Privacy Policy

Effective Date: July 9, 2026
Last Updated: July 9, 2026

CTG Tech (“CTG Tech,” “CTG,” “we,” “us,” or “our”) respects your privacy and is committed to handling personal information responsibly.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you:

  • Visit or interact with our website at www.ctgmanagedit.com and other websites that link to this Privacy Policy;
  • Submit a contact form, assessment request, support request, newsletter registration, or other online form;
  • Communicate with us by email, telephone, text message, online meeting, remote-support session, or other method;
  • Request information about or purchase our managed IT, cybersecurity, cloud, business continuity, VoIP, consulting, or related services;
  • Attend an event, participate in a promotion, or otherwise interact with CTG Tech in a business capacity; or
  • Act as a customer, prospective customer, authorized user, vendor, business partner, or job applicant.

This Privacy Policy applies when CTG Tech determines how and why personal information will be used. When we process information solely on behalf of a business customer, the customer’s privacy notice and our agreement with that customer generally govern that processing, as explained below.

1. Personal Information

For purposes of this Privacy Policy, “personal information” or “personal data” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an individual or household.

Personal information does not generally include information that has been aggregated or deidentified so that it cannot reasonably be linked to an identifiable individual.

2. CTG Tech’s Role as a Service Provider

As a managed IT services provider, CTG Tech may process information on behalf of its business customers. Depending on the services being provided, this information may include:

  • Customer employee or authorized-user contact information;
  • Usernames, account information, and access permissions;
  • Device, network, application, and system information;
  • Security logs, event logs, alerts, and threat telemetry;
  • Support tickets and related communications;
  • Remote-support session information;
  • Backup files, cloud-hosted information, and customer content;
  • Email, messaging, VoIP, call, or communications information when necessary to provide a contracted service;
  • Information concerning security incidents, vulnerabilities, system configurations, and remediation activities; and
  • Other information made available to CTG Tech through a customer’s systems or at a customer’s direction.

When CTG Tech processes this information solely to provide services to a customer, CTG Tech generally acts as a service provider or processor under the customer’s instructions. The customer determines why the information is processed and is responsible for providing appropriate privacy notices and obtaining any required permissions.

Requests relating to information controlled by one of our customers should ordinarily be directed to that customer. When required by law or contract, CTG Tech will assist the customer in responding to the request.

Customer information may also be governed by a master services agreement, data-processing agreement, business associate agreement, service order, or other contract. If a conflict exists between this Privacy Policy and an applicable customer agreement concerning information processed on the customer’s behalf, the customer agreement will control.

Where CTG Tech handles protected health information, financial information, or other regulated information for a customer, our responsibilities may also be governed by applicable law and contractual requirements. This Privacy Policy is not a HIPAA Notice of Privacy Practices and does not replace a business associate agreement or other industry-specific notice.

3. Information We Collect

The information we collect depends on how you interact with CTG Tech and which services are involved.

Information You Provide Directly

We may collect information you provide when you:

  • Complete a contact, consultation, assessment, quote, newsletter, referral, or support form;
  • Communicate with our sales, service, support, billing, or administrative teams;
  • Enter into a contract or create an account;
  • Submit or respond to a support ticket;
  • Participate in an assessment, meeting, survey, event, or promotion;
  • Apply for employment; or
  • Otherwise provide information to CTG Tech.

This information may include:

  • First and last name;
  • Business email address;
  • Telephone or mobile number;
  • Company name, job title, and professional information;
  • Business or mailing address;
  • Current IT systems, service needs, security requirements, and technology concerns;
  • Information about how you heard about CTG Tech;
  • Communications, messages, files, and attachments you provide;
  • Marketing and communication preferences;
  • Account and authorized-user information;
  • Contract, billing, and transaction information;
  • Information included in support requests or remote-support sessions; and
  • Employment history, résumé information, and other application materials.

Payment card information may be collected directly by a third-party payment processor. In those circumstances, CTG Tech may receive limited transaction information, such as payment status, rather than complete payment card details.

Information Collected Automatically

When you visit our website or use an online service, we or our service providers may automatically collect information such as:

  • Internet Protocol address;
  • Browser type and version;
  • Device type, operating system, and device identifiers;
  • Approximate geographic location derived from an IP address;
  • Pages viewed and links selected;
  • Date and time of visits;
  • Time spent on pages;
  • Referring and exit pages;
  • Search terms or marketing campaigns that directed you to our website;
  • Form interactions and conversion information;
  • Cookie identifiers and similar online identifiers; and
  • Website performance, diagnostic, and error information.

We may collect this information through server logs, cookies, pixels, tags, analytics tools, advertising tools, and similar technologies.

