Endeion (“we,” “us,” or “our”) is a global Building Information Modeling (BIM) and engineering services company headquartered at Reston, USA with offices in Ontario, Canada and Kerala, India.
This Privacy Policy explains how we collect, use, store, share, and protect information obtained through your use of endeion.com and through any engagement with our BIM outsourcing, consulting, mechanical, and civil engineering services. By using our website or engaging our services, you acknowledge that you have read and understood this policy.
Endeion acts as the Data Controller for personal data collected through this website and enquiry forms. For project-specific data (such as BIM models, drawings, and CAD files) submitted during an active engagement, Endeion acts as a Data Processor on your behalf. In both cases, you retain full ownership of your data.
1. Data We Collect
We collect only what is necessary for the purposes described in this policy.
- Contact and identity data: Name, email address, phone number, job title, company name, and country, collected when you submit a contact form, request a quote, or email us directly.
- Project and service data: BIM models, CAD files, point cloud data, Revit files, technical drawings, MEP documentation, and project specifications submitted as part of a service engagement. This data is used exclusively to deliver your services and is never repurposed for any other use.
- Usage and technical data: IP address, browser type, device type, pages visited, time spent on each page, and referral URLs, collected automatically when you visit our website.
- Communication data: Records of email correspondence, consultation notes, and written communication exchanged during project enquiry, onboarding, or support, kept to ensure service continuity.
- Payment and billing data: Invoice address and billing details for transactional purposes. Endeion does not store credit card or bank account details. All payment processing is handled exclusively by PCI-DSS compliant third-party processors.
- Location data: Approximate geographic location inferred from IP address, used to serve relevant regional content and improve site performance.
2. How We Use Your Data
We use collected data only for the purposes listed below. We do not use your data for automated decision-making or profiling.
- Delivering BIM and engineering services: Processing project files to produce BIM models, shop drawings, Scan-to-BIM outputs, clash detection reports, MEP coordination deliverables, and all other agreed outputs.
- Client communication and support: Responding to enquiries, sending project updates, sharing deliverables, and providing ongoing support throughout your engagement.
- Quote generation and project onboarding: Assessing project scope and preparing tailored proposals for prospective clients.
- Website improvement: Analysing how visitors navigate endeion.com to improve page structure, content, and performance, using aggregated and anonymised data only.
- Marketing communications: Sending newsletters, service updates, case studies, and industry insights, with your consent only. You may unsubscribe at any time using the link in any email we send, or by contacting us directly.
- Legal and contractual compliance: Meeting obligations arising from contracts, applicable law, and regulatory requirements across all jurisdictions we operate in.
- Security and fraud prevention: Monitoring for unusual activity and protecting the integrity of our systems and the project data our clients entrust to us.
3. Cookies and Tracking Technologies
Endeion uses cookies and similar technologies on endeion.com to ensure the website functions correctly and to understand how it is used. When you first visit our site, you will be presented with a cookie consent notice where you may accept, decline, or customise your preferences.
- Essential cookies: Required for basic website functionality including page navigation, form submissions, and session management. These cannot be disabled as the site cannot function without them.
- Analytics cookies: We use Google Analytics to measure site traffic, visitor behaviour, and content performance. This data is aggregated and anonymised. You may opt out at any time using the Google Analytics Opt-out Browser Add-on available at tools.google.com/dlpage/gaoptout.
- Marketing and remarketing cookies: With your consent, used to display relevant Endeion content or advertisements on third-party platforms to returning visitors.
- Preference cookies: Used to remember your language settings, regional preferences, and choices made during a session.
You may manage or delete cookies at any time through your browser settings. Disabling non-essential cookies may affect certain website features. Where your browser sends a Do Not Track (DNT) signal, we will not deploy analytics or marketing cookies for that session.
4. Data Sharing and Third Parties
Endeion does not sell, rent, or trade your personal data to any third party for commercial purposes. We share data only in the following limited circumstances.
- Delivery team access: Endeion’s engineers, BIM specialists, and project coordinators across our US, Canada, and India offices may access project and communication data as required to deliver your services. All team members are bound by internal data handling policies and signed confidentiality obligations.
- Technology service providers: We work with third-party platforms in the following categories: cloud storage and file management, project collaboration tools, website analytics (Google Analytics), and payment processing. Each provider is contractually bound to handle data securely and solely for the purpose we specify. They are not permitted to use your data for their own purposes.
- Legal requirements: We may disclose personal data to law enforcement, regulatory authorities, or courts when required by applicable law, or when necessary to protect the rights, property, or safety of Endeion, our clients, or others.
- Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity. We will notify affected users in advance where reasonably practicable.
- With your consent: We will share your data in any other circumstances only with your explicit prior consent.
Client project files, BIM models, CAD drawings, and technical deliverables are never shared with any third party outside of your engagement without your explicit written approval.
5. International Data Transfers
Endeion operates across three countries: the United States, Canada, and India. Data submitted through our website or as part of a service engagement may be stored or processed in any of these locations, depending on which delivery team members are assigned to your project.
We apply the following jurisdiction-specific safeguards:
- EU and EEA residents (GDPR): Any transfer of personal data outside the European Economic Area is conducted using Standard Contractual Clauses (SCCs) or other transfer mechanisms approved under the General Data Protection Regulation.
- Canadian residents (PIPEDA): Data handling for Canadian users and clients is conducted in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA).
