Privacy Policy

Who we are and the scope of this policy

IQZ Systems, LLC is the company responsible for the personal information collected through the website. IQZ operates internationally, including in the United States and India. In this policy, references to IQZ include the IQZ affiliated companies that help to operate the website and to respond to enquiries and job applications.

This policy applies to personal information collected through the website and through the communications that follow from it, such as our replies to your enquiries and the recruitment process for applications made on the website. The website contains links to other websites and social media pages, such as LinkedIn. This policy does not apply to those websites, and we recommend that you read their privacy policies.

Information we collect

We collect personal information that you provide to us, information that is collected automatically when you use the website, and information that third-party services collect through technologies used on the website.

You may provide the following information to us:

• When you submit the contact form, your first name, last name, email address and company name, and, if you choose to provide them, your job title, telephone number with country code, message and the type of your enquiry. We also record the page and the form from which you submitted the enquiry.
• When you subscribe to our newsletter, your email address.
• When you request a downloadable resource, such as an e-book, your name and email address.
• When you apply for a job, the information described in the section titled "Job applications and automated screening", including your resume.
• When you use the website chat assistant, the messages, ratings and feedback that you submit.

The following information is collected automatically when you use the website:

• Server and security log information, including your IP address, your browser type and version (the user agent), the address of the page you requested and the date and time of the request.
• Information about how you use the website, such as the pages you view and the links you click, which is collected by the analytics and advertising technologies described in the section titled "Cookies and similar technologies".
• Information about your device, your browser and your interaction with the website forms, which is collected by Google reCAPTCHA to protect the forms against spam and abuse.

The website does not offer user accounts and does not accept payments. Please do not submit sensitive personal information, such as health information, financial account details or government identification numbers, through the website forms or the chat assistant.

How we use information

We use personal information for the following purposes:

• To respond to your enquiries and to send you the information or resources that you requested, including a confirmation email that repeats the details you submitted.
• To manage sales enquiries and our business relationships, including recording sales enquiries in our customer relationship management system.
• To send you our newsletter when you have asked to receive it.
• To verify your email address, assess your job application, communicate with you about it and manage our recruitment process.
• To provide the website chat assistant.
• To understand how visitors use the website, to improve the website and our content, and to measure the results of our advertising on LinkedIn.
• To operate and secure the website and to protect it and its forms against spam, fraud, abuse and security threats.
• To comply with our legal obligations and to establish, exercise or defend legal claims.

We do not use personal information collected through the website to make decisions based solely on automated processing that have legal or similarly significant effects on you, except for the automated screening of job applications that is described in the section titled "Job applications and automated screening".

Legal bases for processing

Where the law requires us to have a legal basis for processing personal information, we rely on the following legal bases:

• Performance of a contract, or steps taken at your request before entering into a contract. We rely on this basis when we respond to your enquiries, send you resources you requested and process your job application.
• Legitimate interests. We rely on this basis to operate, secure and improve the website, to manage our business relationships, to understand how the website is used, to measure our advertising and to prevent spam and abuse. We will process personal information on this basis only where our interests are not overridden by your interests and rights.
• Consent. We rely on this basis where we ask for your consent, for example when you ask to receive our newsletter. You may withdraw your consent at any time. Withdrawing consent does not affect processing that took place before you withdrew it.
• Legal obligation. We rely on this basis where we must process personal information to comply with the law.

The legal bases that apply to residents of India are described in the section titled "Additional information for residents of India".

Enquiries, newsletter and downloads

The contact form, the newsletter form and the download request form are protected by Google reCAPTCHA v3. When you use these forms, Google receives information about your browser and your interaction with the page, which it uses to assess whether the form is being submitted by a person or by an automated program. The use of reCAPTCHA is subject to the Google Privacy Policy (policies.google.com/privacy) and the Google Terms of Service (policies.google.com/terms).

When you submit the contact form, we send your enquiry by email, using the Twilio SendGrid email service, to the IQZ team responsible for it, which is our sales, marketing or human resources team. We also send you a confirmation email that repeats the details you submitted. If your enquiry is a sales enquiry, we create a lead in Pipedrive, our customer relationship management system. The lead contains your name, email address, telephone number and company name, and a title based on the type of your enquiry and your job title. We do not send the text of your message to Pipedrive.

When you subscribe to our newsletter, we send your email address by email to our marketing team so that it can add you to our newsletter communications.

