Privacy

We may obtain personal data directly from you and from various other sources, whether online (such as through the Website) or offline.

Personal data we collect online

We collect your personal data if you decide to engage in certain activities, such as:

• Ordering or registering products or services;
• Downloading software;
• Registering for events;
• Marketing or promotional activities;
• Accessing certain sections of the Website;
• Requesting white papers and other materials;
• Subscribing to newsletters or press distribution lists;
• Participating in online surveys, webinars, discussion groups, forums, or live chats;
• Entering contests; or
• Participating in our customer rewards program.

The personal data we collect online about you will generally include:

• Your contact details (such as your title, name, address, phone number, and email address);
• Your company and job title;
• Financial details (for example, details about any payments you have made to us and, where necessary, your bank details);
• Information about how you use our services;
• Information about how you use our Website (for example, traffic data, approximate location data, weblogs, and other communication data);
• Information about your computer (including, where available, your IP address, operating system, and browser type);
• Other details relevant to a specific product or service; and
• Information collected via our customer rewards program, such as points collected, rewards claimed, and content posted on the platform.

Customer data and product telemetry

Certain DataCore products may transmit telemetry and diagnostic information to DataCore to support the operation, maintenance, security, and support of those products. The nature of this information may vary by product, version, configuration, and support context and may include technical identifiers, usage information, or other support-related or diagnostic data. Product telemetry is not intended to collect customer content. Where telemetry or diagnostic information includes personal data, we process it in accordance with this Privacy Policy and applicable agreements. We do not intentionally collect sensitive personal information except where necessary to process transactions, provide requested services, or otherwise as permitted by applicable law.

If you choose not to supply some or all of your personal data, we may be unable to provide you with the products and services you requested, or provide you with access to certain sections or functionalities of the Website that we make available to registered users. There is still some publicly available content on the Website you can use without registration.

Personal data we collect offline

In addition to the personal data described above, we may also collect personal data provided to us offline in a variety of ways.

For instance, we may collect contact details of prospective customers or other persons at events such as trade shows (for example, by collecting business cards or asking people to sign up for marketing and other information from DataCore).

We may also collect information from customers in connection with providing support, consulting, and professional services to them. Such information may include personal data about individuals within the customer’s organization (for example, a staff member’s contact details).

We collect contact data of potential customers and the staff of potential customers from partners and other organizations that have legal authority to share the personal data with us.

The personal data we collect offline about you will generally include your contact details; your company and job title; financial details where necessary; correspondence with you; information about how you or your organization use our services; and other details relevant to a specific product or service.

We may use the personal data we collect to record and support your participation in the activities you select and to administer your relationship with us. For instance, we may use such personal data to:

• Provide products or services you request;
• Register your license and rights, if any, to technical support, upgrade discounts, or other benefits available to registered users;
• Contact you regarding a contest you decide to enter or prizes awarded;
• Meet our contractual obligations towards you;
• Enable you to participate in marketing, advocacy, or promotional programs;
• Contact you and make you aware of other products, information, and services that we believe may be of interest to you (subject to your consent and ability to unsubscribe as described below);
• Process and maintain a record of your transactions;
• Respond to your questions and comments and provide customer support;
• Operate, evaluate, and improve our business and the products and services we offer;
• Run our customer rewards program;
• Analyze and enhance our marketing communications and strategies (including by identifying when emails we sent have been received and read);
• Analyze trends and statistics regarding visitors’ use of the Website;
• Protect against and prevent fraud or violations of our terms of sale; and
• Comply with applicable legal requirements.

If we intend to process your personal data in other ways, we will provide specific notice at the time of collection.

In addition, subject to your ability to object as described below, we may use personal data collected on the Website to build user profiles. If you decide to fill out a web form or click on a traceable link, we may associate your browsing activity on the Website with your profile, which can include your name, email address, and company name. We may use such profiles for various purposes, including advertising, market research, sales, and Website design. You can opt out of this use of your personal data as described in ”Do Not Sell or Share My Personal Information” below, or by emailing info@datacore.com.

Contract

Where we have an agreement with you as an individual, or in order to enter into an agreement with you, we will use your personal information where necessary for the purposes of that agreement. If you do not provide us with enough personal information for the purposes of the agreement, we may not be able to enter into or fulfill our obligations to you.

Legitimate interests

In many situations we will not have an agreement with you as an individual. Where we do not, and we have not asked for your consent, our ground for using your personal information will usually be the legitimate interests of our business. We will always consider your rights and privacy before using your personal data for our legitimate interests, and where your rights or privacy override our business interests, we will not use your personal data.

