Privacy Policy

Date Published: February 2026

1. Introduction

EIZO Rugged Solutions, Inc. ("we", "us" and "our") recognizes the importance of protecting personal data. The purpose of this Privacy Policy ("Policy") is to inform you of how we will process your personal data as a data controller and the measures and processes we have put in place to ensure its adequate protection.

This Policy does not form any contractual relationship between you and us, and we may amend it from time to time.

2. Lawful Processing

We will only process your personal data:

(a) where you have given your consent;
(b) where the processing is necessary to provide our products or services to you/your employer;
(c) where the processing is necessary to respond to a request from you/your employer;
(d) where the processing is necessary to maintain our relationship with you/your employer;
(e) where the processing is necessary for compliance with our legal and regulatory obligations.

In case of (a) above, you may withdraw your consent at any time by contacting us as set out in section 14 below.

3. What Personal Data We Collect About You

We process the following types of personal data about you:

Your name, email address and other contact details;
Your organization or company affiliation;
Your role or position within your organization;
Account credentials (passwords are stored as secure cryptographic hashes);
Two-factor authentication data (TOTP secrets and backup codes, if enabled);
Details of your access requests and justifications;
Records of file downloads and uploads;
Details of your access to our systems and websites, including IP address and user agent; and
Your messages, feedback or contributions to support requests.

It may be mandatory for you to provide us with your personal data to enable us to manage our business and operations, to maintain our relationship with you/your employer, to provide our products or services to you/your employer or to comply with our legal and regulatory obligations. If you fail to provide your personal data, we might be unable to maintain our relationship with you/your employer or to provide our products or services to you/your employer.

We make every effort to maintain the accuracy and completeness of your personal data which we store and to ensure all of your personal data is up to date. However, you can assist us with this considerably by promptly contacting us if there are any changes to your personal data or if you become aware that we have inaccurate personal data relating to you (see section 10 below). We will not be responsible for any losses arising from any inaccurate, inauthentic, deficient or incomplete personal data that you provide to us.

4. How We Collect Personal Data

We usually collect your personal data from the information you/your employer submits during the course of your/your employer's relationship with us. This will typically be through:

Account registration and profile information;
Access requests you submit through our portal;
File uploads and downloads;
Emails and other correspondence; and
Support requests and feedback.

We may collect information when you access our website through our use of essential cookies and session data. These technologies collect certain traffic information that your browser sends to our website, including your IP address and user agent. See section 9 for details on our cookie usage.

5. How We Use Personal Data

We will process your personal data in connection with the management of our relationship with you/your employer and the provision of our products and services to you/your employer for the following purposes:

to provide you/your employer with requested products, files, or services;
to process and respond to your access requests;
to authenticate your identity and manage your account;
to send you notifications about account activity, approvals, and access expiration;
to manage, develop and improve our product range, services and websites;
for monitoring and assessing compliance with law and our policies and standards;
to comply with our legal and regulatory obligations;
for security monitoring, fraud prevention and abuse detection;
for administrative purposes in relation to the security of and access to our systems, platforms and websites;
to comply with court orders and exercise and/or defend our legal rights;
for any other legitimate business purpose; and
as otherwise permitted or required by any applicable law or regulation.

6. International Transfers of Personal Data

If you are dealing with us within the European Economic Area ("EEA"), your personal data may be transferred to (including accessed in or stored in) a country or territory outside the EEA, including to countries whose laws may not offer the same level of protection of personal data as are enjoyed within the EEA. We will ensure that any such international transfers are made subject to appropriate or suitable safeguards as legally required within EEA.

7. When We May Disclose Your Personal Data

We do not and will not sell, rent out or trade your personal data. We will only disclose your personal data to the following recipients:

to our group companies;
to third parties who process your personal data on our behalf (such as our systems providers including cloud hosting and storage providers);
to third parties who provide email delivery services on our behalf;
to administrators within your organization or ours who manage access requests and approvals;
to any third party to whom we assign or novate any of our rights or obligations;
to any prospective buyer in the event we sell any part of our business or assets; and
to any government, regulatory agency, enforcement or exchange body or court where we are required to do so by applicable law or regulation or at their request.