When you request a downloadable resource, we send a download link to the email address you provided. The link can be used only once and expires after two days. Our content management system records your email address together with the link so that it can issue and check the link. We use your name only to address that email.

Job applications and automated screening

When you apply for a job through the website, we collect the following information:

• Your first name, last name, email address and telephone number.
• Your LinkedIn profile and a link to your portfolio.
• Your notice period and how you heard about IQZ.
• A summary of your experience, your cover letter and your answers to any questions that are specific to the role.
• The role you are applying for.
• Your resume.

Before you submit an application, we verify that you control the email address you provided by sending a six-digit one-time code to that address. We store the code only in a hashed form, and the code expires after 10 minutes. The confirmation that your email address has been verified expires after 30 minutes.

We store your application and your resume in our content management system, which is hosted on Google Cloud, and we send your application by email to our human resources team with your resume attached. We use this information to assess your suitability for the role, to communicate with you about your application and to manage our recruitment process.

We may use automated screening to assess applications. When we use automated screening, we send your resume and the details of your application to Scanwize, a resume screening service, which assesses your application against the requirements of the role. Based on that assessment, the service either declines the application or advances it to the next stage. If the application is declined, the outcome is shown to you immediately after you submit the application. If the application advances, you may be invited to an interview conducted by an artificial intelligence interviewer through the Bluebird interview service on the website. We use the responses you give in that interview to assess your application further.

A decision to decline an application on the basis of automated screening is made solely by automated means. If your application is declined in this way, you may ask for the decision to be reviewed by a member of our recruitment team, express your point of view and contest the decision. To make such a request, please contact us using the details in the section titled "Contact information" and include the role you applied for and the email address you used in your application. We will arrange for a person to review your application and will inform you of the outcome.

Website chat assistant

The website offers a chat assistant named Bluebird, which runs on Microsoft Azure Bot Framework. When you start a chat, the website generates a random identifier for the chat session. The messages, ratings and feedback that you submit are sent to the chat service, which processes them to provide the chat assistant.

Your browser keeps the chat session and the conversation in its session storage. This information is removed from your browser when you close the browser tab, and the chat session expires after two hours of inactivity.

Please do not share sensitive personal information in the chat.

Cookies and similar technologies

Cookies are small text files that a website places on your device. Similar technologies, such as tags and identifiers stored in your browser, work in a similar way. The website's own code does not set cookies. The website loads the following third-party technologies when you visit a page, and these technologies set their own cookies or use similar identifiers:

• Google Analytics, provided by Google, which collects information about how visitors use the website, such as the pages they view, how they arrived at the website and information about their device and browser. We use this information to understand and improve the website.
• LinkedIn Insight Tag, provided by LinkedIn, which collects information about visits to the website. LinkedIn uses this information to measure the results of advertising campaigns on LinkedIn and may use it to show advertising on LinkedIn to people who have visited the website. LinkedIn provides us with reports in aggregated form.
• OpenPanel, a product analytics service, which records the pages you view, information about the page and your device, and the links you click that lead to other websites.
• Google reCAPTCHA, provided by Google, which collects information about your device, your browser and your interaction with the website to protect the website forms against spam and abuse.

Some pages contain videos embedded from third-party video platforms. These platforms may set cookies or collect information about you when you play a video. Their use of that information is governed by their own privacy policies.

You can control these technologies in the following ways:

• You can set your browser to block or delete cookies, and many browsers offer settings that block third-party tracking. If you block Google reCAPTCHA, you may not be able to submit the website forms.
• You can install the Google Analytics opt-out browser add-on, which is available at tools.google.com/dlpage/gaoptout.
• If you are a LinkedIn member, you can manage how LinkedIn uses your information for advertising in your LinkedIn advertising settings, which are available at linkedin.com/psettings/advertising.
• You can enable the Global Privacy Control setting in browsers that support it. The section titled "Additional information for California and other US state residents" explains how we treat this signal.