Direct marketing

Where permitted by applicable law, we may send direct marketing communications to existing customers concerning our own similar products and services, provided that we offered an opportunity to opt out when the relevant contact details were collected and provide an opportunity to unsubscribe in each communication. In other circumstances, we will obtain consent where required by applicable law. You may unsubscribe at any time, and all marketing communications will explain how to decline further communications.

Consent

There may be other specific situations where the appropriate ground for us to use your personal data is your consent. We will always make you aware when we are relying on your consent, and you have the right to withdraw your consent at any time.

Legal reasons

Separately from our business purposes, we will also use your personal information where we have a legal obligation to do so — for example, if a regulator or official authority asks us for it. In very limited situations we may also use your personal information to exercise our legal rights, including in relation to legal proceedings.

Purpose limitation

If we collect your personal data for one purpose and then intend to use it for a different, incompatible purpose, we will seek your consent and/or inform you where necessary or appropriate.

Choice

Where we intend to disclose your personal data to a third party acting as a separate controller, or to use it for a purpose that is materially different from the purpose for which it was collected or subsequently authorized, we will offer you the opportunity to opt out — or, for sensitive personal data, to opt in — as required by applicable law. You can exercise these choices by contacting us as described below, by using the marketing opt-out mechanisms, or through the “Do Not Sell or Share My Personal Information” options.

Business partners

We do not disclose personal data about you except as described in this Privacy Policy. Where necessary as part of our business, we may share personal data with our affiliates, distributors, resellers, and other trusted business partners.

We may also share your personal data with vendors and third-party service providers who assist us with the operation of the Website, our sales and services, and our business in general — for example, IT service providers and professional advisors such as lawyers, accountants, and auditors. We will always take appropriate steps to ensure that any third party with which we share your personal data keeps it secure.

Processors

We use a number of organizations to carry out a range of services on behalf of DataCore (“processors”). Our processors must handle your personal data in accordance with data protection law, and we have agreements in place so that they only handle your personal data as we have instructed them to.

Where DataCore processes personal data in connection with support or professional services, including through telemetry or diagnostic information, such personal data is handled in accordance with the applicable agreement and DataCore’s legal obligations.

Legal reasons

We may also share your personal information with regulators or official authorities where required or where necessary to exercise our legal rights.

Business development

As our business evolves, we may sell, transfer, or otherwise share some or all of our assets, including personal data, in connection with a merger, reorganization, or sale of assets, or in the event of bankruptcy. In such an event, the information collected about you, whether personal data or anonymous data, may be one of the assets transferred.

How long we keep personal information

We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, including to provide our products and services, maintain business and customer relationships, comply with legal obligations, resolve disputes, and exercise or defend legal rights. Transactional, contractual, support, tax, accounting, and legal records are generally retained for up to six (6) years after the relevant transaction or relationship, unless a longer retention period is required or appropriate under applicable law. Other personal information, including marketing information, prospect records, Website analytics, cookie-derived information, and user profiles, is retained only for the period appropriate to the relevant purpose and in accordance with our retention practices. In determining the appropriate retention period, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process it, whether those purposes can be achieved through other means, and applicable legal, regulatory, and limitation-period requirements. When personal information is no longer required, we will delete, anonymize, or securely isolate it in accordance with our retention practices and applicable law.

International transfers of personal data

Some of our offices, processors, and business partners are located outside the jurisdiction in which personal data was collected, including outside the European Economic Area, United Kingdom, and Switzerland. Where applicable law requires safeguards for an international transfer, we use appropriate transfer mechanisms, which may include adequacy decisions, the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Agreement or UK Addendum to the Standard Contractual Clauses, binding corporate rules, or other approved mechanisms. You may request more information about the safeguards we rely on, and/or request a copy of them, by contacting us using the details set out below.

How we protect your personal information

We maintain administrative, technical, and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, or destruction. These may include access controls, authentication, encryption where appropriate, network monitoring, logging, vulnerability management, and regular review of our practices, and we require our processors to maintain appropriate safeguards. Information about our security and compliance program is available through the DataCore Trust Center. No method of transmission over the Internet or method of electronic storage is completely secure, so we cannot guarantee absolute security. In the event of a security incident involving personal data, we will act in accordance with applicable law, including notifying affected individuals or authorities where required.

When you visit the Website, we may collect certain information by automated means, such as cookies, web beacons, and other similar technologies (“cookies”). Cookies are text files that websites send to a visitor’s computer or other Internet-connected device. Cookies and similar technologies are widely used to make websites work, or work more efficiently, and to provide information to the owners of the site.

