Legal
Privacy policy
Halligan Works builds and operates the VFD Platform for volunteer fire departments. This policy covers this website and the platform we operate on behalf of the departments that subscribe to it.
Last updated
01Two different roles
For this website, Halligan Works decides what is collected and why.
For the platform, a subscribing fire department decides what is collected about its members, its donors and the residents of its district. Halligan Works stores and processes that information on the department’s instructions and does not use it for anything else. If you are a member of a department, or you donated to one, the department is who holds your record and who to ask about it.
02What this website collects
If you send a message through the contact form, we receive the name, email address, department and message you typed, so that we can reply. Nothing else on this site collects personal information.
This site sets no advertising or analytics cookies and carries no third-party trackers. The only thing it stores in your browser is your light or dark theme choice, which stays on your device and is never sent to us.
03What the platform holds
Department members: name, rank, appointed duties, contact details, and training or certification records the department chooses to track. Publishing any member’s details on a public page requires that member’s consent, recorded per person, and importing a roster never grants that consent.
Donors: whatever the department’s payment provider passes back to record the gift. Card numbers and bank details never reach Halligan Works — donations settle directly into the department’s own merchant account, and we neither hold nor route the money.
Property access records: gate locations, access instructions, hazards and water sources for properties in a department’s district. Gate codes, lock box locations and key holder numbers are encrypted under a separate key, are absent from ordinary reads, and require a PIN to reveal. Every reveal writes an audit record before it answers.
Photographs from incidents, events and training, together with a record of which officer released each one and the checklist they completed.
We deliberately do not hold medical records, social security numbers, dates of birth, or driver licence numbers.
04Who we share it with
We do not sell personal information and we do not share it for advertising.
We use service providers to run the platform: a database host, a file storage provider, an email delivery service and an application host. They process data on our instructions in order to provide those services.
Where a department belongs to a mutual aid group and uses The Box, photographs it grants into the shared pool become visible to the other departments in that group. That sharing is initiated by the department, not by us.
05How long we keep it
Contact form messages are kept while we are corresponding with you and for a reasonable period afterwards.
Platform data is kept for as long as the department subscribes. Records created on duty may be subject to public records retention requirements that apply to the department; where those apply, the department’s obligations govern.
When a subscription ends, a department can export its records. We delete or return the remaining data on request.
06Your choices
You can ask what we hold about you, ask us to correct it, or ask us to delete it. If your information is on the platform, we will refer you to the department that holds it, or act on that department’s instruction.
Write to admin@halliganworks.com.
07Security
Traffic is encrypted in transit. Credential material — gate codes, lock box locations, key holder numbers — is encrypted at rest under its own key, and access to it is granted by an appointed duty that no rank carries automatically.
One limit worth stating plainly: access records can be taken offline so they work with no signal. A copy on a phone that never rejoins the network stays encrypted and expires, but it cannot be remotely erased before then.
08Children
The platform is not intended for children, and departments are instructed not to publish identifiable minors in incident photographs.
09Changes and contact
If this policy changes materially we will update the date at the top and tell subscribing departments.
Questions: admin@halliganworks.com.
