1. Scope and Responsibility
ZK Technology LLC, doing business as ZKTeco WFM (“ZKTeco WFM,” “we,” “us,” or “our”), provides this Privacy Notice to explain how we collect, use, disclose, retain, and protect personal information in connection with our public Website, business inquiries, events, demonstrations, partner and prospect interactions, and related marketing communications.
For the activities covered by this Notice, ZKTeco WFM generally determines the purposes and means of processing and acts as the controller, business, or equivalent responsible organization under applicable law. Where we process personal information solely on documented instructions from a customer through our products or services, we act as a processor, service provider, or contractor, and the customer’s privacy notice and our applicable agreement govern that processing.
This Notice does not replace customer agreements, data processing addenda, product-specific notices, applicant or workforce notices, or other notices that expressly govern a particular processing activity. Personal information processed on a customer’s behalf through our products or services is controlled by that customer. Biometric processing through applicable hosted services is addressed separately in our U.S. Biometric Privacy Policy. If another notice conflicts with this Notice for a specific activity, the more specific notice controls for that activity, except that the commitments in Section 9 apply to personal data covered by our Data Privacy Framework certification, including covered human-resources data.
2. Information We Collect
Depending on your interactions, we collect:
- Contact and business information: Name, business email address, telephone number, company, job title, country, account or relationship details, and other information you provide.
- Inquiry and interaction information: Messages, demonstration requests, product interests, event registrations, support inquiries, survey responses, and related correspondence.
- Technical and internet activity information: IP address, browser and device attributes, operating system, requested pages, request times, referring pages, approximate location derived from IP address, cookie or similar identifiers, and information used to operate, measure, and protect the Website.
- Professional and commercial information: Business role, employer, purchasing interests, relationship history, and records of products or services considered or obtained.
- Preferences and compliance records: Marketing preferences, cookie choices, subscriptions, opt-outs, consent records, and records needed to respond to privacy requests or demonstrate compliance.
- Other information you choose to provide: Information included in free-text fields, attachments, or communications with us. Please do not provide sensitive personal information unless we specifically request it through an appropriate secure process.
We obtain information directly from you; automatically from your browser, device, and Website interactions; from your employer, colleagues, or authorized representatives; from event organizers, referral partners, and business partners; and from service providers or publicly available business sources, where permitted by law.
Do not submit biometric samples, government-issued identification numbers, employee records, passwords, financial-account or payment-card information, health information, precise geolocation, or other sensitive personal information through general Website forms or unsecured email. If you provide information about another person, you represent that you are authorized to do so and that you have provided any notice or obtained any consent required by law.
3. How We Use Information
We use personal information to:
- Respond to inquiries and provide requested demonstrations, resources, support, or assistance.
- Manage customer, prospect, supplier, and partner relationships and administer related records.
- Send relevant business communications and marketing where legally permitted and consistent with your choices.
- Operate, maintain, analyze, troubleshoot, protect, and improve the Website and related business processes.
- Authenticate requests, maintain records, and honor privacy, cookie, and communication preferences.
- Detect, investigate, and prevent fraud, security incidents, abuse, and unlawful activity.
- Comply with legal, regulatory, tax, accounting, audit, and contractual obligations and establish, exercise, or defend legal claims.
- Evaluate or complete a merger, acquisition, financing, reorganization, sale, or other business transaction.
We do not treat submission of an inquiry as blanket consent to unrelated marketing. We will not use personal information for a materially different, unrelated, or incompatible purpose without providing additional notice and, where required, obtaining consent.
4. Legal Bases
Where applicable law requires a legal basis, we rely on:
Consent, where required for marketing or optional tracking technologies.
Contractual necessity, where processing is necessary to enter into or perform a contract with you.
Legitimate interests, such as responding to business inquiries, managing business relationships, and protecting our systems, after considering your rights and reasonable expectations.
Legal obligations, where processing is required by law.
Where you act for a business customer rather than contracting personally, our processing of your business contact information will generally rely on legitimate interests or another applicable legal basis.
You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
5. Service Providers and Other Disclosures
We do not sell personal information for monetary or other valuable consideration, and we do not share personal information for cross-context behavioral advertising or disclose it for third-party targeted advertising, as those terms are defined by applicable law.
We use service providers to support our operations, including:
Zoho, for customer relationship management and related business communications.
Vercel, for Website hosting and delivery.
These providers may process contact information, submissions, technical information, or other data necessary to perform services for us. We require providers that process personal information on our behalf to use it only for authorized purposes, protect it appropriately, and comply with applicable contractual and legal obligations.
