This page provides general information regarding Nevtec’s privacy, security, and data protection practices. This page is for informational purposes only and does not constitute a legally binding agreement unless incorporated into a signed services contract.

Data Processing Agreement (DPA)

Nevtec may act as a Data Processor on behalf of its clients when providing managed IT services, monitoring, support, backup, and related technical services.

Where applicable under data protection laws, including GDPR, Nevtec will enter into a Data Processing Agreement (DPA) with contracted clients to define:

• The scope and purpose of data processing

• Roles and responsibilities of Controller and Processor

• Categories of personal data processed

• Security and confidentiality obligations

• Subprocessor engagement

• Data breach notification procedures

A formal DPA is available upon request for contracted clients.

California Privacy Rights (CCPA Notice)

If you are a California resident, you may have certain rights under the California Consumer Privacy Act (CCPA), including:

• The right to request disclosure of personal information collected
• The right to request deletion of personal information
• The right to request information regarding categories of data collected
• The right to non-discrimination for exercising privacy rights

Requests may be submitted to:

info@nevtec.com

Nevtec does not sell personal information.

Anti-Spam Policy

Nevtec is committed to responsible email communication practices.

• Marketing communications are sent only where there is consent or an existing business relationship.

• Each marketing email includes an option to unsubscribe.

• Nevtec complies with applicable anti-spam laws, including the CAN-SPAM Act.

Recipients may opt out of communications at any time.

Security Practices

Nevtec maintains reasonable administrative, technical, and physical safeguards designed to protect client and operational data.

Security practices may include:

• Encrypted data transmission (HTTPS/TLS)
• Access controls and role-based permissions
• Endpoint monitoring and system updates
• Backup and disaster recovery procedures
• Ongoing risk assessment and security review

Security measures are periodically reviewed and updated to align with industry best practices.

Responsible Disclosure

Nevtec welcomes responsible disclosure of security vulnerabilities.

If you believe you have identified a security vulnerability affecting Nevtec systems or services, please report it to:

info@nevtec.com

Please include sufficient detail to allow investigation. Nevtec will review reported issues in good faith and will not pursue legal action against individuals who act responsibly and in accordance with applicable law.

Contractual Agreements

Formal contractual documents governing client relationships may include:

• Master Services Agreement (MSA)
• Service Level Agreements (SLA)
• Data Processing Agreements (DPA)
• Confidentiality Agreements

These documents are provided to clients during onboarding or upon request and are not publicly published.