Privacy Notice

Organization: Igzibo Engineering Solutions, Inc.
Version: 1.1
Status: Living policy
Effective Date: September 16, 2026
Owner: Igzibo Engineering Solutions, Inc.
Review Cycle: At least annually and after material changes to privacy law, business operations, data practices, technology, or services.

1. Purpose

This Privacy Notice explains how Igzibo Engineering Solutions, Inc. may collect, use, disclose, retain, and protect personal information in connection with its website, business operations, recruiting activities, professional services, research and development activities, and relationships with clients, vendors, contractors, and other business contacts.

This notice is intended to describe Igzibo's general privacy practices. Specific services or relationships may be governed by additional notices, contracts, data-processing agreements, or legally required disclosures.

2. Scope

This notice applies to personal information processed by Igzibo in connection with:

• Visitors to Igzibo websites.
• People who contact Igzibo.
• Clients and prospective clients.
• Candidates and applicants, subject to the Candidate and Applicant Privacy Notice.
• Employees and contractors, subject to applicable workforce notices and agreements.
• Vendors, suppliers, recruiters, and business partners.
• Individuals whose information is provided to Igzibo by a client or business partner.
• Research, engineering, and professional-service activities.

This notice does not override contractual requirements or legally required privacy notices that apply to a particular activity.

Definitions

AI (Artificial Intelligence): A machine-based system capable of generating predictions, recommendations, decisions, content, or other outputs based on inputs.

Igzibo: Igzibo Engineering Solutions, Inc.

Personal Information: Information that identifies, relates to, describes, or can reasonably be linked to an identifiable individual, as defined by applicable law.

Processing: An operation performed on personal information, including collection, use, storage, disclosure, modification, or deletion.

Service Provider: A third party that processes information on behalf of Igzibo for an authorized business purpose.

Third Party: An external organization or individual that is not Igzibo.

3. Information Igzibo May Collect

Depending on the relationship and service, Igzibo may collect:

• Name and contact information.
• Professional and employment information.
• Company and job-title information.
• Information submitted through forms or communications.
• Recruiting and candidate information.
• Information necessary to establish and manage business relationships.
• Account and authentication information.
• Device, browser, network, and website-use information.
• Information contained in documents or materials voluntarily provided to Igzibo.
• Contractual, billing, and transaction information.
• Information needed to provide professional or technical services.
• Information provided by clients, vendors, recruiters, or other business partners.

Igzibo seeks to collect information reasonably necessary for legitimate business purposes.

4. Sources of Information

Igzibo may obtain personal information:

• Directly from the individual.
• From a client or prospective client.
• From a recruiting partner or staffing provider.
• From an employer or business partner.
• From publicly available professional sources.
• From service providers.
• Automatically through websites and technology services.
• From other sources when permitted by law.

5. How Igzibo Uses Personal Information

Igzibo may use personal information to:

• Respond to inquiries.
• Provide services.
• Manage client relationships.
• Recruit, evaluate, and communicate with candidates.
• Manage employees and contractors.
• Communicate with vendors and business partners.
• Administer contracts.
• Process payments and business transactions.
• Operate and secure technology systems.
• Detect, investigate, and respond to security incidents.
• Maintain business records.
• Conduct research and development.
• Improve business processes and services.
• Meet legal, regulatory, contractual, and compliance obligations.
• Protect Igzibo, clients, personnel, and other individuals.
• Establish, exercise, or defend legal rights.

Igzibo will not use personal information for unrelated purposes in a manner inconsistent with applicable requirements.

6. Artificial Intelligence and Automated Processing

Igzibo may use Artificial Intelligence (AI) and automated systems for authorized business purposes.

AI use is governed by the AI and Generative AI Usage Standard.

Igzibo does not authorize unrestricted submission of personal information to AI services. Sensitive information may only be processed by an AI service when the service and use case have been appropriately approved.

Where automated processing could materially affect an individual, Igzibo will apply appropriate human oversight and other requirements applicable to the activity.

7. How Igzibo Shares Personal Information

Igzibo may disclose personal information to:

• Clients and prospective clients when necessary for an authorized business purpose.
• Recruiting and staffing partners.
• Service providers and technology vendors.
• Professional advisers.
• Payment, accounting, payroll, and administrative providers.
• Security and technology providers.
• Government authorities or other parties when required or permitted by law.
• Parties involved in a corporate transaction, subject to appropriate protections.
• Other parties with the individual's authorization or as otherwise permitted by applicable law.