How we share information

We do not sell personal information for money. We share personal information with the following categories of recipients:

• Service providers that process personal information on our behalf. These are Google Cloud, which hosts the website and our content management system and stores files; Twilio SendGrid, which delivers our emails; Pipedrive, which provides our customer relationship management system for sales enquiries; Microsoft, which provides the platform for the website chat assistant; and, when we use automated screening, Scanwize and the provider of the Bluebird interview service.
• Providers of the analytics, advertising and security technologies described in the section titled "Cookies and similar technologies", which are Google, LinkedIn and OpenPanel. These providers collect information directly from your browser and use it in accordance with their own privacy policies.
• IQZ affiliated companies, which help us to respond to enquiries, manage our business relationships and process job applications.
• Professional advisers, such as lawyers, auditors and insurers, where necessary for the purposes described in this policy.
• Courts, regulators, law enforcement agencies and other public authorities, where we are required to do so by law or where disclosure is necessary to protect our rights, our users or the public.
• A buyer or successor, or their advisers, in connection with a merger, acquisition, reorganization or sale of all or part of our business.

We require our service providers to protect personal information and to use it only to provide their services to us.

Where we store information

The website and our content management system are hosted by Google Cloud in the United States. All personal information that we collect through the website is stored in the United States.

If you are located outside the United States, the personal information that you submit through the website is therefore transferred to and stored in the United States. Where we transfer personal information from the European Economic Area or the United Kingdom to the United States, we will use appropriate safeguards, such as the Standard Contractual Clauses approved by the European Commission and the United Kingdom International Data Transfer Addendum, or another transfer mechanism permitted by law. You may ask us for more information about these safeguards by contacting us.

How long we keep information

We keep personal information only for as long as it is needed for the purposes described in this policy, unless the law requires or permits us to keep it for longer. The period depends on the type of information:

• Enquiries are kept for as long as is needed to respond to you and to manage the resulting business relationship.
• Newsletter subscriptions are kept until you ask us to stop sending the newsletter.
• Download links can be used once and expire after two days. The record of your email address and the link is kept for as long as is needed to manage content downloads and the related business relationship.
• Job applications are kept for the duration of the recruitment process and for a limited period afterwards, unless you agree that we may keep your application for longer to consider you for other roles. If you join IQZ, your application becomes part of your employment records.
• One-time verification codes expire after 10 minutes, and the confirmation that your email address has been verified expires after 30 minutes.
• Chat information stored in your browser is removed when you close the browser tab, and the chat session expires after two hours of inactivity.
• Server and security logs are kept for a limited period that is needed to operate and secure the website.
• Information collected by third-party analytics and advertising technologies is kept in accordance with the settings and policies of those providers.

When personal information is no longer needed, we will delete it or anonymize it.

How we protect information

We use technical and organizational measures that are designed to protect personal information against unauthorized access, loss, misuse and alteration. These measures include limiting access to personal information to the personnel and service providers who need it, protecting the website forms against automated abuse and storing one-time verification codes only in hashed form. IQZ holds ISO/IEC 27001 certification for its information security management system.

No method of transmitting or storing information over the internet is completely secure. Although we work to protect your personal information, we cannot guarantee its absolute security.

Your rights

Depending on where you live, you may have some or all of the following rights in relation to your personal information:

• The right to know what personal information we hold about you and to receive a copy of it.
• The right to ask us to correct personal information that is inaccurate or incomplete.
• The right to ask us to delete your personal information.
• The right to ask us to restrict our processing of your personal information, or to object to it, including processing for direct marketing.
• The right to receive personal information that you provided to us in a structured, commonly used and machine-readable format, and to ask us to transfer it to another organization.
• The right to withdraw your consent at any time, where we rely on your consent.
• The right not to be subject to a decision based solely on automated processing that has legal or similarly significant effects on you, and the right to ask for a person to review such a decision.
• The right to opt out of targeted advertising and of the sale or sharing of personal information.
• The right to complain to a data protection authority.

To exercise any of these rights, please contact us at contact@iqzsystems.com. We will need to verify your identity before we act on your request, and we may ask you for information to do so. We will respond to your request within the period required by applicable law. We will not discriminate against you for exercising your rights.

You can ask us to stop sending you the newsletter at any time by contacting us at contact@iqzsystems.com.

Additional information for residents of India

If you are in India, we process your personal data in accordance with the Digital Personal Data Protection Act, 2023 and the rules made under it. We process your personal data on the basis of your consent, which you give when you submit your information to us after reading this policy, or for a legitimate use permitted by the Act. You may withdraw your consent at any time, and withdrawing consent will be as easy as giving it. Withdrawing consent does not affect processing that took place before you withdrew it.

