Last Updated September 12, 2025

Applicable to Technology Concepts & Design, Inc. and its U.S. entities, TCDI Acquisition, LLC and TCDI Advisory, LLC. which are all referred to collectively as TCDI in this Privacy Notice.

Our Privacy Notice explains what information we collect; why we collect it; how we handle your information; how we might use that information; and the various options and choices you have with respect to this Privacy Notice.  This is important information and we hope you will take time to read it carefully.

Information We Have and How We Use It

• Information we host. In the normal course of business and as further defined by our contract terms, TCDI hosts data provided by our clients, which may contain personal This data is provided by, and hosted for, clients who have engaged TCDI to provide data hosting services associated with legal technology support and services for legal discovery (ESI processing and document review & production), investigations, assessments, or litigation management. This data and information are collected to enable us to meet our contractual obligations and are used for purposes of performing the legal or investigatory processes for which clients have engaged TCDI’s assistance.
• Information users give us. TCDI collects a limited amount of personal information from client-approved and authorized users of our legal technology The personal information collected is required for us to comply with the legal obligations set forth in our contracts with our clients and is given voluntarily with the understanding that it will be used for user authentication and user verification of callers to our Client Support Center.
• Employee information. Employees of TCDI may be asked to provide certain personal information for use in the context of the employment relationship.
• Other information we collect. TCDI collects a limited amount of personal information from visitors to our website who are interested in our products and services. Information collected includes, but may not be limited to, name, position or role, email address, mailing address, company name and telephone The information collected is typically given on a voluntary basis and in accordance with visitors consent and used to facilitate our business operations and communications.  When you provide personal information, you agree that it may be used for administrative, operational, TCDI marketing, accounting, monitoring and security purposes.  TCDI also maintains an active CRM system containing a limited amount of personal information on current clients and prospects interested in our products and services.  This information includes, but may not be limited to, name, position or role, company, mailing address, email address, work address and phone numbers.

On our public website, we use cookies, Google Analytics and ZoomInfo to collect information about visitors.  The information collected includes, but may not be limited to:

• Date, time and length of visit
• Domain name/IP address
• Browser name and OS type
• Company name, location, industry, revenue and employee count
• Pages visited and for how long
• Visitor’s location
• Device type
• Demographics – Age, gender, and interests including pages visited in other Google platforms.
• Acquisition Data – How visitors came to TCDI. Was it via a search engine, social media, referral link from a TCDI marketing email or directly to TCDI.com.

We use this information for statistical analysis intended to help us improve the visitor experience to our website and when applicable for administrative, marketing, operational, accounting, monitoring and security purposes. Google analytics data is anonymous and in accordance with the user’s Google based permissions.  Users can change the type of data TCDI collects, through their Google profile. ZoomInfo data is also anonymous.

If you prefer not to allow us to collect this information, you can reject TCDI cookies or change your browser settings to disable cookies. You can also revoke cookies on this site by clicking this link: Revoke Consent

Forwarding and Sharing Information

• Information hosted for clients. TCDI does not sell, share, or otherwise disclose information received from clients outside of the need to use that information based on our contractual, legal obligations or the expressed client direction associated with the contracted services for which the information is a part.
• Client-user information. TCDI does not sell, share, or otherwise disclose personal information provided by users of our systems. Internal access to personal information is restricted to those with a legitimate business or legal need to have for uses associated with TCDI’s business purposes.
• Website visitors and CRM information. TCDI does not sell, share, or otherwise disclose personal information received from visitors to our public website or persons who have provided personal information retained in our CRM system for purposes beyond the business reasons for which it was collected.

We may share some personal information with third parties for whom we enlist services for the promotion of TCDI products and services or for the implementation of other communications related programs. These companies are obligated to protect your Personal Information and are restricted to using your information only for the purposes for which they have been hired.

• Accountability for Onward Transfer (Transfers to Third Parties not subject to an existing service agreement). TCDI will transfer personal information only when there has been a documented adequacy determination, or where TCDI has confirmed adequate privacy protections through standard data protection contract clauses.  If TCDI transfers personal information to a third party acting as an agent of TCDI, we will also require the third party to have adequate privacy protections in place through standard data protection contract clauses.
• Accountability for Onward Transfer (Transfers to Clients and Third Parties subject to an existing service agreement). TCDI will transfer personal information to and on behalf of clients and third parties with whom TCDI has an existing service agreement, as part of TCDI’s legal obligations and subject to TCDI’s standard contract provisions governing the processing that is necessary for purposes of legitimate interests pursued by the controller (client or third party).
• For legal obligations. TCDI may disclose personal information as reasonably necessary to meet applicable law, regulation, legal process or enforceable government request.

Protecting Information

TCDI maintains a commitment to information privacy and security. We employ reasonable and appropriate physical, technical and administrative safeguards in the process of protecting your information against loss, misuse, unauthorized access, unauthorized disclosure, alteration and destruction. We implement access controls and regularly train our people on data privacy and security practices.  We regularly review our information handling, storage and overall processing practices, including physical security measures, to guard against unauthorized access to systems and information.  Access to personal information by TCDI personnel is restricted to a need-to-have basis with access log reviews and access control reviews performed regularly.