Information Received from Other Sources

We may receive information from:

  • Our business customers and their authorized administrators;
  • Technology manufacturers, distributors, and channel partners;
  • Cloud, security, telecommunications, and software providers;
  • Referral sources and business partners;
  • Marketing, analytics, and advertising providers;
  • Fraud-prevention and threat-intelligence providers;
  • Publicly available business directories, professional websites, and social media platforms; and
  • Other parties that are legally permitted to provide the information to us.

We may combine information received from these sources with information collected directly from you.

Sensitive Personal Information

CTG Tech may process sensitive personal information when it is reasonably necessary to provide requested services, protect systems, meet legal or contractual requirements, or act under a customer’s instructions.

Depending on the circumstances, sensitive information may include account credentials, financial account information, precise system-location information, health-related information, communications content, security credentials, or other regulated information.

We do not use sensitive personal information to infer characteristics about individuals for unrelated marketing purposes.

4. How We Use Personal Information

We may use personal information to:

Provide and Manage Services

  • Respond to inquiries and assessment requests;
  • Prepare proposals, quotes, recommendations, and service plans;
  • Establish and administer customer accounts;
  • Deliver managed IT, cybersecurity, cloud, business continuity, VoIP, consulting, and support services;
  • Authenticate users and manage permissions;
  • Provide remote support and troubleshoot technical issues;
  • Monitor systems, networks, endpoints, applications, and cloud environments;
  • Maintain backups and support disaster-recovery activities;
  • Manage service requests, incidents, changes, and projects;
  • Process transactions and administer contracts; and
  • Communicate about accounts, services, maintenance, incidents, renewals, and other operational matters.

Protect Systems and Information

  • Detect, investigate, prevent, and respond to cybersecurity threats;
  • Identify suspicious activity, fraud, unauthorized access, or misuse;
  • Analyze security logs, alerts, and system telemetry;
  • Test and improve security controls;
  • Maintain business continuity and disaster-recovery capabilities;
  • Protect CTG Tech, our customers, users, and third parties; and
  • Enforce our contracts, policies, and legal rights.

Automated tools, which may include machine-learning or artificial-intelligence-supported systems, may be used to evaluate security telemetry, identify anomalies, prioritize alerts, and improve the delivery of services. We do not use personal information collected through our website to make decisions that produce legal or similarly significant effects concerning an individual unless we provide any notice and choices required by law.

Operate and Improve Our Business

  • Maintain business and customer records;
  • Administer billing, accounting, auditing, and reporting;
  • Monitor website and service performance;
  • Understand how visitors use our website;
  • Improve our website, communications, and services;
  • Develop new services and capabilities;
  • Conduct internal analysis and business planning;
  • Train personnel and maintain quality standards; and
  • Create aggregated or deidentified information.

Communicate and Market

  • Send requested information;
  • Provide newsletters, technology updates, educational content, invitations, and information about our services;
  • Personalize communications;
  • Measure the effectiveness of marketing campaigns; and
  • Follow up concerning services in which you or your organization may have an interest.

You may unsubscribe from marketing emails at any time by using the unsubscribe link in the message or contacting us. Even after you unsubscribe from marketing, we may continue to send nonpromotional communications concerning an account, contract, support request, security issue, or existing business relationship.

Meet Legal and Contractual Requirements

  • Comply with applicable laws, regulations, subpoenas, court orders, and lawful government requests;
  • Satisfy tax, accounting, employment, and recordkeeping requirements;
  • Exercise or defend legal claims;
  • Conduct due diligence relating to a business transaction; and
  • Fulfill other purposes disclosed when information is collected or authorized by you.

5. Legal Bases for Processing

Where applicable law requires a legal basis for processing personal information, CTG Tech may rely on:

  • Performance of a contract or steps requested before entering into a contract;
  • Our legitimate interests in operating, securing, supporting, and improving our business and services;
  • Your consent;
  • Compliance with a legal obligation;
  • Protection of the rights, safety, or vital interests of CTG Tech, our customers, users, or others; or
  • Another basis permitted by applicable law.

Where processing is based on consent, you may withdraw that consent, subject to applicable legal and contractual limitations. Withdrawing consent does not affect processing that occurred before the withdrawal.

6. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients.

Service Providers and Subcontractors

We may use companies that help us operate our business and deliver services, including providers of:

  • Website hosting and content delivery;
  • Cloud storage and computing;
  • Customer relationship management;
  • Email and newsletter delivery;
  • Help desk, ticketing, and remote-support systems;
  • Remote monitoring and management;
  • Endpoint protection, threat detection, and cybersecurity;
  • Backup and disaster recovery;
  • Telecommunications, VoIP, and messaging;
  • Payment processing and billing;
  • Data analytics and reporting;
  • Marketing and advertising;
  • Professional services; and
  • Data center, hardware, software, and infrastructure services.

These providers are permitted to access information only as reasonably necessary to perform services for CTG Tech or our customers and are subject to appropriate contractual requirements.

