Privacy Policy
How The Network Group collects, uses, and protects your information.
Privacy Policy
The Network Group LLC (“The Network Group,” “we,” “us,” or “our”) respects the privacy of individuals who visit our websites, submit inquiries, communicate with us electronically, or otherwise interact with our business.
This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information and personal data.
This Privacy Policy applies to our public websites and related online interactions unless a separate written privacy or data-processing agreement applies.
1. Scope
This Privacy Policy applies primarily to personal information collected through:
- Our websites;
- Contact forms;
- Service-request forms;
- Email communications;
- Telephone or other electronic communications;
- Online scheduling or inquiry systems;
- Marketing or informational communications; and
- Other online services that expressly reference this Privacy Policy.
This Privacy Policy does not replace the confidentiality, data-protection, cybersecurity, or data-processing obligations contained in an executed Master Services Agreement (“MSA”), Statement of Work (“SOW”), Service Schedule, Data Protection Addendum (“DPA”), Business Associate Agreement (“BAA”), or other written customer agreement.
Where The Network Group processes personal data solely on behalf of a business customer and under that customer's documented instructions, the applicable customer agreement and DPA govern that processing.
2. Information We May Collect
Depending on how you interact with us, we may collect:
2.1 Contact Information
- Name;
- Business name;
- Job title;
- Business address;
- Email address;
- Telephone number; and
- Other contact information you voluntarily provide.
2.2 Service and Technical Information
When you request or receive IT Services, we may process information necessary to provide those Services, including:
- Usernames;
- Workstation or device identifiers;
- IP addresses;
- Network information;
- System and application information;
- Support-ticket information;
- Configuration information;
- Error logs;
- Device information;
- Service history;
- Vendor information; and
- Other technical information necessary to diagnose or support Customer Systems.
2.3 Communications
We may retain:
- Emails;
- Service requests;
- Support tickets;
- Meeting records;
- Customer correspondence;
- Notes concerning Services; and
- Other communications relating to our business relationship.
2.4 Website and Device Information
Our website or hosting providers may automatically receive information such as:
- IP address;
- Browser type;
- Operating system;
- Device type;
- Referring website;
- Pages viewed;
- General usage information;
- Date and time of access; and
- Other technical information made available through normal website operation.
2.5 Cookies and Similar Technologies
We or our website providers may use cookies, pixels, analytics technologies, session technologies, or similar mechanisms. These technologies may be used to:
- Operate the website;
- Maintain functionality;
- Understand website usage;
- Improve website performance;
- Detect security issues; and
- Measure marketing or communications effectiveness where applicable.
The specific technologies used may change as the website and its service providers change.
3. How We Use Personal Information
We may use personal information for legitimate business purposes, including:
- Responding to inquiries;
- Providing requested Services;
- Managing customer relationships;
- Scheduling appointments;
- Providing technical support;
- Managing service requests;
- Processing transactions;
- Sending administrative communications;
- Providing quotes and proposals;
- Maintaining business and technical records;
- Protecting systems and information;
- Detecting fraud, abuse, or security incidents;
- Troubleshooting technical problems;
- Improving our website and Services;
- Communicating about Services or relevant business matters;
- Complying with legal obligations;
- Establishing, exercising, or defending legal claims; and
- Other purposes reasonably necessary to operate our business.
We will not process personal data for materially incompatible purposes that are not reasonably necessary to the disclosed purposes without obtaining any consent required by applicable law.
4. Business Customer Data
Much of The Network Group's business involves providing IT Services to businesses.
When we process personal data contained within a Customer's systems solely to provide contracted Services, we generally act as a service provider or processor on behalf of that Customer rather than as the independent decision-maker for that data.
The Customer remains responsible for establishing the purposes for which such Customer Data is processed.
Our access to Customer Systems is limited by the applicable MSA, SOW, Service Schedule, DPA, and Customer instructions.
5. Purposes for Processing Customer-Controlled Data
Where The Network Group acts as a processor or service provider, processing may include:
- Troubleshooting;
- System administration;
- Network administration;
- Cloud administration;
- Endpoint management;
- Backup administration;
- Security monitoring;
- Software and hardware deployment;
- Identity and access administration;
- Data migration;
- Vendor coordination;
- Technical consulting;
- Incident response;
- System restoration; and
- Other Services expressly authorized by Customer.
