DATA PRIVACY
POLICY

1. Introduction

Muñoz Engineering, DPC is a professional engineering firm headquartered in New York City. We respect your privacy and are committed to protecting the limited personal information we handle. This Privacy Policy explains what information we collect, how we use it, and the choices available to you. It applies to our website and to information we handle in the course of providing engineering, construction management, and surveying services.

We do not sell, rent, or trade personal information. We do not engage in behavioral advertising or share information with third parties for their own marketing purposes.

2. Information We Collect

We collect only the information needed to communicate with you, evaluate job applicants, and perform our professional services:

• Contact information you provide directly - such as your name, email address, phone number, company, and the contents of any message when you email us or reach out through our website.
• Recruiting information - Our Careers page directs applicants to third-party job platforms (such as Indeed, LinkedIn and JazzHR), where applications are submitted and processed under those platforms’ own privacy policies. If you send us a resume or application materials directly by email, we receive and store that information as described in this policy.
• Project-related information - data provided by or on behalf of our clients as necessary to perform engineering, surveying, and construction management work. This may include project documentation, site information, and business contact details for client personnel.
• Aerial and geospatial data (drone/UAS operations) - As part of surveying and engineering work, we may operate unmanned aircraft systems (drones) to capture photographs, video, and spatial data — including LiDAR, photogrammetry, and precise location coordinates — of project sites and surrounding areas. This imagery may incidentally include people, vehicles, buildings, and other property within the survey area. See Section 3.
• Website technical data - our website is hosted by a third-party website hosting provider, which may automatically collect standard technical information such as IP address, browser type, and pages visited, and may use cookies for basic site functionality and analytics. See Section 7.

3. Drone / Unmanned Aircraft System (UAS) Data

In the course of providing surveying and engineering services, we operate drones (UAS) to collect aerial photography, video, and spatial data of project sites. We collect this data solely for legitimate professional purposes — including land surveying, site assessment, mapping, as-built documentation, and construction monitoring — and only in connection with an active project.

• What we collect. Still imagery, video, and geospatial data (such as LiDAR point clouds, photogrammetric models, and geolocation coordinates) of the project site and its immediate surroundings.
• Purpose and minimization. Every flight is approved in advance against a documented project purpose. We limit the location, flight time, sensor mode, field of view, zoom, resolution, and duration of capture to what is reasonably necessary for that purpose. We do not use drones for surveillance, monitoring of individuals, law enforcement, or any purpose unrelated to the project. If the view we need cannot be obtained without disproportionate incidental capture, our pilot pauses the operation and we revise the plan rather than expanding the flight informally.
• What we do not do. We do not use facial recognition, biometric analysis, license-plate recognition, or automated individual tracking on drone-collected data. Audio recording is disabled by default and is enabled only where a documented project purpose requires it and applicable legal, notice, and consent requirements have been confirmed. We do not livestream publicly, broadcast on social media, capture for marketing, or permit personal use of this data.
• Incidental capture and recorded persons. Aerial data may incidentally include images of individuals, vehicles, or private property near the survey area. Incidental capture does not authorize use of a person’s identity, and we do not attempt to identify individuals. Before drone imagery or video is released outside the authorized project team, a designated reviewer identifies any frames containing a reasonably identifiable face, readable license plate, close residential detail, or other personal identifier, and determines whether that identifier is necessary to the engineering, safety, or agency purpose. Where it is not, we crop, mask, blur, pixelize, mute, remove, or withhold the relevant portion before external distribution, applied strongly enough that ordinary viewing does not readily restore the identifier. Unredacted originals remain in restricted storage. Each review is documented.
• Storage and access. Drone-collected data is transferred directly to a firm-managed, access-controlled system and is restricted to the authorized project team. It is not copied to personal email, consumer file-sharing services, personal devices, or unapproved cloud services.
• Use and sharing. Drone-collected data is treated as project work product. It is shared only with the client and project stakeholders as necessary to perform the work, and with the infrastructure providers we use to store and transmit it (see Section 5). We provide only the minimum data and the least-identifying version reasonably sufficient for the recipient’s role, and we require service providers and subconsultants with access to protect its confidentiality, use it only for the engagement, report incidents promptly, and return or delete it when the work ends. We do not sell, license, monetize, publicly post, or use this data for advertising, and we do not use it to train artificial intelligence models.
• Retention and deletion. For each engagement we set a defined retention and deletion schedule in advance, recording how long raw aerial data is kept, when it is deleted, and who is responsible. Raw aerial data and unredacted working copies are retained only for as long as needed to complete the project, obtain acceptance of the deliverable, and satisfy our professional, contractual, and legal record-keeping obligations, and are then deleted using a method that makes them impracticable to recover through ordinary means. Deliverables and project records are retained for the period required by the governing contract and by professional record-keeping requirements. A legal hold, claim, audit, public-record obligation, or written client or agency direction may extend these periods. Copies held within routine backup media are protected against alteration, are not restored to active use, and age out in the ordinary backup cycle.
• Notice and transparency. Where a drone operation in New York City will capture or transmit still images, video, or audio under an NYPD permit, we notify each affected community board at least 48 hours in advance and post notices within 100 feet of the permitted take-off and landing site. Those notices identify the site, the date, time, and expected duration of the operation, and the name and telephone number of a firm representative you may contact with questions or concerns.
• Compliance. All drone operations are conducted in compliance with applicable Federal Aviation Administration (FAA) regulations and any applicable state and local requirements, including New York City permitting requirements.
• If you believe you were recorded. If you believe you appear in imagery captured during one of our aerial operations, contact us using the information in Section 13. We will verify your identity and review the material, and we will explain our response. We may be limited in what we can disclose or delete where contract, legal-hold, evidentiary, or public-agency obligations apply, and we will tell you where that is the case.

