requests: our hosting infrastructure may process your IP address, requested URL, request time, browser or user-agent information, response status, and related technical information needed to deliver and secure the website or downloads.
Technical support material may contain IP addresses, hostnames, configuration details, incident records, or log excerpts. Please remove passwords, access tokens, private keys, unnecessary personal information, and other secrets before sharing material with us.
3. How we use information
We use information to deliver website content and downloads, respond to enquiries, troubleshoot reported issues, provide requested support, protect our services against abuse, and meet applicable legal obligations.
Where applicable law requires a legal basis, we rely on consent where requested, steps necessary to respond to your request or perform an agreement, legitimate interests in operating and securing our services where permitted, or a legal obligation. Contact us for information about the basis relevant to a particular use.
4. Self-managed BHIM KVH deployments
BHIM KVH is offered as a self-managed Linux security product. Security logs, incidents, block lists, and metrics generated in your deployment are distinct from information collected by this website. Installing the product does not by itself mean that BHIM receives all of those records. License activation and renewal send an irreversible device fingerprint, a device public key, request timestamps and nonces, and the relevant license key or activation identifier to the licensing service. These are used to bind a license to one installation and verify its validity; activation and renewal do not upload your security logs.
If you send deployment information to BHIM for support, this policy applies to the information we receive. External services used by an installer or by your configuration, such as download hosts or public-IP lookup services, receive the requests sent to them and handle those requests under their own policies. Review your installed version and configuration for the services it contacts.
7. Retention and security
Retention depends on the type of information, the reason it was collected, ongoing support needs, security investigations, and applicable legal requirements. Information should be deleted or anonymised when it is no longer needed for those purposes. Contact us to ask about retention of a particular enquiry or support record.
We use safeguards appropriate to the information and the service involved. No method of transmission or storage is completely secure. Avoid sending secrets or sensitive production data in ordinary email.
8. International processing
Depending on the location of our service providers, website requests and communications may be processed outside your country. Where applicable law requires safeguards for international transfers, those requirements apply. Contact us if you need details about the processing of your information.
9. Your choices and privacy requests
Depending on applicable law, you may have rights to request access to, correction of, or deletion of your personal information; information about its use or disclosure; restriction of or objection to certain processing; or a portable copy. Where processing relies on consent, you may withdraw it without affecting processing already lawfully carried out.
Email team@bhim.si with the subject “Privacy request” and explain your request. We may ask for information reasonably necessary to verify your identity. Requests are handled subject to applicable legal requirements and exceptions. You may also raise a grievance with us or complain to the relevant data protection authority where that right applies.
10. Children’s information
This website and its infrastructure security products are intended for professional use, rather than services directed at children. If you believe a child has provided personal information to BHIM, contact us so we can review the situation and take appropriate action under applicable law.
11. Changes and contact
We may update this policy when the website, our services, or applicable requirements change. The date above identifies the latest revision. We will provide additional notice where required for material changes.
For privacy questions, requests, or grievances, contact team@bhim.si. Include enough context for us to locate the relevant communication or record, and avoid including unnecessary sensitive information.