PRIVACY POLICY

Sage IT Inc. (“Sage IT,” “we,” “us,” or “our”) respects your privacy and is committed to protecting personal information entrusted to us. This Privacy Policy explains how Sage IT may collect, use, disclose, retain and protect personal information when you visit or use our website, https://sageitinc.com/, interact with our digital platforms, contact us, apply for employment, engage with our social-media channels or otherwise interact with us.

This Privacy Policy should be read together with any applicable notices, terms, cookie policies, contractual provisions and other privacy notices that may apply to particular services, transactions, employment relationships or interactions.

This Privacy Policy applies to personal information collected through:

• our website and related webpages;
• online forms and applications;
• recruitment and career channels;
• communications with Sage IT;
• Sage IT’s official social-media and digital channels;
• events, webinars, campaigns and other business activities;
• interactions with customers, prospective customers, vendors, partners, consultants and
  other business contacts; and
• other lawful business interactions in which Sage IT collects or processes personal
  information.

This Privacy Policy does not apply to websites, applications, social-media accounts or services operated by third parties, even where those services are linked from our website. Such third parties are responsible for their own privacy practices.

Depending on the nature of your interaction with us, we may collect the following categories of information.

When you access our website, our servers or service providers may automatically collect certain technical information, including:

• Internet Protocol (IP) address;
• browser type and version;
• operating system;
• device information;
• webpages visited;
• date and time of access;
• referring and exit webpages;
• time spent on webpages;
• approximate location information derived from technical data; and
• other technical, diagnostic, security or usage information.

We may use this information for website operation, security, analytics, troubleshooting, fraud prevention and improvement of our services.

We may collect information about the device used to access our website or services, including device type, operating system, unique device or advertising  identifiers where applicable, device settings, language, browser information and other technical information made available by the device or software.

The information collected may depend on your device, operating system, browser and privacy settings.

Depending on the nature of your interaction with Sage IT, we may collect information such as:

• name;
• email address;
• telephone/mobile number;
• business and residential/mailing address;
• company and job title;
• professional information;
• employment and recruitment-related information;
• information contained in resumes and applications;
• social-media profile information that you voluntarily provide or make publicly available;
• communications and correspondence with us;
• information provided through forms, surveys or events;
• information required to provide or receive our services;
• information relating to business relationships; and
• other information that you voluntarily provide to us or that is lawfully made available to us.

We will seek to limit the collection of personal information to information that is reasonably necessary for the relevant purpose.

We may obtain personal information:

• directly from you;
• from your employer or organization;
• from customers, vendors, partners or other business contacts;
• from recruitment agencies and other service providers;
• from publicly available sources, including professional networking platforms;
• through our website and digital platforms;
• through events, conferences and business interactions;
• from service providers supporting our business operations; and
• from other lawful sources.

Where we receive information concerning an individual from another person or organization, we expect that the person or organization providing such information has the lawful authority to do so.

We may collect, use, hold and disclose personal information for legitimate business and legal purposes, including:

• providing, operating and administering our website and services;
• responding to enquiries and communications;
• establishing and managing business relationships;
• providing information about our services and solutions;
• customer and account management;
• recruitment and evaluation of employment applications;
• communicating with applicants, employees, contractors and business contacts;
• conducting events, webinars, campaigns and other business activities;
• marketing and promotional activities where permitted by applicable law;
• analytics, research and business development;
• improving our website, services and user experience;
• information security, fraud prevention and investigation;
• detecting and addressing unauthorized or fraudulent activity;
• protecting our systems, network, personnel, customers and other stakeholders;
• enforcing our contractual and legal rights;
• responding to legal process, governmental requests or regulatory requirements;
• complying with applicable laws and obligations;
• maintaining business and corporate records;
• investigating complaints and disputes; and
• any other purpose disclosed to you at the time the information is collected or otherwise permitted by applicable law.