Under the Act, you have the following rights:

• The right to obtain a summary of the personal data that we process about you and of the processing activities we carry out, and the identities of the other data fiduciaries and data processors with whom we have shared it.
• The right to ask us to correct, complete, update or erase your personal data.
• The right to have a grievance addressed by us.
• The right to nominate another individual to exercise your rights in the event of your death or incapacity.

To exercise your rights or to raise a grievance, please contact us at contact@iqzsystems.com. We will respond to your request or grievance within the period prescribed under the Act and its rules. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

Additional information for residents of the European Economic Area and the United Kingdom

If you are in the European Economic Area or the United Kingdom, the General Data Protection Regulation or the United Kingdom General Data Protection Regulation applies to our processing of your personal data. IQZ Systems, LLC is the controller of the personal data that is processed through the website.

You have the rights of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent, as described in the section titled "Your rights". Where we rely on legitimate interests, you may object to the processing at any time on grounds relating to your particular situation. Where an application is declined by automated screening, you may request a review by a person, express your point of view and contest the decision, as described in the section titled "Job applications and automated screening".

You have the right to lodge a complaint with the data protection supervisory authority in the country where you live or work, or where you believe an infringement has occurred. In the United Kingdom, the supervisory authority is the Information Commissioner's Office. We would welcome the opportunity to address your concerns before you contact a supervisory authority.

Where the law requires us to appoint a representative in the European Union or the United Kingdom, we will publish the representative's contact details in this policy.

Additional information for California and other US state residents

This section applies to residents of California and of other US states that have comprehensive consumer privacy laws. In the past 12 months, we have collected the following categories of personal information:

• Identifiers, such as your name, email address, telephone number, IP address and online identifiers.
• Professional or employment-related information, such as your company name, job title, resume, LinkedIn profile, portfolio and employment history.
• Internet or other electronic network activity information, such as the pages you view, the links you click and your interaction with the website.
• Inferences, such as the assessment of a job application produced by automated screening.

We collect this information from you, from your device and browser, and from the service providers described in this policy. We use it for the purposes described in the section titled "How we use information" and disclose it to the categories of recipients described in the section titled "How we share information". We keep each category of information for the periods described in the section titled "How long we keep information". We do not use or disclose sensitive personal information for purposes that would give you a right to limit its use under California law.

We do not sell personal information for money. The website uses the LinkedIn Insight Tag, which allows LinkedIn to collect identifiers and information about your activity on the website for advertising purposes. Under California law and the laws of some other states, making this information available for cross-context behavioral advertising or targeted advertising may be treated as a sale or sharing of personal information. You can limit this activity by managing your LinkedIn advertising settings or blocking third-party cookies in your browser, or by contacting us. Where required by applicable law, we will treat a Global Privacy Control signal sent by your browser as a request to opt out of the sale or sharing of your personal information for that browser. We do not knowingly sell or share the personal information of consumers under 16 years of age. The website does not currently respond to Do Not Track signals.

Subject to applicable law, you have the right to know what personal information we collect, use and disclose, the right to access, correct and delete your personal information, the right to opt out of the sale or sharing of your personal information and of targeted advertising, and the right not to receive discriminatory treatment for exercising these rights. You may use an authorized agent to make a request on your behalf, and we may ask the agent for proof of authorization and ask you to verify your identity. If we decline your request, you may appeal our decision by contacting us at contact@iqzsystems.com, and we will inform you of the outcome of the appeal within the period required by applicable law.

Applications developed by IQZ

IQZ develops software products, such as AVA, Excalibur and the IQZ App, and builds applications for its clients. IQZ does not collect any personal data through these applications for its own use.

Where an application has its own privacy notice, such as the privacy policy for the Excalibur visual for Microsoft Power BI, that notice applies to the application. This Privacy Policy applies to the website and to the activities described in it.

Children

The website is intended for a business audience and is not directed at children. We do not knowingly collect personal information from children under 16 years of age, or from individuals under 18 years of age in India. If you believe that a child has provided personal information to us, please contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. When we do, we will publish the updated policy on this page and change the date at the top of the policy. Where the changes are significant, we will take additional steps to inform you where the law requires us to do so.

Contact information

If you have any questions about this policy, or if you wish to exercise your rights or raise a grievance, please contact us using the following details:

IQZ Systems, LLC
Suite 204-260
Cumming, Georgia 30041
United States
Email: contact@iqzsystems.com
Telephone: 770-325-2456