Office of the Administrator
Privacy Notice
Plain language, no Bureau voice
This site does not collect your information, because it has no way to.
What the site is, technically
Every page here is a static file. There is no application server, no database, and no form endpoint. The interactive products, the nonconformity report, the compliance self-assessment, the record verification search, and receipt lookup, all execute in your browser and nowhere else.
That means:
- Nothing you type into any field on this site is transmitted anywhere.
- Nothing you type is stored on a server, because there is no server to store it on.
- No submission is created, queued, reviewed, published, or shared.
- There is no account, no login, no email capture, and no newsletter.
- There are no payment fields anywhere on this site and never will be.
Receipts and certificates
The report and self-assessment products generate a receipt or certificate. The result is encoded into the address of the page itself, which is how the same link reproduces the same document later, and why the document can be printed or shared.
This is worth understanding clearly: if you share a receipt link, whatever you entered that is reflected in that receipt travels in the link. Do not put anything into these products that you would not want in a shared address bar. There is no need to enter anything personal, and the products are written not to ask.
Local storage
The site stores exactly one thing in your browser, under the key haeb-theme. It
records whether you chose the light or dark presentation, so the choice persists
when you move between pages. It contains nothing else. Clearing your browser data
removes it and nothing is lost but the preference.
Analytics
There is no analytics script, no tag manager, no session recording, no heatmap, and no advertising pixel on this site. No third party script of any kind loads on these pages. Fonts, styles, images, and the search index are all served from this domain.
Hosting logs
The site is served by Cloudflare Pages. As with any web host, requests reach their edge network and are subject to Cloudflare’s own logging and security processing, which is outside our control and covered by their policies rather than this one. We do not have access to per-visitor data and do not request it.
Search
Search runs against a static index built at publish time and downloaded to your browser. Your queries are executed locally. They are not sent to us or to a search provider.
Children
Nothing here is directed at children, and nothing here collects information from anyone of any age.
Contact
See correction requests for how to raise a privacy concern. If you believe this notice is inaccurate about how the site behaves, that is a defect and we want to hear about it.