Igzibo seeks to limit disclosures to information reasonably necessary for the stated purpose.

8. Service Providers and Third Parties

Igzibo uses third-party services to operate its business.

Third-party technology and service providers are evaluated and managed according to the Technology and Third-Party Service Security Standard, based on the nature and risk of the service.

Where appropriate, contracts may establish confidentiality, security, data-processing, incident-notification, retention, deletion, and other requirements.

9. Data Security

Igzibo applies administrative, technical, and organizational safeguards appropriate to the nature and sensitivity of information.

The Data Classification and Handling Standard establishes information classification and handling requirements.

The Identity and Access Management Standard establishes access-control requirements.

The Security Incident Response Procedure establishes the process for responding to suspected or confirmed security incidents.

No security measure can eliminate all risk. Individuals should use reasonable care when submitting personal information and should promptly report suspected security or privacy incidents.

10. Data Retention

Igzibo retains personal information only as long as reasonably necessary for legitimate business, legal, contractual, operational, security, or other authorized purposes.

Retention may vary according to:

• The type of information.
• The purpose for processing.
• The relationship with the individual.
• Client or contractual requirements.
• Legal and regulatory requirements.
• Security and dispute-resolution needs.

Legal holds, investigations, and other mandatory preservation requirements may require information to be retained longer.

11. International Processing

Igzibo may use service providers, contractors, recruiters, or other business partners located in different jurisdictions.

Where personal information is transferred across jurisdictions, Igzibo will apply contractual, technical, organizational, or other safeguards appropriate to the circumstances and applicable law.

12. Individual Privacy Requests

Depending on applicable law and the individual's relationship with Igzibo, an individual may have rights concerning personal information, such as rights to:

• Request access.
• Request correction.
• Request deletion.
• Request information about processing.
• Object to or restrict certain processing.
• Request a copy of certain information.
• Withdraw consent where processing is based on consent.

These rights are not universal and may be subject to legal exceptions, contractual requirements, or other limitations.

Requests should be submitted using the contact method provided by Igzibo. Igzibo may need to verify the requester's identity before responding.

13. Marketing Communications

Igzibo may send business, recruiting, service, or other communications consistent with the applicable relationship and law.

Recipients may use available unsubscribe or preference mechanisms for marketing communications where applicable.

Transactional, security, legal, or service-related communications may continue when permitted or required.

14. Cookies and Website Technologies

Igzibo websites may use cookies, analytics, logs, or similar technologies.

These technologies may be used for:

• Website operation.
• Security.
• Performance.
• Usage measurement.
• Service improvement.
• Preferences.
• Other purposes described in applicable website notices.

Additional cookie or tracking information may be provided through a separate Cookie or Tracking Notice.

15. Children

Igzibo's business services are not directed to children.

Igzibo does not knowingly seek to collect personal information from children through its ordinary business operations where doing so would be inappropriate or prohibited by law.

16. Changes to This Notice

Igzibo may update this Privacy Notice as its business, technology, services, or legal requirements change.

The current version will be made available through the Igzibo website.

17. Contact

Privacy-related questions or requests should be directed to Igzibo through the contact information published on igzibo.com.

18. Relationship to Other Documents

This notice should be read together with applicable:

1. Candidate and Applicant Privacy Notice.
2. Workforce privacy notices.
3. Data Classification and Handling Standard.
4. Technology Acceptable Use Policy.
5. Identity and Access Management Standard.
6. AI and Generative AI Usage Standard.
7. Technology and Third-Party Service Security Standard.
8. Security Incident Response Procedure.
9. Client contracts and data-processing agreements.

Where applicable law or a binding contract establishes a stricter requirement, that requirement controls.

19. References and Research Basis

This notice was informed by:

• Federal Trade Commission, Consumer Privacy guidance
• Federal Trade Commission, Protecting Personal Information: A Guide for Business
• National Institute of Standards and Technology (NIST), Privacy Framework

These sources provide general guidance and do not replace applicable law or legal advice.

Version History