Fizen Technology · Part of the XDuce Group of Companies

Privacy Policy

Last updated: July 2, 2026

1.Who we are & what this policy covers

This Privacy Policy describes how Fizen Technology (“Fizen,” “we,” “us,” or “our”), part of the XDuce Group of Companies, collects, uses, and protects personal information when you visit fizentech.com (the “Site”) or contact us through it. Our offices are located at 100 Ashley Dr S #600, Tampa, FL 33602, United States.

This policy applies only to information collected through the Site. It does not cover information we process on behalf of clients under managed IT, cybersecurity, or other service agreements. That processing is governed by the applicable client contract. It also does not cover third-party websites or portals linked from the Site (see Section 13).

2.Information we collect

Information you give us

We collect personal information only when you choose to provide it, for example when you:

• Contact us through our contact form, by email, or by phone. This typically includes your name, email address, phone number, company, and the contents of your message.
• Subscribe to our newsletter. Your email address is processed through our email marketing service provider.
• Apply for a career opportunity. We receive the information you include in your application or resume.
• Use our anonymous hotline, which, as the name implies, is designed so you do not have to identify yourself.

Information collected automatically

Like most websites, the Site collects limited technical information automatically when you visit:

• Usage and device data via Google Analytics (with your consent; see Section 4): pages viewed, time on page, approximate geographic region, referral source, browser type, device type, and operating system.
• Server log data necessary to operate and secure the Site, such as IP address, request timestamps, and error logs.

We do not use session-replay tools, advertising pixels, chat-widget tracking, fingerprinting, or cross-site tracking technologies on the Site.

3.How we use information

We use the information described above to:

• Respond to your inquiries and requests;
• Send you our newsletter and occasional updates about our services, but only if you have subscribed. Every email includes an unsubscribe link;
• Understand, in aggregate, how visitors use the Site so we can improve it;
• Operate, maintain, and secure the Site, including detecting and preventing fraud, abuse, and security incidents;
• Comply with legal obligations and enforce our legal rights.

We do not use your personal information for automated decision-making that produces legal or similarly significant effects, and we do not use it to train artificial intelligence models.

4.Cookies & analytics

The Site uses a small number of cookies, in two categories:

• Strictly necessary cookies are required for the Site to function and to remember your cookie preferences. These are always active.
• Analytics cookies (Google Analytics) help us understand aggregate site traffic. These are not set until you consent via the cookie banner presented on your first visit.

You can change or withdraw your cookie consent at any time using the Cookie Settings link available on the Site. You can also:

• Block or delete cookies through your browser settings;
• Install the Google Analytics opt-out browser add-on;
• Enable Global Privacy Control (GPC) in a supporting browser. We treat a GPC signal as a valid opt-out of any sale or sharing of personal information, as required by California law.

For more information about how Google processes data, see How Google uses information from sites that use its services.

5.When we share information

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the preceding 12 months. We share personal information only in these limited circumstances:

• Service providers who process information on our behalf under contractual confidentiality obligations: currently our website hosting provider, Google (analytics), and Constant Contact (newsletter delivery);
• Within the XDuce Group of Companies, where needed to respond to your inquiry or provide services you have requested;
• Legal requirements, where disclosure is required by law, subpoena, or court order, or to protect the rights, safety, or property of Fizen, our clients, or others;
• Business transfers, in connection with a merger, acquisition, or sale of assets, in which case this policy will continue to apply to your information until you are notified otherwise.

6.Your rights & choices

Regardless of where you live, you may contact us at any time (see Section 15) to:

• Access: ask what personal information we hold about you;
• Correct: ask us to fix inaccurate information;
• Delete: ask us to delete your information, subject to legal retention requirements;
• Opt out of marketing: unsubscribe from our newsletter via the link in any email, or by contacting us;
• Raise a concern: tell us about any concern regarding our handling of your information.

We will respond to verified requests within the timeframes required by applicable law (generally 45 days in the U.S. and one month in the EEA and UK). We will never discriminate against you for exercising any privacy right.

7.California residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), provides you with specific rights. This section supplements the rest of this policy.

