1. Introduction
This Privacy Policy describes how CAHM HOLDINGS, LLC collects, uses, stores, shares and protects information in connection with the website located at cahmholdings.autos and the professional services the firm provides. CAHM HOLDINGS, LLC is a computer integrated systems design and asset holding firm that manages water infrastructure assets, land parcels and long-horizon facility programs. The firm is based in Phoenix, Arizona and serves partners, agencies, advisors and counterparties across the United States.
The firm takes privacy seriously because the information entrusted to it often concerns finances, land, contracts and critical infrastructure. This policy explains, in plain language, what the firm does with that information and what choices are available to the people who provide it. The policy applies to the website, to enquiries submitted through the website, and to personal information handled in the course of a professional engagement.
By using the website or engaging the firm, a person acknowledges that the practices described in this policy apply. If any part of this policy is not acceptable, the appropriate step is to refrain from using the website and to contact the firm directly so that alternative arrangements can be discussed.
2. Scope of This Policy
This policy covers personal information that identifies or could reasonably identify an individual. It does not cover aggregated or de-identified information that cannot be linked back to a person, nor does it cover information that is publicly available through government records or that is already lawfully in the possession of the firm from an independent source.
This policy does not govern the practices of third parties whose services may be reached through links on the website or through integrations used during an engagement. Each of those third parties maintains its own privacy documentation, and the firm encourages readers to review those documents before providing information to them.
Where the firm acts as a service provider or processor on behalf of a partner, the partner determines the purposes and means of processing, and the partner privacy notice governs. In those cases the firm processes personal information only on documented instructions and returns or deletes it when the engagement concludes, unless the law requires otherwise.
3. Information We Collect
The categories of information the firm may collect depend on how a person interacts with it. The firm aims to collect only what is necessary for the stated purpose and to avoid speculative collection of information that serves no clear function.
Information provided directly
When a person submits an enquiry through the contact form, sends an email, or calls the office, the firm may receive a name, an email address, a telephone number, a subject line and the content of the message. Where an engagement proceeds, the firm may receive professional details such as an employer, a role, a mailing address and the information needed to perform the work.
Information collected automatically
When a person visits the website, the hosting environment may record technical information such as an internet protocol address, a browser type, an operating system, a referring page, a date and time of access, and general location derived from the address. This information is used for security, diagnostics and aggregate measurement rather than for identification.
Information from third parties
The firm may receive information about a person from a partner, an advisor, a public registry or a service provider in the normal course of an engagement. The firm treats such information consistently with this policy and with any contractual limits imposed by the source.
Information the firm does not seek
The firm does not intentionally collect sensitive categories such as health information, biometric identifiers, precise geolocation, or government identification numbers through the website. Visitors are asked not to submit such information through the contact form.
4. How We Collect Information
The firm collects information through three principal channels. The first is direct interaction, such as filling out a form, sending an email, placing a telephone call, or exchanging documents during an engagement. The second is automatic collection by the web server and its security tooling, which records technical details for operational reasons. The third is receipt from third parties, such as a referring partner or a public agency that provides records relevant to a matter.
In every channel the firm seeks to minimize collection. A field on a form is included only when the information is genuinely useful to respond to the enquiry. A log entry is retained only as long as it supports security and diagnostics. A third party record is accepted only when it bears on the work at hand.
5. Legal Bases for Processing
Where applicable law requires a legal basis for processing, the firm relies on one or more of the following. Consent applies where a person has given clear permission for a specific use, such as submitting an enquiry or subscribing to a briefing. Contract applies where processing is necessary to take steps at the request of a person before entering an agreement or to perform an agreement already in place. Legitimate interests apply where processing supports the secure and effective operation of the firm, provided those interests are not overridden by the rights of the individual. Legal obligation applies where the firm must retain or disclose information to comply with the law, such as tax, recordkeeping or regulatory requirements.
Where consent is the basis, it may be withdrawn at any time. Withdrawal does not affect processing that occurred before the withdrawal, nor does it affect processing that rests on another lawful basis.
6. How We Use Information
The firm uses personal information to respond to enquiries, to prepare and perform professional engagements, to maintain accurate business records, to protect the security and integrity of its systems, to comply with legal and regulatory obligations, and to improve the clarity and usefulness of its communications.
Specific uses include answering a message sent through the contact form, arranging a call or meeting, verifying the identity of a counterparty, preparing proposals and statements of work, maintaining a register of assets and obligations, and issuing notices about the website or about an engagement. The firm does not use personal information to make automated decisions that produce legal or similarly significant effects without human involvement.
The firm does not sell personal information. It does not rent personal information. It does not use personal information for behavioral advertising on third party networks.
9. Service Providers and Processors
Service providers support the firm in areas such as web hosting, email delivery, information security, document management and professional services. Each provider is selected with care and is expected to meet standards consistent with this policy. Where a provider processes personal information on behalf of the firm, the provider acts as a processor and the firm remains responsible for the information.
The firm reviews provider relationships periodically and terminates arrangements where a provider cannot demonstrate adequate safeguards or where the provider no longer serves a necessary function. Records of processing arrangements are maintained so that the firm can account for the flow of information through its systems.