We may also disclose information to our affiliates; professional advisors, auditors, insurers, and financial institutions; government authorities, regulators, courts, and law enforcement; and other parties when reasonably necessary to comply with law or valid legal process, protect rights, safety, or security, investigate fraud or misuse, enforce agreements, or establish, exercise, or defend legal claims.
Information may be reviewed, transferred, or disclosed in connection with an actual or proposed merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction. We will require recipients to use the information consistently with applicable law and any binding confidentiality or data-protection obligations.
6. Marketing and Your Choices
We send marketing communications only where permitted by applicable law, obtaining consent where required.
Marketing emails include an unsubscribe mechanism. You may also contact privacy@zktecowfm.com to stop marketing communications or update your preferences.
Opting out of marketing does not prevent necessary responses to your requests or nonmarketing communications concerning an existing relationship.
We may retain a limited suppression record, such as your email address and opt-out status, to avoid contacting you again contrary to your wishes. Unsubscribing does not automatically delete information needed for another lawful purpose.
7. Retention
We retain each category of personal information only for as long as reasonably necessary and proportionate to fulfill the purposes described in this Notice, unless a longer period is required or permitted by law.
We determine retention periods by considering the amount, nature, and sensitivity of the information; the purposes for which it is processed; the status and duration of the relationship; relevant communications and unresolved requests; legal, regulatory, tax, accounting, audit, and contractual requirements; applicable limitation periods; and security, fraud-prevention, dispute-resolution, and legal-claims needs.
Business and marketing contacts may remain in our CRM while an active or reasonably anticipated business relationship, communication history, or other lawful purpose supports retention. We periodically review retained information and delete, securely dispose of, or anonymize it when it is no longer needed, subject to legal holds and other lawful exceptions.
Limited information may be retained longer when required to comply with legal obligations, preserve evidence, resolve disputes, enforce agreements, or maintain records of privacy choices. Backup copies may remain until removed through the applicable backup cycle.
8. International Processing
ZKTeco WFM is based in the United States. Information may be processed in the United States and other countries where our service providers operate. Those countries may have data-protection laws different from those in your location.
For transfers covered by our Data Privacy Framework certification, we rely on the applicable framework described in Section 9. For other international transfers that require safeguards, we use a recognized legal mechanism, which may include an adequacy decision, applicable standard contractual clauses, the UK International Data Transfer Agreement or Addendum, or another lawful mechanism, together with supplementary measures where required.
You may contact us for information about safeguards applicable to your information. Website use alone is not treated as consent to an international transfer where a separate legal mechanism is required.
9. Data Privacy Framework
ZK Technology LLC complies with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”), as established by the U.S. Department of Commerce. ZK Technology LLC has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. DPF Principles with respect to personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension, and to the Swiss-U.S. DPF Principles with respect to personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If this Notice conflicts with the applicable DPF Principles, the applicable DPF Principles govern.
To learn more about the Data Privacy Framework program and view our certification, visit the U.S. Department of Commerce Data Privacy Framework website and the ZK Technology LLC participant record. Our certification covers both human resources data and non-human-resources data.
For personal data received in reliance on an applicable DPF, individuals may request access to their personal data and may request correction, amendment, or deletion where the information is inaccurate or has been processed in violation of the applicable DPF Principles. Where required by the Choice Principle, individuals may opt out of disclosures to non-agent third parties or uses for purposes materially different from those for which the information was originally collected or subsequently authorized. For sensitive personal data, we obtain affirmative express consent where required.
ZK Technology LLC remains responsible under the applicable DPF Principles for personal data that it transfers onward to third-party agents acting on its behalf. We require such agents to process covered personal data only for limited and specified purposes, provide at least the same level of protection required by the applicable DPF Principles, notify us if they can no longer meet those obligations, and take reasonable and appropriate steps to stop and remediate unauthorized processing. ZK Technology LLC may be required to disclose personal data in response to lawful requests by public authorities, including to meet national-security or law-enforcement requirements.
Questions or complaints concerning personal data covered by an applicable DPF should first be submitted to privacy@zktecowfm.com. We will respond within 45 days. For unresolved complaints involving non-human-resources data, ZK Technology LLC has selected BBB National Programs as its independent recourse mechanism. Individuals may submit an eligible complaint to BBB National Programs DPF Services at no cost.
For human-resources data transferred from the European Union, United Kingdom, or Switzerland in reliance on an applicable DPF, ZK Technology LLC commits to cooperate with and comply with the advice of the competent EU data protection authorities, the UK Information Commissioner’s Office, and the Swiss Federal Data Protection and Information Commissioner, as applicable. ZK Technology LLC is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission.