Most web browsers allow some control of most cookies through browser settings. You can manage non-essential cookies and, where applicable, exercise other privacy choices through the consent management interface available on our Website. This interface may appear as a banner, modal, side panel, or similar control and may use different labels depending on your location. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org. Where required by applicable law, we will obtain your consent before placing non-essential cookies on your device.

We use the following categories of cookies on our Website:

Essential Cookies

Strictly necessary to provide you with services available through our Website and to use some of its features, such as access to secure areas. Because these are strictly necessary, you cannot refuse them without impacting how our Website functions, though you can block or delete them by changing your browser settings.

Performance and Functionality Cookies

Used to enhance the performance and functionality of our Website but non-essential to its use. Without these cookies, certain functionality may become unavailable.

Analytics and Customization Cookies

Collect information used either in aggregate form to help us understand how our Website is used or how effective our marketing campaigns are, or to help us customize our Website for you.

Advertising (Targeting) Cookies

Used to make advertising messages more relevant to you and your interests, to prevent the same ad from continuously reappearing, to ensure ads are properly displayed, and in some cases to select advertisements based on your interests. Where these cookies constitute a “sale” or “sharing” under applicable law, you can opt out through the privacy or consent-management controls available on our Website, as described in “Do Not Sell or Share My Personal Information.”

Your rights

It is important that you are familiar with, and easily able to exercise, the following rights:

• The right to be informed that personal data relating to you is being used or stored (which is what this Privacy Policy is for);
• The right to access your personal data;
• The right to object to direct marketing;
• The right to object to the use of your personal data carried out on the ground of legitimate interests;
• The right to withdraw consent;
• The right to erasure of your personal data;
• The right of data portability;
• The right to have your personal data rectified if it is inaccurate;
• The right to have your personal data restricted or blocked from being used; and
• The right to complain to the relevant data protection authority.

These rights are not always absolute, and there may be situations in which you cannot exercise them or they are not relevant. To understand these rights you may wish to look at the websites of the European Data Protection Board and the national data protection authorities.

U.S. State Privacy Disclosures

Certain U.S. states provide their residents with specific rights regarding personal information. This section supplements the other information in this Privacy Policy and applies solely to residents of states whose laws provide such rights. Where the same rights or disclosures apply across multiple states, we describe them collectively to avoid unnecessary duplication.

California Residents (CCPA / CPRA)

This section applies to California residents whose personal information is processed by DataCore. California law requires businesses to disclose the categories of personal information collected, the purposes for which it is used, and the categories of third parties with whom it may be shared. These categories include identifiers, California Customer Records information, commercial and transaction information, internet or other electronic network activity information, device information, approximate geolocation information, professional or employment-related information, and inferred information, as described in the sections titled “Personal data we collect,” “How we use personal data,” and “Personal data we share,” and in the table below.

Each category of personal information identified above is retained only for as long as reasonably necessary for the disclosed purposes, using the criteria described in “How long we keep personal information.”

We do not sell personal information for monetary consideration. During the preceding twelve (12) months, the categories of personal information that may have been “sold” or “shared,” as those terms are defined under applicable U.S. state privacy laws, include identifiers, internet or other electronic network activity information, and inferred information disclosed to analytics and advertising partners for targeted advertising, campaign measurement, personalization, and related purposes. We may also disclose the categories of personal information described above to service providers and other recipients for the business purposes identified in the table. You may opt out as described in “Do Not Sell or Share My Personal Information.”

Right to data portability

You have the right to request that we provide personal information we hold about you in a portable and, to the extent technically feasible, readily usable format.

Right to know or request categories of personal information

You have the right to request that we provide details about the personal information we have collected about you, including the categories of personal information collected, the sources, the purposes, and the categories of third parties with whom it was shared or sold.

Right to opt out of the “selling” or “sharing” of personal information

You have a right to opt out of future “sales” or “sharing” of personal information, each as defined in the CCPA. The CCPA defines personal information to include internet or other electronic network activity information, which includes identifiers such as IP addresses, cookie IDs, and mobile IDs, and defines “sale” or “share” broadly to include simply making data available to third parties in some cases. We do not knowingly sell or share the personal data of minors under 16 years of age.

Do Not Sell or Share My Personal Information

We do not sell your personal information for monetary consideration. However, our use of analytics and advertising (targeting) cookies, and certain disclosures to advertising or business partners, may be considered a “sale” or “sharing” of personal information, or processing for “targeted advertising,” under certain U.S. state privacy laws. You may opt out, where applicable, through the privacy or consent-management controls available on our Website. Depending on your location, these controls may be labeled “Do Not Sell or Share My Personal Information,” “Your Privacy Choices,” “Cookie Preferences,” or similarly. You may also submit an opt-out request by emailing info@datacore.com.