Technology Partners

We may disclose information to software publishers, hardware manufacturers, distributors, cloud providers, telecommunications providers, cybersecurity vendors, and other technology partners when necessary to:

  • Obtain pricing or licensing;
  • Provision or support a product or service;
  • Resolve a technical issue;
  • Register warranties;
  • Respond to a security incident; or
  • Fulfill a customer’s request.

Professional Advisers

We may disclose information to attorneys, accountants, auditors, insurers, consultants, and other professional advisers when reasonably necessary for their services.

Legal and Safety Disclosures

We may disclose information when we reasonably believe disclosure is necessary to:

  • Comply with law, regulation, legal process, or a lawful government request;
  • Protect the rights, property, systems, or safety of CTG Tech, our customers, users, or others;
  • Investigate fraud, abuse, security incidents, or violations of an agreement;
  • Respond to an emergency; or
  • Establish, exercise, or defend legal claims.

Business Transactions

Information may be disclosed or transferred in connection with a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or other business transaction. Any recipient will be expected to handle the information in a manner consistent with applicable law.

At Your Direction

We may disclose information with your consent, at your direction, or as otherwise described when the information is collected.

CTG Tech does not use personal information contained in customer systems or customer backups for CTG Tech’s independent advertising purposes.

7. Sale, Sharing, and Targeted Advertising

CTG Tech does not sell personal information to third parties for monetary consideration.

We may use analytics, advertising, or marketing providers that receive online identifiers, device information, or website activity. Under certain state privacy laws, some of these disclosures may be considered “sharing,” “targeted advertising,” or a “sale,” even when no money is exchanged.

Where applicable law provides an opt-out right, you may submit an opt-out request using the contact information in the “Your Privacy Rights” section. Where a cookie preference tool is available on our website, you may also use that tool to manage nonessential cookies.

We do not knowingly sell or share the personal information of children under 13.

8. Cookies and Similar Technologies

Our website may use cookies, pixels, tags, local storage, and similar technologies.

These technologies may include:

Strictly Necessary Technologies

These technologies support basic website functions, security, fraud prevention, form submission, and user-requested features.

Functional Technologies

These technologies remember preferences and improve website functionality.

Analytics Technologies

These technologies help us understand website traffic, visitor interactions, page performance, and how visitors locate our website.

Advertising Technologies

These technologies may help us measure advertising campaigns, understand whether an advertisement resulted in a visit or inquiry, and present more relevant advertising.

Some technologies are placed by third parties and are governed by those parties’ privacy policies.

You can generally manage cookies through your browser settings. Blocking certain cookies may affect website functionality. Where our website provides a cookie preference tool, you may use it to manage available preferences.

9. Email, Telephone, and Text Communications

We may contact you by email or telephone in response to an inquiry, concerning an existing business relationship, or where otherwise permitted by law.

Where CTG Tech offers text-message communications and you provide the required consent:

  • We may use your mobile number to provide the messages you requested;
  • Consent to marketing text messages is not a condition of purchasing services;
  • Message and data rates may apply;
  • Message frequency may vary;
  • You may reply STOP to opt out or HELP for assistance; and
  • Mobile opt-in information and consent records will not be sold or disclosed to third parties for their independent marketing purposes.

We may disclose mobile information to telecommunications providers and other service providers as necessary to deliver requested messages and administer the messaging program.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

  • Provide requested services;
  • Maintain an active business relationship;
  • Fulfill contractual commitments;
  • Comply with legal, accounting, tax, and regulatory obligations;
  • Resolve disputes;
  • Maintain security and fraud-prevention records;
  • Enforce agreements; and
  • Establish or defend legal claims.

Retention periods vary depending on the nature of the information, the services involved, legal requirements, the sensitivity of the information, and the risk associated with continued retention.

Information processed on behalf of a customer is retained according to the applicable customer agreement, the customer’s instructions, service configuration, backup cycle, and legal requirements.

Some information may remain temporarily in backups or disaster-recovery systems after it is removed from active systems. Such information will remain protected and will be deleted or overwritten according to the applicable backup schedule, unless retention is legally required.

We may retain aggregated or deidentified information for legitimate business purposes where permitted by law.

11. Information Security

CTG Tech uses administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

Safeguards are selected based on the nature and sensitivity of the information and may include:

  • Access controls and authentication;
  • Role-based or least-privilege access;
  • Encryption where appropriate;
  • Network, endpoint, and security monitoring;
  • Logging and incident-response procedures;
  • Backup and business-continuity measures;
  • Employee confidentiality and security training;
  • Vendor and service-provider controls; and
  • Policies governing information handling and disposal.

No system, network, transmission method, or storage platform can be guaranteed to be completely secure. You should use appropriate safeguards when sending sensitive information and should not submit passwords, financial account numbers, protected health information, or other highly sensitive information through a general website contact form unless specifically requested through an approved secure method.