We will not intentionally use personal information for purposes that are materially incompatible with the purposes for which it was collected, except where permitted or required by applicable law.

Where applicable law requires a legal basis for processing personal information, we may rely on one or more of the following:

• performance of a contract or taking steps at your request before entering into a
  contract;
• compliance with a legal or regulatory obligation;
• your consent, where consent is required;
• our legitimate business interests, where permitted by applicable law and where those interests are not overridden by applicable rights and interests;
• protection of our legal rights, property, systems, personnel or other legitimate interests;
• prevention, detection and investigation of fraud, security incidents or unlawful activity; or
• other lawful grounds available under applicable data-protection law.

Where processing is based on consent, you may withdraw your consent subject to applicable law. Withdrawal of consent will not affect processing that was lawfully carried out before withdrawal.

If you apply for employment or otherwise interact with us in relation to recruitment, we may collect information necessary to evaluate and administer your application, including:

• identification and contact details;
• resume and professional history;
• qualifications, skills and experience;
• references;
• employment history;
• information required for background verification, where applicable and permitted by law; and
• other information reasonably required for recruitment and employment purposes.

Recruitment information may be shared with authorized service providers, background verification providers, recruitment agencies, professional advisers and relevant Sage IT personnel, subject to applicable law and appropriate confidentiality and security requirements.

We may disclose personal information, where lawful and reasonably necessary, to:

• Sage IT group entities and affiliates;
• customers and prospective customers where necessary for business purposes;
• vendors, contractors and service providers;
• cloud, hosting, IT, cybersecurity and technology providers;
• recruitment and background-verification service providers;
• professional advisers, auditors and insurers;
• legal, regulatory, governmental or law-enforcement authorities where required or
  permitted by law;
• parties involved in corporate transactions; and
• other persons where you have authorized or requested such disclosure or where otherwise permitted by applicable law.

We require appropriate confidentiality and security obligations from service providers where appropriate to the nature of the information and services involved.

We may use third-party service providers to support our business operations, including providers of hosting, cloud services, analytics, communications, recruitment, cybersecurity, customer relationship management, marketing, payment, legal and other business services.

Such providers may process personal information on our behalf and only for authorized purposes, subject to contractual, legal, security and confidentiality requirements as applicable.

Sage IT operates internationally and may process or store personal information in countries other than the country in which the information was originally collected. Personal information may therefore be transferred to Sage IT group entities, service providers, customers, professional advisers or other recipients located in jurisdictions outside your country of residence.

Where applicable law requires safeguards for international transfers, Sage IT will implement appropriate safeguards or rely on a legally recognized transfer mechanism.

For information subject to European data-protection laws, transfers outside the European Economic Area will be undertaken in accordance with applicable requirements, including, where appropriate, adequacy decisions, standard contractual clauses, binding corporate rules or other legally recognized safeguards.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to:

• provide services;
• maintain business and financial records;
• comply with legal, regulatory, contractual or reporting obligations;
• resolve disputes;
• enforce agreements;
• prevent fraud and security incidents; and
• establish, exercise or defend legal claims.

Retention periods may vary depending on the nature of the information, the purpose of processing and applicable legal or contractual requirements.

When personal information is no longer required, we may securely delete, destroy, anonymize or otherwise dispose of it in accordance with our applicable retention practices and legal obligations.

Sage IT maintains reasonable technical, organizational and administrative safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, misuse or destruction.

Security measures may include access controls, authentication mechanisms, monitoring, security technologies, organizational controls and other safeguards appropriate to the nature and risk of the information.

However, no method of electronic transmission, storage or processing can be guaranteed to be completely secure. Accordingly, while we take reasonable measures to protect personal information, we cannot guarantee absolute security.

We may use cookies and similar technologies to operate our website, understand website usage, remember preferences, improve functionality, conduct analytics and support security.

The use of cookies may vary depending on the website functionality and applicable law.