Other California rights

Right to request correction. You have a right to request correction of inaccurate personal information.

Right to request deletion. You have a right to request that we delete personal information under certain circumstances, subject to exceptions (for example, information such as purchase history and invoices that must be retained for tax and other business purposes).

Right to limit use and disclosure of sensitive personal information. You have a right to limit our use and disclosure of sensitive personal information for purposes other than to provide the services or goods you request or as otherwise permitted by law. We do not use or disclose sensitive personal information for any such additional purposes.

Right to designate an authorized agent. You may designate an authorized agent to make a request on your behalf. We may require proof of authorization and may also require you to verify your identity directly with us.

Right against discrimination. You have a right not to be discriminated against for exercising your rights under the CCPA.

Right to notice. You have a right to receive notice of our practices at or before collection of personal data. This Privacy Policy, together with any supplemental or just-in-time notices presented at or before collection, serves as our notice at collection for purposes of the CCPA/CPRA.

To exercise any of these rights, please use the contact details below or email info@datacore.com.

Shine the Light Law

Under California’s “Shine the Light” law, California customers who provided personal information to us may request information about whether we have disclosed personal information to any third parties for their direct marketing purposes. You may request further information about our compliance by emailing info@datacore.com. We are required to respond to one request per customer per year, and we only respond to requests sent to this email address.

California residents under the age of 18 who are registered users of online sites, services, or applications have a right under California Business and Professions Code section 22581 to remove, or request removal of, content or information they have publicly posted. Please send a detailed description of the specific content you wish to have removed to info@datacore.com. Your request does not guarantee complete or comprehensive removal, and the law may not permit or require removal in certain circumstances.

Residents of Other U.S. States with Comprehensive Privacy Laws

Residents of U.S. states with applicable comprehensive or sector-specific consumer privacy laws may have additional rights under applicable state privacy laws. The scope of these rights may vary by state and may be subject to limitations or exceptions. To avoid unnecessary duplication, we describe them collectively below. DataCore will comply with applicable state privacy laws to the extent they apply to our processing of personal data.

Subject to applicable law, residents of these states may have the right to:

• Confirm whether we process personal data about you and access that data;
• Request correction of inaccuracies in your personal data;
• Request deletion of your personal data;
• Obtain a copy of your personal data in a portable and readily usable format;
• Opt out of the processing of personal data for purposes of targeted advertising;
• Opt out of the sale of personal data;
• Opt out of profiling in furtherance of decisions that produce legal or similarly significant effects; and
• Appeal a decision regarding a request to exercise your privacy rights. Where required by applicable law, you may also file a complaint with your State Attorney General.

Where such processing activities occur, DataCore will honor applicable opt-out requests in accordance with the requirements of the relevant state privacy law.

Requests to exercise these rights may be submitted by contacting us at info@datacore.com. We may take reasonable steps to verify your identity before responding. We will respond to verified consumer requests within forty-five (45) days of receipt, and where reasonably necessary may extend this period once by an additional forty-five (45) days, notifying you of the reason. If we decline to take action on your request, you may appeal by contacting us at info@datacore.com.

To the extent DataCore maintains deidentified data, DataCore will maintain and use such information in deidentified form and will not attempt to reidentify it except as permitted by applicable law, and will contractually require any recipients of such deidentified data to comply with the same obligations.

We will not discriminate against residents for exercising any rights described in this section. These rights do not extend to non-personal data.

Children and Young People’s Information

We do not knowingly collect personal information from children under the age of 13 or knowingly permit them to create accounts or use our services, and we comply with applicable privacy laws relating to minors, including laws that provide additional protections for individuals under the age of 16. If you have concerns about this Website or our products, wish to find out if your child has accessed our services, or want us to remove your child’s personal data from our servers, please write to info@datacore.com. If we discover that personal information has been provided by a child under the age of 13, we will take reasonable steps to delete such information in accordance with applicable laws.

Updates to this Privacy Policy

This Privacy Policy may be updated periodically to reflect changes in our personal data practices. We will post a notice on the Website of any significant changes and indicate at the bottom when it was most recently updated. Where required by applicable law, we will provide additional notice or obtain consent before using previously collected personal data for a materially different purpose.

Data protection officer

You may contact our data protection office via email: dataprotection@datacore.com.

How to contact us

If you have any questions about this Privacy Policy, they should be directed to DataCore through one of the feedback forms you will find on the Website, or by sending a notice by U.S. Mail to DataCore Software, 1901 Cypress Creek Road, Suite 200, Ft. Lauderdale, FL 33309, Attention: Director, Worldwide Demand Generation.

Updated: August 6, 2026