10. Data Retention
The firm retains personal information only for as long as it is needed for the purpose for which it was collected, for the duration of an engagement, and for any additional period required by law or by a legitimate business need such as resolving a dispute or maintaining an accurate record of a transaction.
When information is no longer needed, the firm deletes it or renders it permanently unreadable in a manner appropriate to the medium. Retention periods vary by category. Routine enquiry correspondence is kept for a limited period, while records relating to contracts, land and infrastructure may be kept for many years because they document long-lived obligations.
11. How We Protect Information
The firm applies administrative, technical and physical safeguards designed to protect personal information from unauthorized access, alteration, disclosure and destruction. These safeguards include access controls that limit information to personnel who need it, encryption of information in transit where supported, secure configuration of systems, monitoring for unusual activity, and periodic review of practices.
No method of transmission or storage is entirely secure. The firm cannot guarantee absolute security, but it works to reduce risk and to respond promptly if an incident occurs. Where a breach affects personal information and the law requires notification, the firm notifies affected individuals and authorities without unreasonable delay.
Personnel who handle personal information are expected to follow the firm policies and to report any suspected incident through internal channels so that a response can begin immediately.
12. International Transfers
The firm operates primarily in the United States. Where personal information is transferred across a national border, the firm takes steps to ensure that the information receives an appropriate level of protection. Those steps may include contractual commitments with the recipient, reliance on recognized transfer mechanisms, and an assessment of the legal environment in the destination country.
Visitors accessing the website from outside the United States should be aware that information may be processed in the United States, where privacy laws may differ from those in their home jurisdiction. By using the website, a visitor understands that information may be processed in the United States in accordance with this policy.
13. Your Privacy Rights
Depending on the jurisdiction in which a person resides, that person may have the right to request access to personal information held about them, to request correction of inaccurate information, to request deletion of information, to request restriction of processing, to object to certain processing, and to request portability of information provided to the firm.
To exercise a right, a person may contact the firm using the details in the final section of this policy. The firm verifies the identity of the requester before acting, so that information is not disclosed to an unauthorized party. The firm responds within the timeframe required by applicable law and explains any basis for declining a request where the law allows it.
An individual who is not satisfied with the response may have the right to lodge a complaint with a supervisory authority in the relevant jurisdiction.
14. California Privacy Notice
Residents of California have specific rights under state privacy law. These include the right to know the categories and specific pieces of personal information the firm collects, the sources of that information, the purposes for collection, and the parties with whom it is shared. Residents also have the right to delete personal information, the right to correct inaccurate information, the right to opt out of the sale or sharing of personal information, and the right not to be discriminated against for exercising these rights.
The firm does not sell personal information and does not share it for cross-context behavioral advertising. To exercise a California right, a resident may contact the firm using the details below. An authorized agent may submit a request on behalf of a resident where the agent provides proof of authorization, and the firm may still require verification of identity from the resident.
15. Privacy for Children
The website and the professional services of the firm are intended for adults and business organizations. The firm does not knowingly collect personal information from children under the age of thirteen, and it does not direct its services to children. If the firm becomes aware that it has collected information from a child under the applicable age without appropriate consent, it deletes that information promptly.
A parent or guardian who believes that a child has provided personal information to the firm may contact the firm using the details in this policy so that the information can be reviewed and removed.
16. Do Not Track Signals
Some browsers offer a do not track setting that sends a signal to websites. Because there is no common industry standard for interpreting such signals, the website does not currently respond to them. The firm limits tracking on its own initiative by avoiding advertising and cross-site tracking technologies, so the practical effect of this limitation is small.
The firm continues to monitor developments in this area and may update its approach if a widely accepted standard emerges.
17. Third Party Links
The website may contain links to websites operated by other parties. The firm provides those links for convenience and does not control the content or the privacy practices of the destinations. A link does not imply endorsement, and the firm is not responsible for the information practices of any third party site.
Visitors who follow a link should review the privacy notice of the destination before providing personal information. Any information provided to a third party is governed by that party policy rather than by this one.
18. Changes to This Policy
The firm may update this policy from time to time to reflect changes in practice, technology, or the law. When a material change is made, the firm revises the effective date at the top of the page and, where appropriate, provides additional notice. Continued use of the website after an update indicates acceptance of the revised policy.
Readers are encouraged to review this page periodically so that they remain informed about how the firm protects personal information.
Contact data in this policy is accurate as of the effective date. If the firm relocates or changes its contact channels, the updated details appear in this section and on the contact page of the website.
Questions about this policy, about the information practices of the firm, or about a specific request may be directed to CAHM HOLDINGS, LLC at the address below.
19. How to Contact Us
CAHM HOLDINGS, LLC
23130 N 40TH Pl, Phoenix, 85050-8745, United States (US)
Email: contact@cahmholdings.autos
Phone: +18609684279
Correspondence about this policy should include enough detail for the firm to identify the matter and to respond effectively. The firm welcomes questions and will work to resolve concerns promptly and fairly.
The firm thanks readers for taking the time to understand how their information is handled. Protecting the trust placed in the firm is part of the same long-horizon discipline that governs every holding it stewards.