Please refer to our Cookie Policy for additional information regarding the cookies and similar technologies used on our website.

Subject to applicable law, you may have rights relating to your personal information, including the right to:

request access to personal information held about you;

• request correction or updating of inaccurate information;
• request deletion or erasure where legally applicable;
• request restriction of certain processing;
• withdraw consent where processing is based on consent;
• object to certain processing where applicable;
• request portability of information where applicable;
• opt out of certain marketing communications; and
• lodge a complaint regarding our handling of personal information.

These rights are subject to applicable legal limitations and exemptions. For example, Sage IT may need to retain or process certain information to comply with legal obligations, establish or defend legal claims, prevent fraud or protect legitimate business interests.

Requests relating to personal information may be submitted using the contact details provided in this Privacy Policy.

We may need to verify your identity or request additional information before processing certain requests in order to protect personal information against unauthorized disclosure.

We will respond to valid requests within the period required by applicable law.

If you believe that your privacy rights have been violated, you may contact us using the details below. Where applicable, you may also have the right to lodge a complaint with the relevant data-protection or regulatory authority.

Where permitted by applicable law, Sage IT may communicate with you regarding services, events, publications, business developments and other relevant information.

You may opt out of marketing communications by:

• using the unsubscribe mechanism included in the relevant communication; or
• contacting us using the contact details provided below.

Opting out of marketing communications will not necessarily prevent us from sending non marketing communications, such as service-related, contractual, security or legally required communications.

Our website may contain links to third-party websites, platforms or services.

Sage IT does not control and is not responsible for the privacy practices, security, content or policies of third-party websites or platforms.

You should review the privacy policies applicable to those third-party services before providing them with personal information.

Sage IT maintains official websites, social-media accounts and other digital communication channels for legitimate corporate, business, recruitment, marketing and informational purposes.

Only accounts, webpages and communication channels identified or linked through Sage IT’s official website or otherwise expressly confirmed by Sage IT should be treated as official Sage IT channels.

Sage IT does not authorize individuals or third parties to represent themselves as Sage IT or as authorized representatives of Sage IT unless such authorization has been expressly granted.

Employees, consultants, contractors, recruitment agencies, vendors, partners and other third parties may maintain personal or independent social-media accounts. Unless expressly authorized, such accounts, posts, comments, messages, advertisements, recruitment communications, business proposals or other representations are not official communications of Sage IT.

Sage IT is aware that third parties may attempt to misuse corporate names, trademarks, logos, employee identities, recruitment information, websites, social-media profiles or other brand assets for unauthorized or fraudulent purposes.

This may include:

• fake or impersonated Sage IT social-media profiles;
• unauthorized use of the Sage IT name, logo or trademarks;
• fraudulent recruitment advertisements or job offers;
• false representations concerning employment opportunities;
• unauthorized business proposals or service offerings;
• fraudulent requests for money, payments, banking information or other financial information;
• requests for passwords, authentication credentials or confidential information;
• emails, messages or communications falsely claiming to be from Sage IT or its employees; and
• other communications or activities falsely suggesting an affiliation, authorization, endorsement or sponsorship by Sage IT.

Unless expressly confirmed through an official Sage IT channel, such communications or representations should not be treated as authorized by Sage IT.

Sage IT does not request sensitive credentials, passwords, authentication codes or payments through unauthorized social-media accounts or unofficial recruitment channels.

If you receive a suspicious communication claiming to be from Sage IT, you should independently verify the communication through Sage IT’s official website or contact channels before responding, providing information, making a payment or taking any other action.

The Sage IT name, logos, trademarks, service marks, trade names, website content, branding, designs and other intellectual property are owned by or licensed to Sage IT or its applicable affiliates.