4. How We Use Information

We use information to respond to inquiries, deliver and manage our professional services, evaluate employment applications, meet legal and regulatory obligations, and maintain the security and operation of our systems.

5. How We Share Information

We do not sell or share personal information for marketing purposes. We disclose information only in these limited circumstances:

• Service providers and infrastructure. We use trusted third-party tools to store, transmit, and process information as part of normal operations — for example, Microsoft 365 (email, file storage, collaboration) and our website hosting provider. These providers process information on our behalf and are not permitted to use it for their own purposes.
• Clients and project stakeholders. In the course of a project, we may share work product and related information with the client and other parties to the project (such as contractors, architects, or government agencies) as reasonably necessary to perform the work.
• Legal requirements. We may disclose information when required by law, regulation, subpoena, or other legal process, or to protect our rights, safety, or property.
• Business transfers. If our firm is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.

6. Third-Party Links

Our website contains links to third-party sites and services, including job platforms such as JazzHR and Google Maps. We are not responsible for the privacy practices or content of those sites. When you follow a link and provide information to a third party, that information is governed by the third party’s privacy policy, not ours. We encourage you to review the privacy policies of any site you visit.

7. Cookies and Analytics

Our website uses cookies and similar technologies, primarily through our hosting platform, for site functionality and to understand how visitors use the site. You can control cookies through your browser settings; disabling them may affect site functionality.

8. Data Retention

We retain personal and project information for as long as needed to provide our services, maintain professional and business records, and comply with legal, contractual, and regulatory obligations (including professional-licensure record-keeping requirements). We dispose of information securely when it is no longer needed. Retention and deletion of drone-collected aerial data is addressed in Section 3.

9. Data Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect information against unauthorized access, loss, or misuse. These include multi-factor authentication on firm accounts, access limited to personnel whose role requires it, continuous monitoring of our systems, encryption of data in transit and of portable devices, and secure disposal of media. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

10. Your Rights and Choices

You may have rights to access, correct, or request deletion of personal information we hold about you, depending on your location and applicable law. To make a request, contact us using the information in Section 13. We will verify your identity before responding, and we will respond consistent with applicable law. Requests relating to drone imagery are handled as described in Section 3.

11. Children’s Privacy

Our website and services are directed to businesses and professionals, not to children. We do not knowingly collect personal information from children under 13.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Effective Date" above reflects the most recent revision. Material changes will be posted on this page.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, including questions or concerns about a drone operation, contact us at:

Muñoz Engineering, DPC
350 Fifth Ave, Suite 7600,
New York, NY 10118

Email: munozinfo@munozeng.com
Phone: (212) 967-6588