Privacy Policy

1. Who is responsible

The website at nimbusbase.online (Nimbus Base) is operated by BHK MULTI SERVICES, which is responsible for personal information handled through it.

This policy is written to meet the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Because BHK MULTI SERVICES is established in France, section 11 also covers the EU General Data Protection Regulation (GDPR).

2. What is collected

Only two kinds of personal information are handled in connection with this site.

Server logs

When any browser requests a page, the web server automatically records:

• the IP address the request came from;
• the user agent, which is a short text identifying the browser and operating system;
• the address of the page or file requested;
• the date and time of the request.

The server also records technical details of the request itself, such as whether it succeeded. Requests for style and script files are not logged.

Emails you send

If you email us, we receive whatever you include: your email address, your name if you give it, and the content of your message.

What is not collected

The site has no forms, accounts, comments, newsletter or chat. It sets no cookies, uses no browser storage, and runs no analytics, advertising or tracking scripts. It does not load fonts, scripts or images from other websites. When you follow an affiliate link to another website, that website's own privacy policy applies from that point; we do not receive information about what you do there, other than the network reporting to us that a commission is due.

3. Why it is collected

We do not use personal information for direct marketing and do not sell it.

4. How long it is kept

• Server logs: rotated daily and deleted automatically after 14 days. Logs relevant to a specific security incident may be kept for up to 12 months while that incident is investigated, then deleted.
• Emails: kept for 24 months after the last message in a conversation, then deleted, unless a longer period is needed to deal with a legal claim or a complaint you have made.

5. Who it is shared with

Personal information is disclosed only to:

• The hosting provider that runs the server on which this site and its logs are stored, which processes it on our behalf only to provide that service;
• The email service provider that receives and stores messages sent to info@nimbusbase.online, for the same limited purpose;
• authorities, if the law requires us to provide it.

The affiliate network does not receive any information from this site. If you follow an affiliate link, your browser connects directly to the network's and vendor's websites, which collect information under their own policies.

Disclosure outside Australia (APP 8)

BHK MULTI SERVICES is located in France, so any personal information handled under this policy is held outside Australia. Server logs and emails are stored by our service providers, which may hold them in the European Union or other countries outside Australia. We take reasonable steps under APP 8 to ensure these recipients handle the information consistently with the APPs, including by using providers subject to the GDPR or bound by contract to equivalent protections.

6. How it is protected

• All pages are served only over HTTPS, so information passing between your browser and the server is encrypted.
• Access to server logs and the email inbox is limited to the publisher and protected by strong passwords and two-step verification.
• The site runs no third-party code, which removes a common route for data leakage.
• Logs are deleted on a fixed schedule rather than kept indefinitely.

7. Your rights: access, correction and complaints

Under the APPs you can ask for access to personal information we hold about you and ask us to correct it. Email info@nimbusbase.online. To find log entries, we will need the approximate date and time of your visit and the IP address you used. We will respond within 30 days and will not charge for a request.

If you have a complaint about how we handled your personal information, contact us first at the same address, and we will respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC).

8. Data breaches

If a data breach likely to cause serious harm to anyone occurs, we will assess it promptly and, where the Notifiable Data Breaches scheme requires, notify the people affected and the OAIC, with recommendations on steps they can take.

9. Children

This site is not directed at people under 16, and we do not knowingly collect personal information from them. If a child emails us, we will use their message only to reply and will delete it on request from the child or a parent or carer.

10. Changes to this policy

If this policy changes, the new version is published on this page with a new effective date. If a change would mean collecting information in a new way, such as setting cookies, the policy will be updated before that change goes live, and a notice will be placed on the homepage for at least 30 days.

11. Readers in the EU and UK

BHK MULTI SERVICES is established in the European Union, so the GDPR applies to its handling of personal information. The UK GDPR may apply to readers in the United Kingdom.

Legal basis. Server logs are processed on the basis of legitimate interests (Article 6(1)(f)): keeping the site secure and working. Emails are processed on the basis of legitimate interests in responding to you, or to meet a legal obligation where you exercise a right under this policy. No processing relies on consent, because the site sets no cookies and collects nothing for which consent would be needed.

Your rights. You have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interests. To exercise them, email info@nimbusbase.online. We will respond within one month.

Complaints. You can complain to a supervisory authority, in particular in the country where you live or work. In France this is the Commission nationale de l'informatique et des libertés (CNIL). In the UK it is the Information Commissioner's Office.