Privacy Policy

Tecsack Software ("we", "us", or "our") operates as a global technology consulting and software engineering company. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, engage our services, or otherwise interact with us. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site and services.

We comply with applicable data protection laws including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the UK Data Protection Act 2018.

1. Information We Collect

1.1 Information You Provide Directly

We collect personal information that you voluntarily provide when you:

• Fill out our contact or enquiry form (name, email address, phone number, company name, message)
• Apply for a career opportunity (CV/resume, cover letter, employment history, references)
• Request a project proposal or product demo
• Subscribe to our newsletter or marketing communications
• Enter into a contract with us for the delivery of software or IT services
• Communicate with us via email, phone, or other channels

1.2 Information Collected Automatically

When you visit our website, we may automatically collect certain technical information, including:

• IP address and approximate geographic location
• Browser type, version, and operating system
• Pages visited, time spent on pages, and referral URLs
• Device identifiers and screen resolution
• Cookie identifiers and session data (see our Cookie Policy)

1.3 Information from Third Parties

We may receive information about you from third-party sources such as business partners, recruitment platforms, social media networks (e.g. LinkedIn), and publicly available sources, where permitted by applicable law.

2. How We Use Your Information

We use the personal information we collect for the following purposes:

• Service Delivery: To provide, manage, and improve our software development, consulting, and IT services.
• Communication: To respond to enquiries, provide project updates, and manage client relationships.
• Recruitment: To process job applications and manage the hiring process.
• Marketing: To send you relevant content, service updates, and promotional material (where you have consented or we have a legitimate interest).
• Legal and Compliance: To comply with our legal obligations, enforce our agreements, and protect our rights.
• Analytics and Improvement: To analyse website usage, improve user experience, and develop new services.
• Security: To detect, investigate, and prevent fraudulent or unauthorised activity.

3. Legal Basis for Processing (GDPR)

For individuals in the European Economic Area (EEA) and the United Kingdom, we process your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil a contract with you or to take steps at your request before entering a contract.
• Legitimate Interests: Where processing is necessary for our legitimate business interests, such as fraud prevention, improving our services, and direct marketing to existing clients.
• Consent: Where you have given us explicit consent to process your data for a specific purpose (e.g. email marketing).
• Legal Obligation: Where processing is required to comply with a legal obligation to which we are subject.

4. Sharing Your Information

We do not sell, rent, or trade your personal information. We may share it with:

• Service Providers: Trusted third-party vendors who assist us in operating our website and delivering services (e.g. cloud hosting providers, email platforms, analytics tools). These parties are contractually obligated to protect your data.
• Business Partners: Where a project requires specialist sub-contractors or technology partners, with your knowledge where relevant.
• Professional Advisors: Lawyers, accountants, auditors, and insurers, subject to confidentiality obligations.
• Regulatory and Legal Authorities: Where required by applicable law, court order, or government authority.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of our assets, your information may be transferred as part of that transaction.

5. International Data Transfers

Tecsack Software operates with global delivery centres. Your personal data may be transferred to and processed in countries outside your country of residence, including countries that may not provide the same level of data protection as your home country.

Where we transfer data internationally, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission, or other lawful transfer mechanisms. You may request details of these safeguards by contacting us.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by applicable law. Retention periods vary by data type:

• Client data: For the duration of the client relationship plus up to 7 years for legal and tax compliance purposes.
• Candidate data: Up to 12 months from the date of application unless a longer period is consented to.
• Website analytics: Up to 26 months from collection.
• Marketing consent records: Until consent is withdrawn plus a reasonable period thereafter.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data ("right to be forgotten") where applicable.
• Right to Restriction: Request that we restrict processing of your data in certain circumstances.
• Right to Data Portability: Receive your data in a structured, machine-readable format where technically feasible.
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
• Right to Non-Discrimination (CCPA): California residents will not be discriminated against for exercising their privacy rights.

To exercise any of these rights, please contact us at the address below. We will respond within 30 days. We may need to verify your identity before processing your request.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our website. Please refer to our Cookie Policy for full details on the types of cookies we use, their purposes, and how to manage your preferences.

9. Security

We implement industry-standard technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include encryption of data in transit (TLS), access controls, regular security assessments, and staff training on data protection.

While we take every reasonable precaution, no method of transmission over the internet or electronic storage is completely secure. We encourage you to use strong passwords and to report any suspected security incidents to us immediately.

10. Children's Privacy

Our website and services are directed at business professionals and are not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email or a notice on our website. Your continued use of our website or services following such notice constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact our Data Protection team:

If you are located in the EEA or UK and are not satisfied with our response, you have the right to lodge a complaint with your relevant supervisory authority (e.g. the Information Commissioner's Office (ICO) in the UK, or your national Data Protection Authority in the EU).