If CTG Tech becomes aware of a security incident involving personal information, we will investigate and provide notifications as required by applicable law and contract.

12. Your Privacy Rights

Depending on where you live and subject to applicable exceptions, you may have the right to:

  • Confirm whether we process your personal information;
  • Access personal information we maintain about you;
  • Correct inaccurate personal information;
  • Request deletion of personal information;
  • Obtain a portable copy of certain personal information;
  • Opt out of the sale of personal information;
  • Opt out of sharing for cross-context behavioral advertising or targeted advertising;
  • Opt out of certain profiling or automated decision-making activities;
  • Limit certain uses or disclosures of sensitive personal information;
  • Withdraw consent where processing is based on consent;
  • Object to or restrict certain processing;
  • Appeal a decision concerning a privacy request; and
  • Receive equal service and pricing without unlawful discrimination for exercising your privacy rights.

These rights are not absolute. We may retain or continue processing information where permitted or required for purposes such as completing a transaction, providing requested services, maintaining security, exercising legal rights, complying with law, or fulfilling a contract.

How to Submit a Request

You may submit a privacy request by:

  • Emailing contactus@ctgtech.com with “Privacy Request” in the subject line;
  • Calling (817) 557-4091; or
  • Using the contact form on our website and identifying the request as a privacy request.

Please describe the right you wish to exercise and provide sufficient information for us to understand and respond to the request.

Verification

We may need to verify your identity before completing a request. Verification may require confirmation of your email address, telephone number, business relationship, account information, or other information reasonably necessary to prevent unauthorized access or deletion.

We will use information submitted for verification only to evaluate and fulfill the request.

Authorized Agents

Where permitted by law, you may designate an authorized agent to submit a request on your behalf. We may require proof of the agent’s authority and may need to verify your identity directly.

Appeals

If we deny a privacy request and applicable law provides a right to appeal, you may appeal by replying to our decision or emailing contactus@ctgtech.com with “Privacy Request Appeal” in the subject line. Include enough information for us to identify the original request and explain why you believe the decision should be reconsidered.

Customer-Controlled Information

When your request concerns information CTG Tech processes solely on behalf of your employer or another CTG Tech customer, please submit the request directly to that organization. We will assist the organization as required by applicable law or contract.

13. Additional U.S. State Disclosures

During the preceding 12 months, CTG Tech may have collected the categories of personal information described in this Privacy Policy, including:

  • Identifiers and contact information;
  • Customer and account records;
  • Commercial and transaction information;
  • Internet, network, and electronic activity;
  • Approximate geolocation information;
  • Professional or employment-related information;
  • Communications and support information;
  • Audio, visual, or electronic information where applicable;
  • Inferences concerning business technology needs; and
  • Sensitive personal information when necessary to provide a service or comply with a legal or contractual requirement.

The sources, business purposes, and categories of recipients for this information are described in the sections above.

We do not sell personal information for monetary consideration. We may disclose online activity and identifiers to analytics or advertising providers in ways that could be considered sharing or targeted advertising under certain state laws.

Residents of Texas, California, and other states with comprehensive privacy laws may have the privacy rights described in Section 12, subject to whether the applicable law applies to CTG Tech and to any statutory exemptions.

14. International Visitors

CTG Tech is based in the United States. Information collected through our website and services may be stored or processed in the United States and in other locations where our service providers operate.

Privacy laws in those locations may differ from the laws where you live. Where required, we use appropriate safeguards for international transfers of personal information.

15. Children’s Privacy

Our website and services are intended for businesses and are not directed to children under 13.

We do not knowingly collect personal information directly from children under 13 through our website. If we learn that a child under 13 has submitted personal information without appropriate authorization, we will take reasonable steps to delete it.

A parent or guardian who believes a child has provided personal information to CTG Tech may contact us using the information below.

16. Third-Party Websites and Services

Our website may contain links to websites, portals, social media platforms, software, and services operated by third parties.

CTG Tech does not control the privacy practices of those third parties. This Privacy Policy does not apply to information collected directly by a third party, and we encourage you to review the third party’s privacy notice before providing information.

17. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, technology, business practices, or legal requirements.

When we make changes, we will post the revised Privacy Policy on this page and update the “Last Updated” date. If changes materially affect how we use personal information, we may provide additional notice where required by law.

18. Contact CTG Tech

Questions, concerns, complaints, or requests relating to this Privacy Policy may be directed to:

CTG Tech
1306 Norwood Drive
Bedford, Texas 76022

Email: contactus@ctgtech.com
Telephone: (817) 557-4091
Website: www.ctgmanagedit.com

You may also contact our Amarillo office at:

509 S. Arthur Street, Suite 200
Amarillo, Texas 79102
Telephone: (806) 355-3316