Privacy & Customer Data Protection Policy
How Burhani Pro Tech protects your personal profile, procurement records, and credit card security—with zero local card storage, zero data selling, and instant self-service account deletion.
Burhani Guards Pro Tech LLC (DBA Burhani Pro Tech) protects all Federal Government and Commercial customer data under strict enterprise security controls. We never store raw credit card numbers, CVV/CVC security codes, or magnetic stripe data on our servers, and we never sell, rent, or broker customer personal or procurement data to third parties. Customers may permanently delete their account and saved profile at any time via My Account (/account).
1. Information We Collect
When you browse www.burhaniprotech.com, register a customer account, request a formal quote (RFQ), configure a custom server, or submit a Federal Net-30 Purchase Order or Commercial order, we collect only the information necessary to fulfill your order and comply with U.S. Federal and commercial tax/audit laws:
- Account & Buyer Identity Data: Full Name, Organization/Agency Name, Work Email Address, Telephone Number, and selected store tier (Federal Government Store vs. Commercial Client Store).
- Shipping & Billing Addresses: Physical street delivery coordinates, building/suite numbers, APO/FPO military installation addresses, and billing addresses used to calculate freight and dispatch hardware.
- Procurement & Order Ledger Data: Purchase Order (PO) numbers, CAGE/UEI references (for Federal buyers), itemized SKUs, manufacturer part numbers (MPNs), serial numbers for warranty registration, and order totals.
- Authentication Credentials: Account passwords are never stored in plain text; they are cryptographically salted and hashed using PBKDF2-HMAC-SHA256 (`werkzeug.security`) before storage.
2. Credit Card, Government Purchase Card (GPC) & Payment Data Security
Protecting your financial and cardholder information is our highest priority:
Burhani Pro Tech does not store, log, or retain full 16-digit credit/debit card numbers, GSA SmartPay 3 GPC card numbers, expiration dates, or 3/4-digit CVV/CVC security codes in our database or server logs.
All card transactions are processed through PCI-DSS Level 1 certified payment gateways using tokenized encryption and 256-bit TLS 1.3 transport security (`HTTPS`).
Bank wire, ACH, and Federal WAWF/PIEE/IPP remittance records are restricted strictly to authorized accounting personnel for invoice settlement.
3. How We Use & Share Information
We use collected information strictly to:
- Fulfill hardware, industrial MRO, and software license orders through our Chicago warehouse and authorized Tier-1 OEM distribution centers (e.g., Ingram Micro, TD SYNNEX, Dell, HPE, Cisco, Microsoft).
- Register OEM hardware serial numbers and electronic software delivery (ESD) licenses in the buyer's organization name for direct manufacturer warranty and support coverage.
- Dispatch real-time shipping confirmations, carrier tracking numbers (UPS, FedEx, LTL Freight), and 7-Day RMA return labels.
- No Sale of Personal Data: We never sell or share personal information with third-party data brokers or ad networks.
4. Cookies, Session Storage & Google Tag Manager Disclosure
Our website uses essential HTTP-only encrypted session cookies (`burhani_pro_tech_session`) to maintain your selected store portal (Federal vs. Commercial), login session, and active shopping cart. We also use Google Tag Manager (`GTM-5D2P7QDJ`) to measure aggregate site performance, catalog search speed, and page usability. You may disable non-essential cookies at any time through your browser settings without affecting your ability to browse our catalog.
5. Customer Self-Service Account Deletion & Privacy Rights (CCPA / CPRA / GDPR)
You have the right to view, update, export, or permanently delete your personal account data at any time:
- Instant Self-Service Account Deletion: Sign in to My Account (/account), scroll to the Delete My Customer Account section, and confirm deletion. Your customer profile, login credentials, and saved addresses are immediately and permanently erased from our `customers` database.
- Email Data Request: You may also request data access, correction, or deletion by emailing contact@burhanienterprisesinc.com. Accounting invoice records required by IRS / Federal FAR tax retention rules are retained in de-linked form (`customer_id = NULL`).