Categories of personal information we collect

Category (per CCPA)	Examples we collect	Source
Identifiers	Name, email address, phone number, IP address	You; automatic collection
Commercial information	Records of services you inquire about	You
Internet or network activity	Pages visited, browsing interactions on the Site (via Google Analytics, with consent)	Automatic collection
Professional or employment information	Company name, job title, resume details (careers inquiries)	You
Geolocation data	Approximate location derived from IP address	Automatic collection

We do not collect sensitive personal information as defined by the CCPA, and we do not sell or share personal information as those terms are defined under the CCPA. We retain each category only as long as described in Section 10.

Your California rights

• Right to know what personal information we collect, use, and disclose, including the categories of sources and third parties;
• Right to delete personal information we have collected from you;
• Right to correct inaccurate personal information;
• Right to opt out of sale or sharing (not applicable, since we do neither, though we honor GPC signals as a standing opt-out);
• Right to limit use of sensitive personal information (not applicable, since we do not collect it);
• Right to non-discrimination for exercising any of these rights.

To exercise these rights, contact us using the details in Section 15. We will verify your request using the information you provide, and you may designate an authorized agent to act on your behalf. We do not offer financial incentives in exchange for personal information.

8.Other U.S. state residents

Residents of states with comprehensive privacy laws, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others, may have similar rights of access, correction, deletion, portability, and opt-out of targeted advertising, sale, or profiling. Because we do not sell personal information, engage in targeted advertising, or profile visitors, the opt-out rights generally do not apply to our practices. You may still exercise your access, correction, and deletion rights at any time by contacting us (Section 15). If we decline a request, you may appeal by replying to our decision, and we will respond to your appeal as required by your state’s law.

9.Visitors from the EEA, United Kingdom & Switzerland

Our services are directed to businesses in the United States. However, if you visit the Site from the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) or its UK and Swiss equivalents may apply to our processing of your personal data, and this section supplements the rest of this policy. Fizen Technology is the data controller for personal data collected through the Site.

Legal bases for processing

• Consent (Art. 6(1)(a)) applies to analytics cookies and newsletter subscriptions. You may withdraw consent at any time without affecting prior processing;
• Legitimate interests (Art. 6(1)(f)) apply to responding to your inquiries and to operating and securing the Site;
• Legal obligation (Art. 6(1)(c)) applies where we must retain or disclose information to comply with law.

International transfers

The Site is hosted in the United States, so any personal data you submit is transferred to and processed in the United States, which the European Commission has not found to provide an equivalent level of data protection by default. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses with our service providers, or on your explicit consent.

Your GDPR rights

You have the rights of access, rectification, erasure, restriction of processing, data portability, and objection, as well as the right to withdraw consent. To exercise them, contact us using the details in Section 15. You also have the right to lodge a complaint with your local data protection supervisory authority.

10.Data retention

We keep personal information only as long as needed for the purpose it was collected:

• Contact inquiries are kept for as long as needed to respond and for a reasonable period afterward for business follow-up;
• Newsletter subscriptions are kept until you unsubscribe;
• Analytics data is retained in Google Analytics per our configured retention period, after which it is deleted or aggregated;
• Server logs are retained for a limited period for security purposes, then deleted.

We may retain information longer where required by law or to establish, exercise, or defend legal claims.

11.How we protect information

Security is our business. We apply administrative, technical, and physical safeguards appropriate to the nature of the information we hold, including encryption of data in transit (TLS/HTTPS across the Site), access controls limiting personal information to personnel who need it for their role, and secure hosting environments. Our organization maintains SOC 2 Type II attestation for its service operations. No method of transmission or storage is 100% secure, but we work continuously to protect your information. If a breach affecting your personal information ever occurs, we will notify you as required by applicable law.

12.Children’s privacy

The Site is a business-to-business informational website and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us personal information, contact us and we will delete it.

13.Third-party links & portals

The Site links to third-party websites and services, including our client support portal (hosted by ConnectWise), our newsletter provider (Constant Contact), and our social media pages on LinkedIn, Facebook, X, and YouTube. Those services operate under their own privacy policies, which we encourage you to review. This policy does not apply to information you provide directly to them.

14.Changes to this policy

We may update this policy from time to time to reflect changes in our practices or in the law. When we do, we will revise the “Last updated” date at the top of this page, and for material changes we will provide more prominent notice on the Site. Your continued use of the Site after an update means the revised policy applies.

15.How to contact us

Questions, concerns, or requests to exercise any of the rights described in this policy can be directed to: