baya_logo_white
×
Generic selectors
Exact matches only
Search in title
Search in content
Post Type Selectors
post
page
Contact Us
baya_logo_white
×
Generic selectors
Exact matches only
Search in title
Search in content
Post Type Selectors
post
page
×
Generic selectors
Exact matches only
Search in title
Search in content
Post Type Selectors
post
page

Privacy Policy

Comprehensive Privacy Policy

Effective Date: February 24, 2025
Last Updated: April 16, 2026

Our Commitment to Your Privacy

Baya Systems, Inc. (“we,” “us,” or “our”) is committed to transparency about how we collect, use, and protect your information. This Privacy Policy applies to our website at www.bayasystems.com (the “Site”) and describes our data practices in compliance with the California Invasion of Privacy Act (CIPA, Cal. Penal Code §§ 630–638.55), the California Privacy Rights Act (CPRA/CCPA, Cal. Civ. Code §§ 1798.100–1798.199.100), and other applicable privacy laws. 

If you do not agree with the terms of this Privacy Policy, please do not access the Site. 

Consent-First Tracking Model (CIPA Compliance)

We are committed to obtaining your affirmative consent before activating any non-essential tracking technology on our Site.

How Our Cookie Consent Banner Works

When you first visit our Site, a cookie consent banner is displayed. This banner: 

  • Blocks all non-essential third-party scripts and cookies from loading until you provide affirmative, express consent by clicking “Accept” or selecting specific categories. 
  • Allows you to accept or decline tracking by category (Strictly Necessary, Analytics, Marketing/Advertising). 
  • Provides a “Manage Preferences” option so you can change your consent choices at any time. 
  • Records your consent choice with a timestamp for our compliance records. 

Until you opt in, no third-party tracking scripts, pixels, tags, SDKs, or similar technologies (“Trackers”) will execute in your browser. 

No Unauthorized Pen Registers or Trap-and-Trace Devices

We do not install or use any “pen register” or “trap-and-trace device” (as defined by Cal. Penal Code § 638.50(b) and (d)) to record your dialing, routing, addressing, or signaling information for third-party tracking purposes without your prior consent or a court order. Specifically: 

  • Your IP address is used by our server solely to establish the network connection necessary to deliver the requested web page. This is a technical necessity for the internet to function, not a tracking activity. 
  • We do not permit third parties to independently “wiretap” or intercept communications between you and our Site (Cal. Penal Code § 631(a)). 
  • Any third-party trackers that capture addressing or signaling information are activated only after you provide affirmative consent via our cookie banner. 

Information We Collect

Strictly Necessary Data (No Consent Required)

To deliver our Site to your browser, we necessarily process: 

  • IP Address: Used to route the HTTP response to your device. This addressing information is processed as a technical necessity and is not stored for profiling purposes. 
  • Device type and browser: Used to render the Site correctly. 
  • Essential cookies: Session management and security cookies required for the Site to function. 

Analytical Data (Requires Your Opt-In Consent)

If you consent via our cookie banner, we use the following analytics tools:
Tracker Provider / Domain Data Collected Purpose
Google Analytics 4
google-analytics.com, googletagmanager.com
IP address (anonymized), pages viewed, session duration, device/browser info, referral source
Website traffic analysis and performance improvement
Google Tag Manager
googletagmanager.com
No direct data collection; manages deployment of tags
Centralized management of analytics and marketing tools
YouTube (Embedded Videos)
youtube.com, google.com
IP address, device/browser info, video interactions
Video playback and usage tracking
Vimeo (Embedded Videos)
vimeo.com
Unique ID, usage data, preferences
Video analytics and user experience optimization
Google reCAPTCHA
google.com, gstatic.com
IP address, device/browser info
Spam protection and security

Communication Content

If you use our contact forms, search functionality, or other interactive features, you are communicating directly with Baya Systems. The content of these communications (text you type, files you upload) is collected by us for the purpose of responding to your inquiry. We do not permit third parties to intercept, read, or copy the contents of these communications for their own independent use. 

Personal Data You Provide Voluntarily

When you contact us, subscribe to our newsletter, or apply for a position, you may provide: your name, email address, phone number, company name, job title, and any other information you choose to include.

Cookie Inventory

The following table lists the specific cookies used on our Site. Cookies marked as “Strictly Necessary” are set without consent because they are required for the Site to function. All other cookies require your opt-in consent.
Types of cookies we use

Necessary

Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.
Cookie Duration Description
__cf_bm
1 hour
This cookie, set by Cloudflare, is used to support Cloudflare Bot Management.
_cfuvid
session
Cloudflare sets this cookie to track users across sessions to optimize user experience by maintaining session consistency and providing personalized services
elementor
Never Expires
The website’s WordPress theme uses this cookie. It allows the website owner to implement or change the website’s content in real-time.
cookieyes-consent
7 days
CookieYes sets this cookie to remember users’ consent preferences so that their preferences are respected on subsequent visits to this site. It does not collect or store any personal information about the site visitors.
VISITOR_PRIVACY_METADATA
6 months
YouTube sets this cookie to store the user’s cookie consent state for the current domain.
wpo-minify
1 year
Internal site optimization and performance scripts.
jquery.min.js
1 year
Core website functionality for navigation and menus.
wp_consent_preferences
1 month
WP Consent API sets this cookie to save users’ consent choices for different types of cookies on the website. This ensures a tailored browsing experience by applying users preferences consistently across the visits.
wp_consent_statistics
1 month
WP Consent API sets this cookie to collect anonymous data on website usage and help to analyze and enhance the sites’ performance.
wp_consent_statistics-anonymous
1 month
WP Consent API sets this cookie to understand how the website is used, which enables enhanced user content and services and respects privacy.
wp_consent_functional
1 month
WP Consent API sets this cookie to remember user preferences for essential website functionalities, ensuring a seamless and personalized experience.
wp_consent_marketing
1 month
WP Consent API sets this cookie to record user consent choices for marketing cookies. This ensures that users only receive advertisements tailored to their interests.

Functional

Functional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features.
Cookie Duration Description
rc::a
Never Expires
This cookie is set by the Google recaptcha service to identify bots to protect the website against malicious spam attacks.
rc::c
session
This cookie is set by the Google recaptcha service to identify bots to protect the website against malicious spam attacks.
player
1 year
Vimeo uses this cookie to save the user’s preferences when playing embedded videos from Vimeo.
VISITOR_INFO1_LIVE
6 months
A cookie set by YouTube to measure bandwidth that determines whether the user gets the new or old player interface.

Analytics

Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.
Cookie Duration Description
_ga_*
1 year 1 month 4 days
Google Analytics sets this cookie to store and count page views.
_ga
1 year 1 month 4 days
Google Analytics sets this cookie to calculate visitor, session and campaign data and track site usage for the site’s analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognise unique visitors.
vuid
1 year 1 month 4 days
Vimeo installs this cookie to collect tracking information by setting a unique ID to embed videos on the website.
YSC
session
YSC cookie is set by Youtube and is used to track the views of embedded videos on Youtube pages.
The tools listed above reflect those currently implemented on our Site. We periodically review and update this section.

Performance

Performance cookies are used to understand and analyse the key performance indexes of the website which helps in delivering a better user experience for the visitors.
Cookie Duration Description
sync_active
Never Expires
This cookie is set by Vimeo and contains data on the visitor’s video-content preferences, so that the website remembers parameters such as preferred volume or video quality.

Advertisement

Advertisement cookies are used to provide visitors with customised advertisements based on the pages you visited previously and to analyse the effectiveness of the ad campaigns. 

Cookie Duration Description
__Secure-ROLLOUT_TOKEN
6 months
YouTube sets this cookie to manage feature rollout and experimentation. It helps Google control which new features or interface changes are shown to users as part of testing and staged rollouts, ensuring consistent experience for a given user during an experiment.
__Secure-YEC
past
YouTube sets this cookie to stores the user’s video player preferences using embedded YouTube video
__Secure-BUCKET
6 months
Used by YouTube to manage video delivery and optimize performance; may also support tracking for advertising purposes.

Your California Privacy Rights (CPRA/CCPA)

If you are a California resident, you have the following rights under the California Privacy Rights Act:

Right to Know

You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which that information was collected, the business purpose for collecting it, and the categories of third parties with whom we share it.

Right to Delete

You may request that we delete any personal information we have collected about you, subject to certain exceptions provided by law.

Right to Correct

You may request that we correct inaccurate personal information that we maintain about you.

Right to Opt-Out of Sale/Sharing

You have the right to opt out of the “sale” or “sharing” of your personal information, as those terms are defined under the CCPA/CPRA. You can exercise this right by: 

  • Clicking the “Do Not Sell or Share My Personal Information” link in our website footer. 
  • Adjusting your cookie consent preferences via our cookie banner. 
  • Sending a request to privacy@bayasystems.com. 

Global Privacy Control (GPC)

Our Site is configured to detect and honor the Global Privacy Control (GPC) signal sent by your browser. If your browser transmits a GPC opt-out signal, we will treat it as a valid request to opt out of the sale and sharing of your personal information, and non-essential Trackers will not be activated for your session.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. You will not receive different pricing, quality of service, or access to our Site based on your privacy choices.

How We Share Your Information

We do not sell your personal information to data brokers or other third parties for their own commercial purposes. 

We may share your information in the following limited circumstances: 

  • Service Providers: We share data with third-party service providers (such as Google for analytics, and our hosting provider) who are contractually bound to use that data only for Baya Systems’ business purposes and are prohibited from using it for their own independent purposes. 
  • Legal Compliance: We may disclose your information if required by law, regulation, or legal process. 
  • Protection of Rights: We may share your information to enforce our policies, protect our or others’ rights, property, or safety. 
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. 

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law.

Website analytics data
Raw analytics data is retained for up to 14 months. Aggregated and anonymized data may be retained for longer periods.

Contact form submissions
Contact form submissions are retained for as long as necessary to fulfill the purpose for which they were collected, including responding to inquiries and maintaining business records, unless a longer retention period is required or permitted by law.

Newsletter subscriptions
Retained until you unsubscribe. After unsubscribing, we may retain limited information to ensure compliance with your request.

Job applications
Retained for up to 12 months after the position is filled, unless you consent to a longer retention period.

Server logs (including IP addresses)
Server logs (including IP addresses) are retained for up to 30 days on our origin systems. Certain security and network logs processed by our infrastructure provider, Cloudflare, may be retained for longer periods (up to 18 months) in accordance with their data retention policies.

Security

We employ industry-standard security measures to protect the confidentiality and integrity of your information, including: 

  • SSL/TLS encryption for all data transmitted between your browser and our server, protecting the “contents of communications” as referenced under CIPA. 
  • Secure hosting infrastructure with firewall protection. 
  • Access controls limiting who within our organization can access personal data. 

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. 

Children’s Privacy

Our Site is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last Updated” date at the top of this page. Material changes will be communicated via a prominent notice on our Site. We encourage you to review this Privacy Policy periodically.

Contact Us

For any privacy-related requests, questions about this policy, or to exercise your California privacy rights:

Email: privacy@bayasystems.com

Mailing Address: Baya Systems, Inc., Attn: Privacy, Santa Clara, CA 95054, USA

For general inquiries: contact@bayasystems.com

You may also submit a verifiable consumer request through our website contact form at bayasystems.com/contact/.