Privacy Policy

1. Purpose of Policy

CCS Global Tech is committed to protecting the privacy, confidentiality, and security of user information and sensitive commercial/financial data. This policy explains how CCS Global Tech collects, uses, processes, protects, and shares personal information in accordance with applicable privacy and data protection requirements.

2. Scope of Policy

This policy applies to all personal information collected, processed, stored, or managed by CCS Global Tech, including information from website visitors, customers, business partners, employees, contractors, and other individuals.

3. Supporting Documents

a) Information Security Policy

4. Responsibilities

1. The Chief Information Security Officer (CISO) is responsible for implementing, maintaining, and enforcing this policy.
2. CCS Global Tech’s Internal Audit Team is responsible for monitoring compliance with this policy.
3. Employees and non-employees are responsible for following this policy while performing their duties.

5. Policy Statements

CCS Global Tech:

1. Collects and Uses Personal Information
   Collects personal information to provide services, respond to inquiries, improve website experience, and support business operations.
   

2. Collects Website and Technical Information
   May collect information such as name, email address, company information, IP address, browser/device details, domain information, website activity, and company affiliation information.
   

3. Uses Cookies and Analytics Technologies
   Uses cookies, analytics tools, pixels, and similar technologies to improve website functionality, analyze usage, understand visitor engagement, and support business activities. CCS Global Tech may use third-party visitor identification services for these purposes.
   CCS Global Tech provides users with appropriate notice regarding the use of cookies, tracking technologies, analytics tools, pixels, and similar technologies and obtains consent before using such technologies to collect or process user information. Users may manage their preferences or withdraw consent at any time through available cookie settings or applicable privacy preference mechanisms.

4. Legal Basis for Processing Personal Information
   CCS Global Tech processes personal information based on applicable legal grounds, including consent, contractual necessity, legitimate business interests, compliance with legal obligations, and other lawful purposes permitted under applicable privacy laws.
   

5. Protects Personal Information
   Implements appropriate administrative, technical, and organizational safeguards to protect personal information from unauthorized access, misuse, disclosure, or loss.
   

6. Shares Information with Trusted Third Parties
   May share information with approved third-party providers supporting analytics, security, hosting, communication, and business operations. CCS Global Tech does not sell personal information.
   

7. Supports User Privacy Rights
   Provides users with applicable privacy rights, including access, correction, deletion, and information regarding the processing of personal data under applicable laws such as GDPR and CCPA/CPRA.
   Users may submit privacy-related requests or questions through CCS Global Tech’s designated privacy contact channel.

8. Maintains Compliance and Data Retention Practices
   Processes information only for legitimate purposes, retains information only as necessary, protects information shared through external links, and complies with applicable privacy and security requirements.
   

6. Enforcement

Violation of this policy may result in corrective action, including loss of access privileges, termination of employment or contract, or other actions deemed appropriate by management, HR, Legal, or relevant departments.

Any policy violation or security incident shall be reported and investigated according to CCS Global Tech procedures.

7. Policy Exceptions

Any exceptions to this policy must be approved by the Chief Information Security Officer and documented through the standard IT exception request process.