Except where expressly authorized or permitted by applicable law, no person may:

• represent themselves as an authorized representative of Sage IT;
• use Sage IT’s name, logo or branding in a manner that falsely suggests authorization, sponsorship, endorsement or affiliation;
• create or operate a social-media account, website, webpage or other digital presence that impersonates or misleadingly represents Sage IT;
• publish recruitment, commercial, contractual or business communications in Sage IT’s name without authorization; or
• use Sage IT’s brand assets for fraudulent, misleading or unauthorized purposes.

Sage IT reserves all rights and remedies available under applicable law in relation to unauthorized use, infringement, impersonation, fraudulent representations or misuse of its intellectual property, name or brand.

Sage IT respects the right of individuals to maintain personal social-media accounts and express personal views, subject to applicable law and their contractual, confidentiality and other obligations.

Unless expressly authorized by Sage IT, an employee’s or other individual’s personal social media account, views, comments or communications should not be interpreted as an official statement, position, endorsement or representation of Sage IT.

Employees and other persons acting on behalf of Sage IT must comply with applicable Sage IT policies, confidentiality obligations, intellectual-property requirements and authorization procedures when communicating or publishing content in a professional capacity.

Nothing in this Privacy Policy is intended to restrict rights or activities protected by applicable law.

Sage IT may investigate suspected impersonation, fraudulent communications, unauthorized use of its name or brand, phishing attempts and other activities that may affect Sage IT, its customers, employees, applicants, vendors or business partners.

Where appropriate and lawful, Sage IT may:

• report fraudulent or impersonating accounts to relevant platforms;
• request removal or disabling of unauthorized content or accounts;
• investigate suspected misuse;
• preserve relevant evidence;
• notify affected persons or organizations;
• cooperate with law-enforcement or regulatory authorities; and
• pursue appropriate legal or other remedies.

In connection with an actual or proposed merger, acquisition, restructuring, financing, sale of assets, change of control, bankruptcy or similar corporate transaction, personal information  may be transferred to relevant parties as part of the transaction, subject to applicable law.

Any recipient of personal information will be expected to handle such information in  accordance with applicable legal requirements.

If Sage IT becomes aware of a personal-data breach or security incident affecting personal information, we will assess and respond to the incident in accordance with our internal procedures and applicable legal and regulatory requirements.

Where notification is legally required, Sage IT will make the required notifications to affected individuals, regulators or other authorities within the applicable statutory or regulatory timelines.

If you have a concern regarding Sage IT’s handling of your personal information, you may contact us using the details below.

We will review and address privacy complaints in accordance with applicable law and our internal procedures.

You may also have the right to contact the relevant data-protection authority or regulatory body, depending on the applicable law and jurisdiction.

Sage IT may update this Privacy Policy from time to time to reflect:

• changes in applicable laws or regulations;
• changes to our business or services;
• changes to our data-processing practices;
• changes in technology or security practices; or
• other legitimate business requirements.

The updated version will be posted on our website with the revised “Last Updated” date. Where applicable law requires additional notice or consent for material changes, Sage IT will provide such notice or obtain such consent.

Your continued use of the website following the posting of an updated Privacy Policy will be subject to the updated policy to the extent permitted by applicable law.

For questions, requests or complaints concerning this Privacy Policy or the processing of personal information, please contact:

Sage IT Inc.
Data Protection / Privacy Contact
Email: dpo@sageitinc.com

Headquarters:
3535 Victory Group Way, Bldg 4,
Frisco, Texas 75034, USA

Email: marketing@sageitinc.com
Phone: +1 214-619-2030

Where applicable, Sage IT may designate or update its privacy contact, data protection officer or grievance contact in accordance with applicable law.

This Privacy Policy is intended to operate in conjunction with applicable privacy, data protection, cybersecurity and other laws and regulations applicable to Sage IT and the relevant processing activity.

Nothing in this Privacy Policy is intended to exclude, restrict or override any mandatory right or protection available to an individual under applicable law.

Where requirements of applicable law differ from this Privacy Policy, the applicable legal requirements will prevail to the extent required by law.