Privacy Policy

The Framework Group ("we," "us," "our," or "the Company") provides business and technology consulting, software engineering, web and mobile development, brand consulting, animation, network and security services, and managed support. This policy applies to information we collect through this website, our client and support portals, our chatbot and support tools, and in the course of delivering services to our clients.

It does not apply to third-party websites, platforms, or services that we link to or integrate with, which are governed by their own privacy policies. Where we process data on behalf of a client under a written agreement, that agreement and the client's own privacy notice govern that processing.

• •Information you give us: your name, email address, phone number, company name, role, project and business details, support ticket content, chat conversations with our assistant, questionnaire and intake responses, and any files or attachments you upload
• •Account information: the email address, name, company, and password you use to register for our client portal, together with the company or client record your account is authorized to act for
• •Information collected automatically: IP address, browser type and version, device type, operating system, referring page, pages viewed, links clicked, and the date and time of your visit
• •Payment information: billing name, email, invoice references, transaction identifiers, amounts, and payment status. Full payment card numbers are handled by our third-party payment provider and are not stored on our systems
• •Information from third parties: payment confirmations from our payment provider, and aggregate usage statistics from analytics providers

Portal passwords are stored in hashed form and are never stored or transmitted as readable text. Sign-in sessions use expiring session tokens, and access to client records is bound on our servers to the specific client account your login is authorized for, rather than to a company name typed into a form. We recommend you use a unique password of at least eight characters and never share your credentials.

• •to provide, deliver, and support the services you engage us for
• •to respond to enquiries, support tickets, chatbot conversations, and service requests
• •to create and administer your portal account and give you access to your invoices, quotes, projects, and tickets
• •to process payments, issue invoices and quotes, and maintain financial and tax records
• •to send service-related messages, including confirmations, project updates, invoice notices, and responses to your requests
• •to secure our website and systems, prevent fraud and abuse, and enforce rate limits on public forms
• •to maintain, troubleshoot, and improve our website, services, and knowledge base
• •to comply with legal, accounting, and regulatory obligations, and to enforce our agreements

We do not sell your personal information, and we do not use your confidential business information for purposes unrelated to your engagement.

Where data protection law requires a legal basis, we rely on: performance of a contract or steps taken at your request (delivering services, administering your account); our legitimate interests (operating, securing, and improving our business, provided your rights are not overridden); your consent (for optional cookies or marketing communications, which you may withdraw at any time); and compliance with legal obligations (tax, accounting, and record-keeping duties).

We use cookies and similar technologies for essential site functions, such as keeping you signed in to the portal and remembering preferences you set (including your accessibility settings), and for aggregate analytics that help us understand how the site is used. You can control or delete cookies through your browser settings. Blocking strictly necessary cookies may prevent parts of the portal from working. Where required by law, we will ask for your consent before setting non-essential cookies.

We share personal information only as needed to run our business and deliver your services, and only with parties bound to protect it. Recipients may include:

• •Service providers: cloud hosting, database, email delivery, file storage, analytics, and error-monitoring providers that operate our website and portals
• •Payment providers: our payment processor, which collects and handles payment card data and confirms transactions to us
• •Professional advisers: accountants, auditors, insurers, and legal advisers, where reasonably necessary
• •Authorities: law enforcement, regulators, or courts, where we are required by law or where disclosure is necessary to protect rights, safety, or property
• •Business transfers: a buyer or successor in connection with a merger, acquisition, financing, or sale of assets, subject to this policy

We keep personal information for as long as needed for the purposes described in this policy. General guidelines: account and engagement records are kept for the life of our relationship and then for the period required for tax, accounting, and contractual purposes; support tickets, quotes, invoices, and payment records are kept as business and financial records; chatbot and enquiry logs are kept for a limited period for quality, security, and follow-up purposes; and analytics data is retained in aggregate or for a limited period. We delete or anonymize information when it is no longer needed, unless we are required to retain it.

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including hashed passwords, expiring sessions, server-side access control that binds accounts to approved client records, encryption in transit, rate limiting on public endpoints, and restricting access to personnel and providers who need it to perform their work. No method of transmission or storage is completely secure, and we cannot guarantee absolute security; we will notify affected individuals and authorities of a reportable breach as required by applicable law.

We are based in the United States and serve clients in the United States, the United Kingdom, and elsewhere. Information you provide may be transferred to, stored in, and processed in the United States or other countries where we or our service providers operate. Where required, we use appropriate safeguards, such as contractual data protection terms with our providers, to protect information transferred internationally.

Depending on where you live, you may have the right to request access to the personal information we hold about you, to correct inaccurate information, to delete information, to restrict or object to certain processing, to receive a portable copy of information you provided, to withdraw consent, and to complain to your data protection authority. California residents have rights to know, access, correct, delete, and opt out of the sale or sharing of personal information; we do not sell or share personal information as those terms are defined by California law, and we will not discriminate against you for exercising your rights.

To exercise a right, email info@widgetfl.com. We will verify your identity before acting on a request, typically by confirming control of the email address associated with your account, and we will respond within the timeframe required by applicable law. You may also update much of your own information directly from your portal account.

Our website and services are intended for businesses and professional users. They are not directed to children, and we do not knowingly collect personal information from anyone under sixteen (16). If you believe a child has provided us information, contact us and we will delete it.

We may update this policy from time to time to reflect changes in our practices, services, or legal requirements. The revised version is posted on this page and the "Last updated" date above reflects the most recent revision. Material changes will be communicated where required by law.

Questions, requests, or concerns about privacy at The Framework Group can be directed to info@widgetfl.com or by phone at (850) 363-9780. This policy should be read together with our Terms of Service and our Refund, Return & Cancellation Policy.