Privacy Policy

Introduction and scope

Asama Bisato International Ltd ("Asama Bisato", "we", "us", or "our") is a US-based multi-sector group delivering Civil Engineering, General Construction, Electrical Works, Clean Energy, Plumbing Services, Prefabricated Homes, Real Estate Development and Oil Procurement & Resale. We are headquartered at Hollywood, Florida 33023, USA, and we deliver projects internationally, including in Ghana.

This policy covers the website at https://asamabisato.com and the two places on it where you can send us information: the contact form and the newsletter sign-up in the footer. It does not cover the separate contracts, tender documents, or project correspondence that follow once we begin working together, and it does not cover any third-party website you reach by following a link from here.

If you do not want to share personal information with us through this site, you can still browse every page freely. Nothing on the site requires an account.

Information we collect

Information you give us

We only receive personal information from you when you choose to submit one of our two forms.

The contact form on our contact page asks for the following:

• Full name and email address, so we know who you are and how to reply. These two are required.
• Company or organisation and phone number, which are optional and help us route your enquiry to the right team.
• Inquiry type, which tells us the sector you are asking about, for example civil engineering, or plumbing services.
• Project location, which is optional and helps us judge logistics, permitting, and site conditions.
• Your message, which is free text. Please share only what is relevant to your enquiry and avoid sending sensitive personal details in it.
• A pricing tier reference, which is filled in automatically if you arrived at the form from a package on our pricing page, so we know which option prompted you to write.

The newsletter form in the site footer asks for one thing: a work email address, which we use to send deployment case studies, and intelligence.

Information collected automatically

Like every web server, our hosting provider records standard technical details when your browser requests a page: your IP address, the date and time, the page requested, the referring page, and your browser and operating system user agent. These server logs exist to keep the site available, diagnose errors, and identify abuse such as automated scanning or spam floods.

We also store a small amount of state in your PHP session while you are filling in the contact form: a security token that protects the form against cross-site request forgery, and a timestamp of your last submission so the form can throttle rapid repeat posts. Section 4 explains the single cookie that supports this.

We do not run analytics software, advertising pixels, heatmaps, session recording, or behavioural profiling on this website. We do not build visitor profiles, and we do not attempt to identify you from your browsing.

How we use your information

We use what you send us for a short and specific list of purposes.

We do not use your information to make automated decisions that have legal or similarly significant effects on you, and we do not use contact form submissions to add you to the newsletter. Those are two separate choices, and you have to make each one yourself.

Cookies and similar technologies

This website sets exactly one cookie, and it is strictly necessary.

There are no analytics cookies, no advertising cookies, no tracking pixels, and no third-party marketing cookies on this site. We are not sharing your visit with an ad network, a data broker, or a social platform, because none of them are loaded here. That is a deliberate design choice, and it is why you will not find a consent banner asking you to accept tracking: there is nothing to consent to.

Because the one cookie we set is strictly necessary for the contact form to work, it does not require consent under the EU and UK cookie rules. You can still block or delete cookies in your browser settings. If you block this one, you will be able to read every page, but the contact form may reject your submission as a failed security check.

Third-party services and embeds

Some of our page assets are served by third parties. When your browser fetches those files, the third party necessarily sees your IP address, your user agent, and the fact that a request came from our site. We have listed every one of them below so there are no surprises.

• Google Fonts serves the Inter typeface used across the site.
• jsDelivr, an open-source content delivery network, serves the Bootstrap framework, Bootstrap Icons, the AOS scroll-animation library, and the Swiper slider library.
• Google Maps provides the embedded map showing our office location. This appears on the contact page only. No other page loads it, and the map is the only embed on the site that comes from a mapping or media provider.

These providers act as independent controllers of the data their own servers receive, under their own privacy policies rather than ours. If you would prefer that Google not receive a request from your browser at all, avoid the contact page and use email or telephone to reach us instead. Our details are in section 13.

Beyond these, our email is delivered over an authenticated SMTP connection through our hosting provider, which processes contact form messages on our behalf in order to deliver them to our inbox.

How we share information

We do not sell, rent, or trade your personal information, and we never have. We do not share it for cross-context behavioural advertising, and we do not disclose it to data brokers or list vendors.

We share information only in these situations:

• Within our own team. Enquiries reach the directors and staff responsible for the relevant sector, so the right person can answer you.
• With service providers who work for us. Our web host and email provider handle the transmission and storage of your message. They act on our instructions and are not permitted to use your information for their own purposes.
• With project partners, when you ask us to. If your enquiry involves a joint venture, subcontractor, or local partner on a project, we may pass on the details needed to prepare a response. We tell you when this is relevant.
• When the law requires it. We may disclose information to comply with a valid legal obligation, a court order, or a lawful request from a public authority, or to establish or defend legal claims.
• In a business transfer. If our business or part of it is reorganised, merged, or acquired, enquiry records may transfer as part of that transaction. Any recipient remains bound by this policy until it tells you otherwise.

Data retention

We keep information only as long as it is useful for the purpose it was collected for.

