Privacy Policy – Forgeon Technologies LLC

Forgeon Technologies LLC (“Company,” “we,” “us,” or “our”) is committed to protecting the privacy of our clients, website visitors, and business contacts. This Privacy Policy describes how we collect, use, disclose, and safeguard information in connection with our website at forgeon.tech (the “Site”) and our managed IT services (the “Services”).

This Policy applies to business-to-business (B2B) interactions — with companies, organizations, and the individuals who represent them. If you are located in California, New York, or another jurisdiction with specific privacy rights, additional terms may apply as described below.

BY USING OUR SITE OR SERVICES, YOU AGREE TO THE TERMS OF THIS PRIVACY POLICY. IF YOU DO NOT AGREE, PLEASE DISCONTINUE USE OF OUR SITE AND SERVICES.

1. Information We Collect

1.1 Information You Provide Directly

We collect information that you or your organization provides when you:

Contact us through our website, email, phone, or other communication channels
Request a quote, proposal, or demonstration of Services
Execute a Service Agreement, Statement of Work, or other business contract
Use or interact with our ticketing, helpdesk, or client portal systems
Register for events, webinars, or training sessions
Communicate with us regarding support issues

This information may include: organization name, contact person name, business email address, business phone number, business mailing address, billing and payment information, job title or role, and any other information you choose to share with us.

1.2 Information We Collect Automatically

When you visit our Site, our systems automatically collect certain information about your device and browsing activity, including:

IP address and approximate geographic location (city/region level)
Browser type and version, operating system, and device identifiers
Pages visited, links clicked, time spent on pages, and referring URLs
Date and time of access
Cookies and similar tracking technologies (see Section 7)

This data is collected through server logs, Google Analytics, and other analytics tools. We use this information to improve our Site, understand user behavior, and optimize our online presence.

1.3 Information We Collect Through Service Delivery

In the course of providing managed IT services, we may access, process, or handle data belonging to your organization, including:

Employee user account information (usernames, email addresses, roles)
Device and network configuration data, hardware and software inventory
IT system logs, event data, and monitoring telemetry
Backup copies of data as part of disaster recovery services
Security event data, vulnerability scan results, and incident reports
Documentation, credentials, and configuration files necessary for IT management

This data is classified as Client Data under our Terms and Conditions and is governed by those Terms. We access this data solely to deliver contracted Services.

1.4 Information from Third Parties

We may receive information about you or your organization from business partners, referral sources, publicly available business directories and professional networks (such as LinkedIn), credit and background check services where applicable, and third-party platforms you connect to our services.

2. How We Use Information

2.1 Providing and Managing Services

Delivering, managing, and improving our IT support and managed services
Responding to helpdesk tickets, service requests, and support inquiries
Provisioning and managing third-party software and cloud platforms on your behalf
Billing, invoicing, and payment processing
Onboarding new clients and offboarding departing employees
Managing IT assets, documentation, and configurations

2.2 Business Communications

Sending service updates, maintenance notifications, and scheduled outage alerts
Providing renewal notices, contract updates, and policy change notifications
Responding to inquiries, feedback, and requests for information
Sending optional marketing communications (with your consent or as permitted by law — you may opt out at any time)

2.3 Security and Compliance

Monitoring for threats, intrusions, and security incidents
Verifying identities and authorizations before granting system access
Meeting legal, regulatory, and contractual obligations
Supporting clients in compliance assessments and audit preparation

2.4 Site Improvement and Analytics

Analyzing website traffic and usage patterns
Improving website functionality, content, and user experience
Testing new features and measuring marketing campaign effectiveness

2.5 Legal Purposes

Enforcing our Terms and Conditions and other agreements
Responding to legal process, court orders, or government requests
Protecting the rights, property, or safety of Company, our clients, or others
Preventing fraud, abuse, or unauthorized use of our services

3. How We Share Information

We do not sell, rent, or trade your personal or business information. We may share information as follows:

3.1 Third-Party Service Providers

We work with trusted third-party vendors and service providers who assist us in delivering our services. These include, but are not limited to:

Remote Monitoring and Management (RMM) platforms (e.g., tools for device monitoring and patch management)
Professional Services Automation (PSA) and ticketing systems (e.g., ConnectWise, Autotask)
Backup and disaster recovery platforms (e.g., Datto, Veeam)
Cloud infrastructure and productivity platforms (e.g., Microsoft Azure, Microsoft 365, Google Workspace)
Cybersecurity tools (e.g., endpoint protection, SIEM/SOC platforms, email security)
Payment processors and billing platforms
Business communication tools (e.g., email, video conferencing)
Analytics and marketing platforms (e.g., Google Analytics)

These providers access information only as necessary to perform services on our behalf and are contractually required to maintain appropriate data protection standards.

3.2 Business Transfers

If Company is acquired, merges with another entity, or transfers substantially all of its assets, your information may be transferred as part of that transaction. We will notify affected clients and, where required by law, provide choices regarding such transfer.

3.3 Legal Requirements

We may disclose information when we reasonably believe disclosure is required by applicable law, regulation, legal process, or governmental request, or where necessary to protect our legal rights, prevent fraud, or address security threats.

3.4 With Your Consent

We may share information in other circumstances with your express prior consent.