We do not use Customer-controlled data for independent commercial purposes unrelated to the contracted Services except as permitted by the applicable agreement or applicable law.
6. Information Sharing
We may disclose personal information to:
- Service providers that support our business;
- Technology and cloud providers;
- Website-hosting providers;
- IT-management and support platforms;
- Payment processors;
- Professional advisers;
- Insurance providers;
- Government authorities where legally required;
- Law-enforcement authorities where legally required or permitted;
- Vendors where reasonably necessary to provide requested Services; and
- A successor, purchaser, or other party involved in a merger, acquisition, reorganization, financing, or sale of assets.
Service providers receiving information on our behalf are expected to use the information only for authorized purposes and to maintain appropriate safeguards.
7. Sale and Targeted Advertising
The Network Group does not sell personal data for monetary consideration as part of its ordinary business operations.
Unless otherwise expressly disclosed in this Privacy Policy:
- We do not sell personal data for targeted advertising purposes;
- We do not maintain a business model based on selling personal information;
- We do not provide personal information to data brokers for sale; and
- We do not use Customer Data obtained through managed IT Services for targeted advertising.
Third-party website services may independently collect information pursuant to their own terms and privacy policies.
8. Artificial Intelligence and Data
The Network Group may use artificial-intelligence-enabled tools in connection with legitimate business operations, including technical research, documentation, workflow automation, communications, support operations, or service improvement.
We do not intentionally submit Customer Confidential Information or Customer-controlled personal data to public or consumer AI systems unless authorized by the Customer, required to perform a contracted Service, or otherwise permitted under the applicable agreement.
Where AI-enabled technology is used as part of a Customer Service, the applicable MSA, SOW, Service Schedule, security requirements, and any applicable DPA govern permitted processing.
The Network Group does not sell personal data for the purpose of training third-party large language models.
The Network Group does not collect or use personal data to train large language models or other artificial-intelligence models. The Network Group does not collect precise geolocation data through this website.
Where applicable law requires disclosure concerning AI-related processing or model training, we will provide the disclosures required by law.
9. Sensitive Personal Data
We generally do not seek sensitive personal data through our public website. Users should not submit:
- Social Security numbers;
- Financial account credentials;
- Passwords;
- Authentication secrets;
- Health information;
- Biometric information;
- Genetic information;
- Precise geolocation information;
- Government identification numbers; or
- Other sensitive information
through an ordinary website contact form unless The Network Group specifically provides an approved secure mechanism.
Where sensitive personal data is processed on behalf of a Customer, the applicable Customer agreement and DPA govern that processing.
10. Legal Bases and Business Purposes
Depending on the circumstances and applicable law, we may process information because:
- You requested or authorized a Service;
- Processing is necessary to perform a contract;
- Processing is necessary to operate and secure our business;
- Processing is necessary to comply with legal obligations;
- Processing is reasonably necessary for legitimate business purposes;
- You provided consent where consent is required; or
- Another lawful basis permits the processing.
11. Data Minimization
We seek to collect only information reasonably necessary for the purposes described in this Policy.
We do not intentionally collect personal information merely because it is available.
12. Data Security
We maintain administrative, technical, and physical safeguards reasonably appropriate to the nature of information we maintain and the scale of our operations. Depending on the circumstances, safeguards may include:
- Access controls;
- Authentication controls;
- Multifactor authentication;
- Least-privilege access;
- Password-management controls;
- Encryption;
- Endpoint protection;
- Patch management;
- Secure remote access;
- Logging and monitoring;
- Backup procedures;
- Vendor-security controls;
- Physical safeguards; and
- Security incident procedures.
No security measure can eliminate all risk.
13. Data Retention
We retain personal information only for as long as reasonably necessary for:
- The purpose for which it was collected;
- Providing requested Services;
- Maintaining customer and business records;
- Security and fraud prevention;
- Legal or regulatory obligations;
- Accounting and tax requirements;
- Insurance requirements;
- Dispute resolution; or
- Other legitimate business purposes.
Retention periods vary depending on the nature of the information and the circumstances under which it was collected.
Backup copies may remain for a limited period after information is deleted from active systems.
14. Data Deletion
Where legally required and reasonably feasible, we will delete or de-identify personal information when the applicable retention period expires or a valid deletion request is accepted.