• Contact form enquiries live in our email system. Enquiries that do not lead to a project are kept for up to 24 months so we can pick up the thread if you come back to us, then deleted. Enquiries that become projects are retained for the life of the engagement and for as long afterwards as accounting, tax, warranty, and contractual record-keeping requires.
• Newsletter email addresses are kept until you unsubscribe or ask us to remove you.
• Server logs are kept for a short period, typically a matter of weeks, in line with our hosting provider's standard log rotation.
• Session data is temporary and is discarded when your browser session ends.

You can ask us to delete your information sooner. Section 10 explains how.

How we protect your information

The safeguards on this site are practical rather than decorative. Here is what is actually in place:

• HTTPS everywhere. Traffic between your browser and our server is encrypted in transit.
• CSRF tokens. Every contact form submission carries a single-use security token that is verified server-side, so a third-party site cannot submit the form on your behalf.
• A honeypot field. The form includes a hidden field that people never see and automated bots usually fill in. Submissions that complete it are rejected.
• Input sanitisation and validation. Submitted values are trimmed, stripped of markup, length-checked, and validated against expected formats before we do anything with them.
• Submission throttling. Repeat submissions from the same session within a short window are blocked, which limits spam floods.
• Encrypted mail delivery. Messages are sent to our inbox over an authenticated, encrypted SMTP connection, and credentials are kept outside the published website files.

No website can promise perfect security, and we do not make that promise. What we can say is that we do not collect data we do not need, which is the most reliable protection of all. Please avoid sending confidential commercial terms, financial account details, or identity documents through the contact form. We will arrange a secure channel when a project needs one.

International data transfers

We are based in the United States, our website is hosted on servers operated by our hosting provider, and our email is processed there too. If you contact us from outside the United States, including from Ghana, the United Kingdom, or the European Economic Area, the information you send will be transferred to and stored in a country whose data protection laws may differ from those where you live.

Where that transfer involves personal data protected by UK or EU law, we rely on appropriate safeguards for the transfer, such as the standard contractual clauses used by our providers, or on the fact that the transfer is necessary to take steps at your request before entering a contract with you. If you would like to know more about the safeguards that apply to your enquiry, write to us at info@asamabisato.com and we will explain.

Because we operate projects internationally, correspondence about a specific project may also be shared with our team members in the country where that project is located.

Your privacy rights

Depending on where you live, you may have some or all of the following rights over the personal information we hold about you.

Rights under the UK GDPR, the EU GDPR, and similar laws

• Access. Ask for a copy of the personal information we hold about you.
• Rectification. Ask us to correct information that is inaccurate or incomplete.
• Erasure. Ask us to delete information we no longer have a reason to keep.
• Restriction. Ask us to pause our use of your information while a question about it is resolved.
• Objection. Object to processing we carry out on the basis of legitimate interests.
• Portability. Receive the information you gave us in a structured, commonly used, machine-readable format.
• Withdraw consent. Withdraw newsletter consent at any time, without affecting anything we sent before you withdrew it.
• Complain. Lodge a complaint with your national data protection authority if you believe we have handled your information badly. We would appreciate the chance to put it right first.

Rights for residents of US states such as California

If you live in California or another US state with a comprehensive privacy law, you may have the right to know what personal information we have collected about you and why, the right to request its deletion, the right to correct inaccurate information, and the right to opt out of the sale or sharing of personal information and of targeted advertising. You also have the right not to be treated differently for exercising any of these rights, and we will not discriminate against you for doing so.

On the opt-out right specifically: there is nothing to opt out of here. We do not sell or share personal information as those terms are defined under the CCPA and CPRA, we do not process it for cross-context behavioural advertising, and we do not use it for profiling in furtherance of decisions that produce legal or similarly significant effects.

How to exercise your rights

Email info@asamabisato.com with the subject line "Privacy request" and tell us what you would like us to do. It helps if you include the email address you used when you contacted us, so we can find the right records. To unsubscribe from the newsletter, the same address works, or you can use the unsubscribe link in any message we send.

We will acknowledge your request and respond within one month, or within 45 days for US state law requests, and we will tell you if we need more time. We may ask a question or two to confirm your identity before we act, which protects you as much as it protects us. There is no charge for this. An authorised agent may submit a request on your behalf where the law allows it, with written proof of authorisation.

Children's privacy

This is a business-to-business website about engineering, construction, property, and energy infrastructure. It is not directed to children, and we do not knowingly collect personal information from anyone under the age of 16.

If you believe a child has submitted information to us through this site, please contact us at info@asamabisato.com and we will delete it promptly.

Changes to this policy

We will update this policy when our practices change, for example if we add a new form to the site, change how a form works, or introduce a new third-party service. The "last updated" date at the top of this page always shows when the current version took effect.

If a change materially affects how we handle information you have already given us, we will take reasonable steps to tell you, which may include emailing newsletter subscribers or posting a notice on this page. Please check back from time to time. Continuing to use the site after an update means you accept the revised policy.

How to contact us

Questions about this policy, or about anything we hold on you, go to the same place. A person reads them.