4. Legal Basis for Processing

We process information on the following legal bases:

Contract Performance: To fulfill our obligations under a Service Agreement or other contract with you
Legitimate Interests: For fraud prevention, IT security, improving our services, and managing our business operations, where our interests are not overridden by your privacy rights
Legal Obligations: To comply with applicable laws and regulations
Consent: For marketing communications and analytics cookies, where required

You may withdraw consent at any time, which will not affect the lawfulness of processing prior to withdrawal.

5. Data Retention

We retain information for as long as necessary to fulfill the purposes described in this Policy or as required by law:

Client account and contract records: Retained for the duration of the relationship plus seven (7) years, as required for legal and tax compliance
IT support and service logs: Retained for a minimum of one (1) year, or longer as required by applicable regulations or client contracts
Security incident records: Retained for a minimum of three (3) years
Website analytics data: Retained for up to twenty-six (26) months in accordance with Google Analytics retention policies
Marketing communication records: Retained until you opt out or as required by law

When data is no longer needed, we securely delete or anonymize it in accordance with our data disposal procedures.

6. Your Privacy Rights

6.1 New York Residents — NY SHIELD Act

Under New York’s SHIELD Act (Stop Hacks and Improve Electronic Data Security Act), we maintain a comprehensive data security program that includes reasonable administrative, technical, and physical safeguards to protect private information of New York residents. In the event of a qualifying data breach affecting New York residents, we will notify affected parties as required by New York General Business Law § 899-aa.

6.2 California Residents — CCPA / CPRA

If you are a California resident, you may have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Right to Know: Request disclosure of the categories and specific pieces of personal information we collect, use, disclose, and sell
Right to Delete: Request deletion of your personal information, subject to certain exceptions
Right to Correct: Request correction of inaccurate personal information
Right to Opt Out: Opt out of the sale or sharing of personal information (we do not sell personal information)
Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

To exercise these rights, contact us at privacy@forgeon.tech. We will respond to verifiable requests within forty-five (45) days, with a possible thirty (30) day extension where necessary.

6.3 EU/UK Residents — GDPR

While our primary client base is in the United States, if you are located in the European Union or United Kingdom, you may have rights under the General Data Protection Regulation (GDPR) or UK GDPR, including rights of access, rectification, erasure, restriction, portability, and objection. Please contact us at privacy@forgeon.tech to exercise these rights. We will respond within thirty (30) days.

6.4 All Users — General Rights

Regardless of your location, you may request access to information we hold about you, request correction of inaccurate information, opt out of marketing communications at any time, or request deletion of your information subject to our legal retention obligations.

Submit requests to: privacy@forgeon.tech

7. Cookies and Tracking Technologies

7.1 What We Use

Our Site uses cookies and similar technologies to enhance user experience and analyze Site performance. Cookie types include:

Strictly Necessary Cookies: Required for the Site to function properly. These cannot be disabled.
Analytics Cookies: Used to collect information about how visitors use the Site (e.g., Google Analytics). This data is aggregated and anonymized.
Functionality Cookies: Enable enhanced features such as remembering your preferences.
Marketing Cookies: Used to deliver relevant content. We do not currently use third-party advertising cookies.

7.2 Your Cookie Choices

Most web browsers allow you to control cookies through browser settings. You can block all cookies via browser settings (note: this may impact Site functionality), delete cookies already stored on your device, or opt out of Google Analytics tracking at: https://tools.google.com/dlpage/gaoptout.

8. Data Security

We implement a multi-layered information security program to protect the data we hold, consistent with industry best practices for managed IT service providers. Our security measures include:

Encryption of data in transit (TLS/SSL) and at rest where applicable
Multi-factor authentication (MFA) for access to sensitive systems and client environments
Role-based access controls limiting data access to authorized personnel on a need-to-know basis
Regular security assessments, vulnerability scanning, and patch management
Employee security awareness training and confidentiality obligations
Incident response procedures for detecting, containing, and reporting security events
Background checks for personnel with access to client systems

Despite our best efforts, no security measures are perfect or impenetrable. In the event of a data breach affecting your information, we will notify you as required by applicable law.

9. Children’s Privacy

Our Site and Services are directed to businesses and not to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has submitted information through our Site, please contact us immediately at privacy@forgeon.tech and we will promptly delete such information.

10. International Data Transfers

Forgeon Technologies LLC is headquartered in New York, United States. If you are located outside the United States, your information may be transferred to, stored, and processed in the United States and other countries where our vendors operate. By using our Services, you consent to this transfer. When we transfer data internationally, we apply appropriate safeguards consistent with applicable law.

11. Links to Third-Party Sites

Our Site may contain links to third-party websites, platforms, or services. This Privacy Policy does not apply to those third-party sites. We are not responsible for the privacy practices of third parties and encourage you to review their privacy policies before sharing any information with them.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or industry standards. When we make material changes, we will update the “Last Updated” date, notify existing clients by email or through our client portal, and post a notice on our Site for a reasonable period.

We encourage you to review this Policy periodically. Your continued use of our Site or Services following any update constitutes acceptance of the revised Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Forgeon Technologies LLC
Privacy Officer / Data Contact
New York, NY
Email: privacy@forgeon.tech
Phone: (929) 338-6700
Website: forgeon.tech

We will respond to privacy-related requests within thirty (30) days, or as otherwise required by applicable law.