Privacy Policy

Introduction

Friesian Technologies ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy describes how we handle personal information when you access our website, use our IT services, or interact with us regarding cybersecurity, network infrastructure, and technology solutions.

Information We Collect

We collect information to provide better IT services and support to your business. This includes:

Personal Information

• Contact details (name, email, phone number, business address)
• Business information (company name, industry, size)
• Payment and billing information
• Account credentials and authentication data

Technical Information

• IP addresses and device identifiers
• Browser type and version
• System logs and diagnostic information
• Network configuration details (for service provision)
• Security event logs and threat detection data

Service Data

• Backup and recovery data (encrypted and secured)
• Security audit reports and compliance documentation
• Support tickets and communication records
• Infrastructure monitoring data

How We Use Information

We use the collected information for the following purposes:

• Service Delivery: Providing IT infrastructure support, cybersecurity monitoring, and managed network services
• Security Operations: Monitoring for threats, conducting vulnerability assessments, and managing firewall configurations
• Communication: Responding to inquiries, providing technical support, and sending service updates
• Compliance: Meeting regulatory requirements (HIPAA, PCI-DSS) and conducting security audits
• Improvement: Enhancing our services, training our staff, and developing new security solutions
• Billing: Processing payments and maintaining financial records

Information Sharing

We do not sell your personal information. We may share data only in the following circumstances:

Service Providers

We work with trusted third-party vendors who assist in delivering our services (e.g., cloud infrastructure providers, security tool vendors). These partners are bound by strict confidentiality agreements and data protection requirements.

Legal Requirements

We may disclose information if required by law, court order, or governmental regulation, or to protect our rights, property, or safety, or that of our clients.

Business Transfers

In the event of a merger, acquisition, or sale of assets, client information would be transferred subject to the same privacy protections.

Data Security

Given our focus on cybersecurity, we implement enterprise-grade security measures:

• Encryption: AES-256 encryption for data at rest and TLS 1.3 for data in transit
• Access Controls: Role-based access control (RBAC) and multi-factor authentication (MFA)
• Monitoring: 24/7 security operations center (SOC) monitoring
• Audits: Regular penetration testing and vulnerability assessments
• Backup: Redundant backup systems with geographically distributed storage
• Compliance: Adherence to ISO 27001, SOC 2 Type II, and industry-specific standards

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate data
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to certain types of processing
• Restriction: Limit how we use your information

To exercise these rights, please contact us using the information provided in the Contact section.

Cookies & Tracking

Our website uses cookies and similar technologies to enhance user experience and gather analytics:

• Essential Cookies: Required for website functionality and security
• Analytics Cookies: Help us understand how visitors interact with our site
• Preference Cookies: Remember your settings and preferences

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect website functionality.

Data Retention

We retain personal information only as long as necessary to:

• Provide our services and support
• Comply with legal and regulatory obligations (typically 3-7 years depending on jurisdiction)
• Resolve disputes and enforce agreements
• Maintain security logs and audit trails

When data is no longer needed, we securely delete or anonymize it using NIST-approved methods.

Policy Changes

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes via:

• Email notification to the address associated with your account
• Prominent notice on our website
• Direct communication from your account representative

Changes become effective immediately upon posting unless stated otherwise. Continued use of our services constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy, your personal data, or our security practices, please contact us:

For security-related concerns, please report vulnerabilities to: contact@friesiantech.com

We aim to respond to all privacy-related inquiries within 48 hours for standard requests and 72 hours for data subject access requests.