Website Privacy Statement for pitechsol.com

Effective Date: January 1, 2025
Last Updated: October 15, 2025

Introduction

Welcome to pitechsol.com. This Website Privacy Statement (“Statement”) is provided by (“pitechsol.com,” “we,” “us,” or “our”). We are committed to protecting the privacy and security of your personal information. This Statement explains how we collect, use, process, and disclose your personal information when you visit our website, www.pitechsol.com (the “Site”), or otherwise interact with us through our marketing and business development activities.
We are the Data Controller for the personal information described in this Statement.

Scope of This Policy

This Statement applies to personal information we collect through our Site, email communications, and other marketing initiatives where we are the Data Controller.
It is important to note that this Statement does not apply to the data we process on behalf of our customers in the course of providing our technology services (such as our SaaS products, managed IT services, or custom software development). In those situations, our customer is the Data Controller, and we act as a Data Processor. Our processing of such data is governed by the specific agreements we have in place with our customers. If you are an end-user of one of our customer’s services, please direct your privacy inquiries to that customer.

Information We Collect and How We Collect It

We collect personal information in the following ways:

How and Why We Use Your Personal Information (Purpose of Processing)

We use the personal information we collect for a variety of business purposes, including:
To Provide and Manage Our Services: To respond to your inquiries, provide you with information you have requested about our services, and manage our relationship with you.
For Marketing and Communications: To send you marketing communications, newsletters, and promotional materials that we believe may be of interest to you, where permitted by law. You can opt-out of receiving these communications at any time.
To Improve Our Site and Services: To understand how our Site is used, to analyze user engagement, and to improve the functionality, user experience, and effectiveness of our Site and marketing efforts.
For Security and Fraud Prevention: To monitor and protect the security of our Site, systems, and information, and to prevent and detect fraudulent or malicious activity.
To Comply with Legal Obligations: To comply with applicable laws, regulations, court orders, or other legal processes.
Our Legal Basis for Processing (GDPR Requirement)
If you are a resident of the European Economic Area (EEA) or the United Kingdom (UK), our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it. We will normally collect personal information from you only where:
• We have your consent to do so (e.g., for sending marketing communications).
• We need the personal information to perform a contract with you (e.g., to provide services you have requested).
• The processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms (e.g., for our business operations, security, and in responding to your inquiries).
• We have a legal obligation to collect personal information from you.

Table 1: Summary of Data Processing Activities

To ensure transparency, the following table summarizes our main data processing activities.

Styled Table
Category of Personal Data Purpose of Processing Legal Basis (under GDPR) Data Retention Period
Identity & Contact Data (e.g., Name, Email, Phone, Company) To respond to inquiries; To manage customer accounts; To fulfill service requests. Legitimate Interest; Contractual Necessity. For prospective clients: 24 months after last contact. For active clients: Duration of the contract plus a period of 36 months for legal and administrative purposes.
Technical Data (e.g., IP Address, Browser Information, Device ID) To secure and optimize the website; For performance analytics; To prevent fraud. Legitimate Interest. 12 months from the date of collection.
Marketing & Communications Data (e.g., Email address for newsletter, communication preferences) To send marketing updates, newsletters, and promotional offers. Consent. Until you withdraw your consent.
User-Provided Content (e.g., Information submitted in contact form message fields) To understand and respond to your specific inquiry or request. Legitimate Interest. 24 months after the inquiry is resolved, unless required for an ongoing contractual relationship.
Cookies and Other Tracking Technologies

Our Site uses cookies, which are small text files placed on your device, to help us operate the Site, analyze its performance, and personalize your experience. We use different categories of cookies:
Essential Cookies: These are necessary for the Site to function and cannot be switched off.
Analytics and Performance Cookies: These allow us to count visits and traffic sources so we can measure and improve the performance of our Site.
Advertising Cookies: These may be set through our site by our advertising partners to build a profile of your interests and show you relevant adverts on other sites.
We will obtain your prior consent before placing any non-essential cookies on your device. You can manage your cookie preferences at any time through our cookie consent banner. For more detailed information about the cookies we use, please see our Cookie Declaration, which will be made available through our consent management platform. We recommend that a full cookie scan be performed on the live website using a commercial tool to generate and maintain this declaration.

