Privacy Policy

How we protect and handle your data in our managed open source services

Last updated: September 29, 2025

1. Introduction

CCLOPEN, a division of Copy Cat Group ("we," "us," or "our"), is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our managed open source services, including OpenShift, Red Hat Enterprise Linux, and Ansible automation platforms.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

  • Contact information (name, email address, phone number)
  • Company and professional details
  • Account credentials and authentication data
  • Billing and payment information
  • Communication preferences and history

2.2 Technical Data

We automatically collect technical information including:

  • System performance metrics and logs
  • Infrastructure usage statistics
  • Application deployment and configuration data
  • Security event logs and audit trails
  • Network traffic patterns and connectivity data

2.3 Service Usage Information

  • Service configuration and customization preferences
  • Resource utilization patterns
  • Support ticket interactions and communications
  • Training and consultation session records

3. How We Use Your Information

We use collected information for the following purposes:

3.1 Service Delivery

  • Provisioning and managing your managed open source environments
  • Monitoring system health and performance
  • Providing 24/7 technical support and maintenance
  • Implementing security patches and updates
  • Capacity planning and resource optimization

3.2 Business Operations

  • Processing payments and managing billing
  • Communicating about service updates and maintenance
  • Providing training and professional services
  • Analyzing usage patterns to improve services
  • Ensuring compliance with regulatory requirements

4. Data Sharing and Disclosure

4.1 Service Providers

We may share information with trusted third-party service providers who assist us in:

  • Cloud infrastructure hosting (AWS, Azure, Google Cloud)
  • Payment processing and billing services
  • Monitoring and security tools
  • Professional services and consulting partners

4.2 Legal Requirements

We may disclose information when required by law, regulation, or legal process, or to:

  • Comply with valid legal requests
  • Protect our rights and property
  • Ensure service security and integrity
  • Investigate potential violations of terms of service

4.3 Data Protection Commitment

We Never Sell Your Data

CCLOPEN does not sell, rent, or trade personal information to third parties for marketing purposes. Your data remains confidential and is used solely for service delivery and business operations.

5. Data Security Measures

We implement comprehensive security measures to protect your information:

5.1 Technical Safeguards

  • End-to-end encryption for data in transit and at rest
  • Multi-factor authentication for system access
  • Regular security assessments and penetration testing
  • Automated threat detection and response systems
  • Secure backup and disaster recovery procedures

5.2 Organizational Measures

  • Role-based access controls and principle of least privilege
  • Regular security training for all personnel
  • Incident response and breach notification procedures
  • Third-party security audits and compliance certifications

6. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

6.1 GDPR Rights (EU Residents)

  • Right to Access: Request copies of your personal data
  • Right to Rectification: Correct inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data
  • Right to Portability: Transfer your data to another service provider
  • Right to Object: Object to processing based on legitimate interests
  • Right to Restrict Processing: Limit how we process your data

6.2 CCPA Rights (California Residents)

  • Right to know what personal information is collected
  • Right to delete personal information
  • Right to opt-out of sale of personal information
  • Right to non-discrimination for exercising privacy rights

7. Data Retention

We retain personal information for as long as necessary to:

  • Provide ongoing services and support
  • Comply with legal and regulatory obligations
  • Resolve disputes and enforce agreements
  • Maintain business records for operational purposes

Typically, we retain data for the duration of your service agreement plus 7 years for business records, unless a shorter or longer retention period is required by law.

8. International Data Transfers

CCLOPEN may transfer your information to countries outside your residence for service delivery and business operations. We ensure appropriate safeguards are in place through:

  • Standard contractual clauses approved by regulatory authorities
  • Adequacy decisions by relevant data protection authorities
  • Binding corporate rules for intra-group transfers
  • Certification schemes and codes of conduct

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience and analyze service usage:

Essential Cookies

  • Authentication and session management
  • Security and fraud prevention
  • Service functionality and navigation

Analytics Cookies

  • Service usage statistics and performance metrics
  • Error tracking and debugging information
  • User experience optimization data

10. Third-Party Integrations

Our services may integrate with third-party platforms and tools. Each integration is governed by:

  • Strict data sharing agreements
  • Regular security and compliance reviews
  • Transparent disclosure of data flows
  • User control over integration permissions

11. Children's Privacy

CCLOPEN services are designed for business use and are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18.

12. Privacy Policy Updates

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will:

  • Notify you via email or service notifications of material changes
  • Provide at least 30 days' notice before significant changes take effect
  • Update the "Last Updated" date at the top of this policy
  • Maintain previous versions for your reference

13. Contact Information

For privacy-related questions, concerns, or to exercise your rights, please contact us:

Privacy Officer: privacy@copycatgroup.com
Data Protection Officer: dpo@copycatgroup.com
Phone: +254 709 873 000
Address: Encee Place, Muguga Green, Westlands, Nairobi, Kenya

By using CCLOPEN services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your information as described herein.