Choice and Access

• Data we host. TCDI is a data processor for the data and information managed and hosted for clients.  We enter into binding agreements with our clients that delineate the obligations to protect the privacy and security of personal information.  As part of the legal obligations set forth in our standard agreements, our clients are responsible for issues associated with information being hosted and for ensuring that they disclose to us only the information for which they have a legal basis for doing so.  TCDI will work diligently to assist clients with access or correction requests as appropriate.
• Client Users of Client-Related Systems. TCDI strives to maintain accurate information retained on client-users of client systems.  If information needs to be updated, users can call the TCDI Support Center at 336-232-5884.
• Website cookies. To prevent the use of cookies, you can reject TCDI cookies or change your browser settings to disable You can also revoke cookies on this site by clicking this link: Revoke Consent
• Provided Information. If you would prefer not to give your information through our web contact form, you can call TCDI directly at (888) 823-2880 and ask for someone in business   If you have questions or need to correct information previously provided to us, contact us at privacy@tcdi.com.

EU-U.S. Data Privacy Framework and the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework

TCDI complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.  TCDI has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF.  TCDI has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF.  If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern.  To learn more about the Data Privacy Framework (DPF) Program, and to view our certification, please visit https://www.dataprivacyframework.gov/

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, TCDI commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) and the UK Information Commissioner’s Office (ICO) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of human resources data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF in the context of the employment relationship.

Employees of TCDI may be asked to provide certain personal information for use in the context of the employment relationship. TCDI agrees to work with the appropriate authorities as outlined below:

• TCDI receives or processes human resources data from the European Union for use in the context of the employment relationship under the EU-U.S. DPF and agrees to cooperate with the EU data protection authorities (DPAs) and comply with the advice given by such authorities with respect to this data.
• TCDI receives or processes human resources data from the UK for use in the context of the employment relationship under the UK Extension to the EU-U.S. DPF and agrees to cooperate with the UK Information Commissioner’s Office (UK ICO) and comply with the advice given by the UK ICO with respect to this data.
• TCDI receives or processes human resources data from Switzerland for use in the context of the employment relationship under the Swiss-U.S. DPF and agrees to cooperate with the Swiss Federal Data Protection and Information Commissioner (Swiss FDPIC) and comply with the advice given by the Swiss FDPIC with respect to this data

TCDI complies with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, for all onward transfers of personal data from the EU, UK and Switzerland, including the onward transfer liability provisions. TCDI remains responsible and liable under the EU-U.S. DPF Principles, the UK extension to the EU-U.S. DPF, and/or the Swiss-U.S. DPF Principles if third-party agents that it engages to process the personal data on its behalf do so in a manner inconsistent with the Principles unless TCDI proves that it is not responsible for the event giving rise to the damage.

Right to Access, Amend and Delete

Individuals have the right to access, amend, AND delete their personal data.

Choice

If personal data covered by this Privacy Policy is to be used for a new purpose that is materially different from that for which the personal data was originally collected or subsequently authorized, or is to be disclosed to a non-agent vendor third party in a manner not specified in this Policy, TCDI will provide you with an opportunity to choose whether to have your personal data so used or disclosed. Requests to opt out of such uses or disclosures of Personal Data should be sent as specified in the Questions or Concerns section below.

Certain personal data, such as information about medical or health conditions, racial or ethnic origin, political opinions, religious or philosophical beliefs, is considered “Sensitive Information” TCDI will not use Sensitive Personal Information for a purpose other than for which it was originally collected or subsequently authorized by the individual unless TCDI has received your affirmative and explicit consent (opt-in).

If You Have Questions or Concerns

TCDI takes seriously all questions and concerns regarding information privacy and security.  We commit to responding to inquiries and resolving complaints about your privacy and our collection and use of personal information. If you have privacy questions or concerns, please feel free to contact the Privacy Officer at privacy@tcdi.com, (888) 823-2880 or mail to TCDI, 4508 Weybridge Lane, Greensboro, NC 27407.  All inquiries will be investigated and elevated until resolved.

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, TCDI commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to International Centre for Dispute Resolution (ICDR), a division of the American Arbitration Association (AAA), an alternative dispute resolution provider based in the United States.  If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://go.adr.org/dpf_irm.html for more information or to file a complaint.  The services of the International Centre for Dispute Resolution (ICDR), a division of the American Arbitration Association (AAA) are provided at no cost to you.

If your DPF complaint cannot be resolved through the above channels, under certain conditions you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. With respect to personal data received or transferred pursuant to the Data Privacy Framework, TCDI is obligated to arbitrate claims and follow the terms as set forth in Annex I of the DPF Principles, provided that an individual has invoked binding arbitration by delivering notice to TCDI and following the procedures and subject to conditions set forth in Annex I of Principles.

Compliance and Cooperation With Regulatory Authorities

TCDI regularly reviews compliance to our Privacy Policy. We are committed to work with appropriate regulatory authorities (including data protection authorities) as necessary to resolve any complaints or disputes regarding the appropriate management and handling of personal data.

TCDI is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC).

Changes

Our Privacy Notice may change from time to time but this page will be updated with the most current version at all times.