8. How We Protect Your Personal Data

We are committed to safeguarding and protecting your personal data and will implement and maintain appropriate technical and organizational measures to ensure a level of security appropriate to protect your personal data from accidental or unauthorized destruction, loss, alteration, disclosure or access. These measures include:

Encryption of data in transit (HTTPS/TLS);
Secure password hashing;
Two-factor authentication options;
Role-based access controls;
Regular security reviews; and
Audit logging of sensitive operations.

9. Cookies and Similar Technologies

We use only essential cookies required for the operation of our service. We do not use advertising, analytics, or tracking cookies.

Cookie	Purpose	Duration
`sessionid`	Maintains your authenticated session	Browser session (or 2 weeks if "remember me")
`csrftoken`	Protects against cross-site request forgery attacks	1 year
`otp_device_id`	Remembers your 2FA verification on trusted devices	30 days (configurable)

These cookies are strictly necessary for the operation of our service. If you would prefer not to accept cookies, most browsers will allow you to change your browser settings to disable existing cookies or to automatically reject any cookies. Please be aware that if you disable or reject cookies, some features and services may not work or display properly.

10. Your Rights in Relation to the Personal Data We Collect

If you wish to:

update, modify, or delete your personal data, or obtain a copy of your personal data that we hold; or
restrict or stop us from using any of your personal data which we hold,

you can request this by contacting us as set out in section 14 below.

Under applicable data protection laws including GDPR, you may have additional rights including:

Right of access – Request a copy of the personal data we hold about you;
Right to rectification – Request correction of inaccurate or incomplete data;
Right to erasure – Request deletion of your data (subject to legal retention requirements);
Right to restriction – Request limited processing of your data in certain circumstances;
Right to data portability – Receive your data in a structured, machine-readable format;
Right to object – Object to processing based on legitimate interests; and
Right to withdraw consent – Where processing is based on consent, withdraw it at any time.

In any of the situations listed above, we may request that you prove your identity by providing us with a copy of a valid means of identification in order for us to comply with our security obligations and to prevent unauthorized disclosure of data.

We will respond to your request within 30 days.

11. How Long We Will Hold Your Personal Data For

We will only retain your personal data as long as necessary to fulfill the purpose for which it was collected or to comply with legal, regulatory or internal policy requirements.

Account data – Retained while your account is active; deleted or anonymized upon account closure;
Audit logs – Retained for 1 year for security and compliance, then deleted;
Access request records – Retained for the duration of the granted access plus a reasonable period for audit purposes;
Unverified accounts – Automatically deleted after a short period if email is not verified; and
Email verification and password reset tokens – Expire and are deleted within 24-72 hours.

12. Our Commitment to Children's Privacy

This website is not intended for anyone under the age of 16. If you are younger than 16, you may not use this website.

13. How We Update or Change This Privacy Policy

We may change or update parts of this Policy in order to maintain our compliance with applicable law and regulation or following an update to our internal practices. We will do this by updating this Policy on our website. You will not necessarily be directly notified of such a change. Therefore, please ensure that you regularly check this Policy so you are fully aware of any changes or updates.

14. How You Can Contact Us

If you have any queries about the contents of this Policy or your personal data, or wish to make a request in relation to your personal data, please contact us using the details set out below:

Email: ers-support@eizo.com

Post: 482 S. Keller Road, Orlando, Florida 32810, USA

Business Phone: (+1) 407-262-7100

Toll Free (USA only): 800-330-8301

15. How To Lodge A Complaint To The Regulator

You are entitled to lodge a complaint with the data protection regulator in your country if you consider that we have breached your data protection rights.