- US residents (CCPA and federal law): Data practices comply with applicable US federal and state laws, including the California Consumer Privacy Act (CCPA) for California residents.
Enterprise and government clients with specific data residency requirements are encouraged to raise these at the start of an engagement. Endeion will work to accommodate such requirements within the terms of the project agreement.
6. Your Rights
Depending on your location, you have certain rights regarding your personal data. To exercise any of the rights below, email us at admin@endeion.com. We will respond within 30 days at no charge.
- Right to access: Request a copy of the personal data Endeion holds about you, including how it is used and with whom it has been shared.
- Right to rectification: If any personal data we hold is inaccurate or incomplete, you may request that it be corrected.
- Right to erasure: Request deletion of your personal data. We will action this unless we are legally required to retain it or it is necessary to fulfil an active contractual obligation.
- Right to restriction: Ask us to pause processing of your data in specific circumstances, such as while a correction request is being assessed.
- Right to data portability: Request your personal data in a structured, commonly used, machine-readable format so you may transfer it to another provider.
- Right to object: Object to the processing of your data for direct marketing at any time. We will stop immediately upon receiving your request.
- Right to withdraw consent: Where we process your data based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
- California residents (CCPA): You have the right to know what personal data is collected about you, request its deletion, and opt out of any transfers that qualify as a “sale” under California law. Endeion does not sell personal data for monetary consideration.
- Canadian residents (PIPEDA): You have the right to access and correct your personal information and to challenge our compliance with applicable privacy obligations. Complaints may be directed to the Office of the Privacy Commissioner of Canada.
- EU and EEA residents (GDPR): You have the right to lodge a complaint with your local Data Protection Authority if you believe your data has been handled unlawfully.
7. Data Security
Protecting the data you share with us is a responsibility we take seriously. We apply the following safeguards across all offices and operations:
- Encrypted data transmission using HTTPS/TLS across all website interactions and file transfers
- Secure, access-controlled cloud storage for all project files and client data
- Role-based access controls ensuring only team members assigned to your project can access your data
- Regular internal security reviews and data handling audits across all offices
- Mandatory staff training on data protection obligations and confidentiality requirements
- BIM and project file handling in controlled environments with restricted, project-specific access
Data retention: Personal data is retained only for as long as necessary to fulfil the purposes described in this policy or as required by law. Project files will be returned or securely deleted upon project completion, in line with your agreed service terms.
Breach notification: In the event of a data breach affecting your personal data, Endeion will notify impacted individuals within 72 hours of becoming aware of the breach, and will inform relevant regulatory authorities within the timeframes required by applicable law.
No method of electronic transmission or storage is entirely risk-free. While we cannot guarantee absolute security, we commit to continuous improvement of our protective measures and to full transparency in the event of any incident.
8. Client Confidentiality
Endeion works closely with architects, engineers, general contractors, developers, and facility owners who share commercially sensitive and proprietary information as part of every engagement. We treat this responsibility with the utmost care.
Project data ownership: All project files, drawings, BIM models, specifications, and deliverables submitted by or produced for a client remain the client’s property. Endeion holds no ownership rights over any client-submitted or client-commissioned material.
Non-disclosure commitment: Endeion and all members of its team (across all offices in the US, Canada, and India) will not disclose, share, repurpose, or reference client project data for any purpose outside the agreed scope of services, without explicit written consent.
NDA availability: Clients who require a formal Non-Disclosure Agreement before sharing sensitive project materials may request one prior to project commencement. We are happy to sign client-provided NDAs or provide our own standard form.
Internal access controls: Project data is accessible only to team members directly assigned to that engagement. Access is not extended internally beyond what is operationally necessary and is revoked upon project completion.
No portfolio use without consent: Endeion will not use client project images, BIM models, drawings, or details in our portfolio, case studies, or marketing materials without clear written permission from the client.
9. Children’s Privacy
Endeion’s website and services are intended exclusively for business professionals and are not directed at individuals under the age of 18. We do not knowingly collect, store, or process personal data from anyone under 18.
If we become aware that personal data has been submitted by a minor, we will delete that information from our systems promptly. If you believe a minor has provided us with personal information, please contact us at admin@endeion.com and we will address it without delay.
10. Links to Third-Party Websites
Our website may contain links to external websites including industry resources, partner platforms, or tool providers. These links are provided for convenience only. Endeion has no control over and accepts no responsibility for the privacy practices or content of third-party websites. We encourage you to review the privacy policy of any external site before submitting personal information to them.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data practices. When we do, the Effective Date at the top of this page will be updated accordingly.
For material changes, we will notify active clients and email subscribers at least 14 days before the change takes effect, either by email or through a prominent notice on our website. Continued use of endeion.com or our services following a policy update constitutes acceptance of the revised terms.
We encourage you to review this page periodically.
12. Contact Us
For any questions, requests, or concerns about this Privacy Policy or how Endeion handles your data, please get in touch. All enquiries are handled promptly and at no charge.
Privacy enquiries (data access, deletion, and rights requests) admin@endeion.com
General enquiries: contact@endeion.com +1 (571) 303-9797
Registered address: Endeion 12020 Sunrise Valley Dr Reston, VA 20191 United States
Canada office: St. Catharines, Ontario, Canada
India office: Koratty, Thrissur, Kerala, India
EU and EEA residents who are unsatisfied with our response may escalate their concern to their local Data Protection Authority. Canadian residents may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.