Deletion may not immediately remove information from:
- Disaster-recovery backups;
- Security logs;
- Archived records;
- Legal-hold materials; or
- Records that must be retained by law.
15. Connecticut Consumer Privacy Rights
Effective July 1, 2026, under amendments enacted by Public Act 25-113 (Senate Bill 1295), the CTDPA applies to entities that conduct business in Connecticut, or produce products or services targeted to Connecticut residents, and that during the preceding calendar year: (a) controlled or processed the personal data of at least 35,000 Connecticut consumers (excluding personal data controlled or processed solely to complete a payment transaction); (b) controlled or processed Connecticut consumers' sensitive data, regardless of volume; or (c) offered Connecticut consumers' personal data for sale. The Network Group LLC does not represent that it meets these thresholds. To the extent the CTDPA or another applicable privacy law does apply to The Network Group LLC, Connecticut residents may have rights including:
- Access to personal data;
- Correction of inaccurate personal data;
- Deletion of personal data;
- Data portability;
- Information concerning certain disclosures or sales;
- Opting out of certain sales;
- Opting out of targeted advertising;
- Opting out of certain profiling; and
- Other rights provided by applicable law.
The CTDPA currently provides specified consumer rights and requires covered controllers to provide mechanisms for exercising those rights. Connecticut also requires covered controllers to honor qualifying universal opt-out preference signals.
16. How to Submit a Privacy Request
Privacy requests may be submitted to:
Privacy Contact: [email protected]
Business Address: The Network Group LLC, Bloomfield, Connecticut
A request should identify:
- The requesting individual;
- The nature of the request;
- The email address or other information sufficient to identify the applicable record; and
- Any information reasonably necessary to verify identity.
We may request additional information reasonably necessary to verify identity and prevent unauthorized disclosure.
17. Response to Privacy Requests
Where applicable law establishes a response deadline, we will comply with that deadline.
Under the CTDPA, covered controllers generally must respond to qualifying consumer requests within forty-five (45) days, subject to permitted extensions and statutory exceptions.
We may decline or limit a request where permitted or required by law, including where compliance would interfere with legitimate security, fraud-prevention, legal, contractual, or other protected activities.
18. Appeals
Where applicable law provides a right to appeal a privacy-request decision, instructions for submitting an appeal shall be provided with the response.
Under the CTDPA, covered controllers must provide an appeal mechanism and respond to qualifying appeals within the statutory period.
19. Children
Our website and Services are directed toward businesses and adults and are not intentionally directed toward children.
We do not knowingly solicit personal information from children through the website.
If we become aware that personal information was collected from a child in circumstances where applicable law requires parental consent or deletion, we will take appropriate action consistent with applicable law.
20. Global Privacy Control and Opt-Out Signals
Where required by applicable law, The Network Group will honor qualifying opt-out preference signals, including Global Privacy Control signals.
Connecticut currently requires covered controllers to honor qualifying universal opt-out preference signals.
21. Third-Party Websites
Our website may contain links to third-party websites.
This Privacy Policy does not govern third-party services.
Users should review the applicable third party's privacy policy before submitting personal information.
22. Service Providers
We may use third-party providers for:
- Website hosting;
- Domain services;
- Email;
- Cloud services;
- CRM;
- Scheduling;
- Payment processing;
- Analytics;
- Security;
- IT management;
- Communications;
- Document management; and
- Other business functions.
The identity of providers may change as our business evolves.
23. Business Transfers
If The Network Group is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, personal information may be transferred as part of that transaction, subject to applicable law.
24. Legal Disclosures
We may disclose information where reasonably necessary to:
- Comply with law;
- Respond to lawful requests;
- Protect rights or property;
- Protect the safety of individuals;
- Investigate fraud or abuse;
- Detect or respond to cybersecurity incidents; or
- Establish, exercise, or defend legal claims.
25. Changes to This Privacy Policy
We may update this Privacy Policy periodically.
When material changes are made, we may provide notice through the website or another appropriate method.
The “Last Updated” date identifies the current version.
26. No Absolute Security Guarantee
Although we use reasonable safeguards, no system, website, network, transmission, or storage method can be guaranteed to be completely secure.
Users transmit information electronically at their own risk.
27. Contact Information
The Network Group LLC
Bloomfield, Connecticut
Website: thenetworkgroupct.com
Privacy Contact: [email protected]