Under certain conditions, an individual may invoke binding arbitration for residual claims regarding compliance with the applicable DPF Principles that have not been resolved through other available recourse and enforcement mechanisms, as described in Annex I to the applicable DPF Principles.
10. Privacy Rights
Depending on your location and applicable law, you may have rights to:
- Obtain information about processing and access your personal information.
- Correct inaccurate information.
- Request deletion.
- Restrict or object to certain processing.
- Receive a portable copy of eligible information.
- Withdraw consent.
- Opt out of covered sales, targeted advertising, or certain profiling activities.
- Appeal a decision concerning a privacy request where required by law.
Submit requests to privacy@zktecowfm.com. Describe the request and the jurisdiction in which you reside. We may request information reasonably necessary to verify your identity, locate responsive records, prevent fraud, or confirm an authorized agent’s authority. An authorized agent may be required to provide written permission, and we may contact you directly to confirm the request. Please do not send sensitive identification documents unless we arrange an appropriate secure process.
Rights are subject to applicable scope, exceptions, verification, and record-retention requirements. We will respond within legally required timeframes. Where permitted by law, we may deny or charge a reasonable fee for requests that are manifestly unfounded, excessive, repetitive, or otherwise exempt, and we will explain the basis for our decision. We will not unlawfully discriminate or retaliate against you for exercising a privacy right.
If an appeal right applies, reply to our decision or email us with the subject “Privacy Request Appeal.”
For matters not governed by the Data Privacy Framework complaint process in Section 9, you may complain to the relevant data-protection authority, including your local authority in the EEA or the UK Information Commissioner’s Office, as applicable.
11. Cookies and External Websites
Our Cookie Policy explains the cookies and similar technologies used on the Website, their purposes, and available controls. Where required, we obtain consent before using non-essential cookies. You may use our cookie controls and your browser settings to manage applicable technologies; disabling certain technologies may affect Website functionality.
Where required by applicable law, we process legally recognized opt-out preference signals, such as Global Privacy Control, in accordance with legal requirements. Because we do not sell or share personal information for cross-context behavioral advertising, such signals may not change our practices unless our processing changes.
Links to external websites and video platforms take you to services operated by third parties. Their privacy practices govern information collected on their services. We do not control those practices.
12. Security and Children
We maintain reasonable and appropriate administrative, technical, physical, and organizational safeguards designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. Our safeguards are risk-based and may include access controls, vendor oversight, security monitoring, incident-response processes, and workforce confidentiality and security requirements. No system, storage environment, or transmission method is completely secure, and we cannot guarantee absolute security.
The Website is intended for business and professional audiences and is not directed to children under 18. If you believe a child has provided personal information through the Website, contact us so we can investigate and take appropriate action.
13. Supplemental U.S. State Privacy Disclosures
If a U.S. state privacy law applies to our processing, the categories described in Section 2 also describe the personal information we may have collected during the preceding 12 months. We collect those categories from the sources described in Section 2, use them for the purposes described in Section 3, and disclose them to the recipient categories described in Section 5. We retain them under the criteria described in Section 7.
For the Website activities covered by this Notice, during the preceding 12 months we have not sold personal information, shared it for cross-context behavioral advertising, or disclosed it for third-party targeted advertising. We do not use or disclose sensitive personal information for purposes that require a right to limit under applicable U.S. state privacy law, and we do not offer financial incentives or price or service differences in exchange for personal information. If these practices change, we will update this Notice and provide any required opt-out or limitation method before the change applies.
Eligible residents may exercise the rights described in Section 10. Depending on the applicable state law, additional rights may include obtaining category-level disclosures, limiting certain uses of sensitive personal information, opting out of covered profiling, and appealing a denied request. These rights are subject to applicable scope, verification requirements, and exceptions.
14. Changes and Contact
We may update this Notice to reflect changes in our practices, technologies, services, or legal requirements. The revised Notice becomes effective when posted unless a later date is stated. We will revise the Last Updated date and provide additional notice or obtain consent when required by applicable law. We encourage you to review this Notice periodically.
ZK Technology LLC dba ZKTeco WFM
Attention: Privacy
4515 George Road, Suite 370
Tampa, FL 33634
United States
Email: privacy@zktecowfm.com
Nothing in this Notice limits or waives statutory privacy rights or reduces obligations imposed on ZKTeco WFM by applicable law. This Notice is intended to describe our practices transparently and does not create contractual rights beyond those required by law or expressly provided in a written agreement.