Data Sharing and Disclosure

We do not sell your personal information. We may disclose your personal information to the following categories of recipients:
Service Providers and Vendors: To third-party service providers who perform services on our behalf, such as cloud hosting providers (e.g., AWS, Azure), CRM platforms (e.g., Salesforce), marketing automation tools, and analytics providers (e.g., Google Analytics). We have contracts in place with these providers to ensure they protect your personal information.
Legal and Regulatory Authorities: To any competent law enforcement body, regulatory, government agency, court, or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person.
Business Transfers: In connection with any proposed purchase, merger, or acquisition of any part of our business, provided that we inform the buyer it must use your personal information only for the purposes disclosed in this Statement.

International Data Transfers

Your personal information may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different from the laws of your country.
Specifically, our servers may be located in the United States, and our third-party service providers and partners may operate around the world. This means that when we collect your personal information, we may process it in any of these countries. However, we have taken appropriate safeguards to require that your personal information will remain protected in accordance with this Statement. For transfers of personal information from the EEA or UK, these safeguards include implementing the European Commission’s Standard Contractual Clauses.

Data Security and Retention

We have implemented appropriate technical and organizational security measures designed to protect the personal information we collect and process. These measures include encryption of data in transit and at rest, access controls to limit access to personal information to authorized personnel, and regular security assessments.
We retain personal information we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax, or accounting requirements). Our specific retention periods are detailed in Table 1 above. When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it.

Your Data Protection Rights

You have certain rights regarding your personal information, subject to local data protection laws.

Rights for All Users:

Right to Access: You have the right to request a copy of the personal information we hold about you.
Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal information.
Right to Erasure (Deletion): You have the right to request that we delete your personal information, under certain conditions.

Specific Rights under GDPR (for EEA/UK Residents):

Right to Restrict Processing: You can ask us to suspend the processing of your personal information in certain scenarios.
Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format.
Right to Object: You have the right to object to our processing of your personal information where we are relying on a legitimate interest. You have an absolute right to object to processing for direct marketing purposes.
Rights Related to Automated Decision-making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

Specific Rights under CCPA/CPRA (for California Residents):

Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for collecting it, and the categories of third parties with whom we have shared it.
Right to Delete: You have the right to request the deletion of your personal information that we have collected from you, subject to certain exceptions.
Right to Correct: You have the right to request the correction of inaccurate personal information.
Right to Opt-Out of Sale/Sharing: You have the right to direct us not to “sell” or “share” your personal information for cross-context behavioral advertising. We provide a “Do Not Sell or Share My Personal Information” link on our website homepage for this purpose.
Right to Limit Use of Sensitive Personal Information: You have the right to limit our use and disclosure of sensitive personal information to that which is necessary to perform the services or provide the goods reasonably expected.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

Table 2: How to Exercise Your Rights

To make exercising your rights as easy as possible, please use the following guide.

Styled Table
Your Right What It Means How to Exercise It
Access / Right to Know You can request a copy of the personal information we hold about you and details about our processing. Email our Data Privacy Officer at privacy@pitechsol.com with the subject "Data Access Request." We will need to verify your identity before processing the request.
Rectification / Correction You can ask us to correct information you believe is inaccurate. Email our Data Privacy Officer at privacy@pitechsol.com with the subject "Data Correction Request," specifying the information to be corrected.
Erasure / Deletion You can ask us to delete your personal information, subject to certain legal exceptions. Email our Data Privacy Officer at privacy@pitechsol.com with the subject "Data Deletion Request." We will require identity verification.
Opt-Out of Sale/Sharing (CCPA) You can direct us not to sell or share your personal information with third parties for cross-context behavioral advertising. Click the "Do Not Sell or Share My Personal Information" link in our website footer or contact us via the methods listed here.
Object to Processing (GDPR) You can object to our processing of your data for direct marketing or on other grounds related to your particular situation. Follow the "unsubscribe" link in any marketing email or email us at privacy@pitechsol.com.
Children’s Privacy

Our Site and services are not directed to children under the age of 16, and we do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected personal information from a child under 16, we will take steps to delete such information promptly.

Changes to This Privacy Statement

We may update this Privacy Statement from time to time in response to changing legal, technical, or business developments. When we update our Statement, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material changes if and where this is required by applicable data protection laws. The CCPA requires that we review and update this policy at least once every 12 months.

How to Contact Us

If you have any questions, concerns, or requests regarding this Privacy Statement or our data protection practices, please contact us at:
Data Privacy Officer
Email: privacy@pitechsol.com