Privacy Policy

Your privacy and data security are fundamental to everything we do.

Last Updated: November 1, 2024

1. Introduction

Panoptic IT Solutions ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services. By using our services, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our services.

2. Information We Collect

We collect information in several ways: **Personal Information You Provide:** - Name, email address, phone number, company name when you contact us or request services - Account credentials and payment information when you become a client - Technical information about your IT infrastructure when providing services **Automatically Collected Information:** - IP address, browser type, device information when you visit our website - Usage data, pages visited, and navigation patterns via cookies and analytics - Security logs and monitoring data when providing managed services **Information from Third Parties:** - Business contact information from legitimate sources - Threat intelligence data from security vendors

3. How We Use Your Information

We use your information to: **Provide Services:** - Deliver managed IT, cybersecurity, and consulting services - Monitor and protect your systems from security threats - Respond to support requests and technical issues - Process payments and manage accounts **Improve Our Services:** - Analyze usage patterns to enhance our offerings - Conduct security research and threat analysis - Develop new features and capabilities **Communication:** - Send service updates, security alerts, and technical notifications - Provide newsletters and educational content (with your consent) - Respond to inquiries and support requests **Legal Compliance:** - Comply with applicable laws and regulations - Respond to legal requests and prevent fraud - Protect our rights and those of our clients

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with: **Service Providers:** - Cloud hosting providers (Microsoft Azure, AWS) - Payment processors and financial institutions - Security vendors for threat intelligence - Professional services (legal, accounting) **Legal Requirements:** - Law enforcement or regulatory authorities when legally required - In response to valid legal processes (subpoenas, court orders) - To protect our rights or the safety of others **Business Transfers:** - In connection with a merger, acquisition, or sale of assets (with notice to affected parties) All third parties we work with are contractually bound to protect your data and use it only for specified purposes.

5. Data Security

We implement industry-standard security measures to protect your information: **Technical Safeguards:** - Encryption of data in transit (TLS/SSL) and at rest (AES-256) - Multi-factor authentication for system access - Network segmentation and firewall protection - Regular security assessments and penetration testing **Organizational Measures:** - Employee background checks and security training - Access controls based on least privilege principle - Confidentiality agreements with all staff - Incident response procedures and breach notification protocols **Compliance:** - GDPR compliance for EU data subjects - ISO 27001 information security management system - Regular audits and compliance assessments While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to: - Provide ongoing services to clients (duration of contract + 7 years for legal compliance) - Comply with legal obligations (tax records, regulatory requirements) - Resolve disputes and enforce agreements - Maintain security logs for incident investigation When data is no longer needed, we securely delete or anonymize it using industry-standard methods.

7. Your Rights Under GDPR

If you are an EU citizen, you have the following rights: **Right to Access:** Request a copy of personal data we hold about you **Right to Rectification:** Request correction of inaccurate or incomplete data **Right to Erasure:** Request deletion of your data (subject to legal obligations) **Right to Restriction:** Request limitation of processing in certain circumstances **Right to Data Portability:** Receive your data in a structured, machine-readable format **Right to Object:** Object to processing based on legitimate interests **Right to Withdraw Consent:** Withdraw consent for marketing communications To exercise these rights, contact us at privacy@panoptic.ie. We will respond within 30 days.

8. Cookies and Tracking

Our website uses cookies and similar technologies: **Essential Cookies:** Required for website functionality (session management, security) **Analytics Cookies:** Help us understand website usage (Google Analytics) **Marketing Cookies:** Used for remarketing and advertising (with consent) You can control cookies through your browser settings. Note that disabling cookies may affect website functionality. For more details, see our Cookie Policy.

9. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for the privacy practices of external sites. We encourage you to review their privacy policies.

10. Children's Privacy

Our services are not directed to individuals under 16. We do not knowingly collect personal information from children. If you believe we have collected data from a child, contact us immediately.

11. International Data Transfers

We are based in Ireland and primarily serve Irish businesses. If we transfer data outside the EU, we ensure appropriate safeguards are in place: - Standard Contractual Clauses approved by the EU Commission - Privacy Shield certification (where applicable) - Adequacy decisions by the EU Commission

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by: - Posting the updated policy on our website with a new "Last Updated" date - Sending email notifications to active clients - Requiring acceptance of updated terms for continued service use Continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us: **Email:** privacy@panoptic.ie **Phone:** +353 56 449 1490 **Mail:** Panoptic IT Solutions, Unit 7 Office, Block C, Newpark Shopping Centre, Kilkenny, R95 EYX7 **Data Protection Officer:** dpo@panoptic.ie

Summary

We collect and use your information to provide IT and cybersecurity services, improve our offerings, and comply with legal obligations. We implement robust security measures to protect your data and never sell your personal information. You have rights regarding your data under GDPR, which we fully support. Contact us anytime with questions or to exercise your rights.