Privacy Policy

1. Introduction and Scope

1.1 About Duce Namazi LLC

Duce Namazi LLC is a privately held limited liability company registered and operating in the State of Utah, United States of America. Our principal place of business is located at 1847 East Dimple Dell Road, Sandy, Utah 84092-4541. We specialize in Computer Systems Design and Related Services under NAICS code 541512, with additional capabilities in Professional, Scientific, and Technical Services under NAICS code 541600. Our core discipline is computer integrated systems design — the practice of designing, engineering, and delivering integrated computing platforms that combine hardware architecture, software systems, network infrastructure, and operational workflows into coherent, production-grade environments. As a professional services firm, we handle confidential client information including system configurations, network topologies, security assessments, and business-process documentation. Safeguarding this information is both an ethical obligation and a business necessity.

1.2 Purpose and Application

This Privacy Policy applies to all personal information that Duce Namazi LLC collects, receives, generates, or otherwise processes in connection with the operation of our website, the delivery of our professional services, our marketing and business-development activities, and our communications with prospective and current clients. The term personal information as used throughout this document refers to any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked — directly or indirectly — with a particular individual, consumer, household, or device. This includes traditional identifiers such as name, email address, telephone number, and mailing address, as well as electronic identifiers such as IP addresses, device fingerprints, cookie identifiers, and browsing-behavior data collected through automated means.

1.3 Voluntary Provision

The provision of personal information to Duce Namazi LLC is generally voluntary. You are never under a statutory or contractual obligation to provide personal information when browsing our website. However, certain features of the Website — such as contacting us through our online contact form or subscribing to receive informational materials — require that you provide a minimum set of contact details. If you choose not to provide the requested information, we may be unable to respond to your inquiry or provide the requested service. In professional-service engagements, the provision of certain business and contact information is necessary for us to perform the contracted work, and refusal to provide such information may preclude us from entering into or continuing a client relationship.

1.4 Policy Governance

This Privacy Policy is governed by and shall be construed in accordance with the laws of the State of Utah and the applicable federal laws of the United States of America, without regard to conflict-of-law principles. Any dispute arising out of or relating to this policy shall be resolved through good-faith negotiation between the parties, and if resolution cannot be achieved, through binding arbitration in Salt Lake County, Utah, in accordance with the commercial arbitration rules of the American Arbitration Association. Nothing in this policy shall be construed to limit any rights you may have under applicable data protection statutes that cannot be waived by contract.

2. Information We Collect

2.1 Categories of Personal Information

Duce Namazi LLC collects, and has collected within the preceding twelve months, the following categories of personal information from and about individuals who interact with our business. We describe each category with specificity so that you understand precisely what types of data we may hold.

1. Identifiers: Full legal name, business name, email address, telephone number, physical mailing address, job title, company affiliation, and any username or handle you provide when communicating with us. These identifiers form the core information we need to establish and maintain a professional relationship with you.
2. Contact History: Records of communications between you and Duce Namazi LLC, including the content of emails, messages submitted through our website contact form, telephone-call notes maintained by our staff, meeting agendas and summaries, and any attachments or documents you voluntarily share with us in the course of business discussions.
3. Commercial Information: Records of services purchased, obtained, or considered; client engagement histories; project scope documents; billing and invoicing records; payment-transaction details processed through third-party payment processors; and contract documents that outline the terms of our professional engagements with you or your organization.
4. Internet and Network Activity: Information collected automatically when you visit our Website, including your Internet Protocol address — both IPv4 and IPv6 — browser type and version, operating system, screen resolution, referring and exit pages, date and time stamps of page visits, time spent on individual pages, clickstream data, and interactions with our website interface elements. This category also includes information derived from server logs maintained by our hosting infrastructure provider.
5. Device and Usage Data: Device type, device identifier, mobile carrier, browser plug-in details, language preferences, time-zone settings, and information about how your device interacts with our Website. This data helps us understand the technical environments used by our visitors and optimize the Website accordingly.
6. Geolocation Data: Approximate geographic location inferred from your IP address, which typically resolves to the city or regional level. We do not collect or request precise geolocation coordinates from GPS or similar technologies.
7. Professional and Employment Information: If you interact with us in a business capacity, we may collect information about your employer, your role and responsibilities, your professional qualifications and credentials, your industry sector, and the nature of the technology environments you manage or oversee.
8. Inferences: Inferences drawn from the categories of information listed above to create a profile reflecting your preferences, characteristics, behavior, and likely interests — used solely for purposes of tailoring our communications and service recommendations to your apparent needs within the computer-systems domain.

2.2 Information We Do Not Collect

Duce Namazi LLC does not knowingly collect, request, or process sensitive personal information — sometimes referred to as special categories of personal data — including but not limited to Social Security numbers, driver license numbers, state identification card numbers, passport numbers, financial-account credentials, precise geolocation data, biometric or genetic data, information pertaining to racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, health or medical information, or information concerning an individual's sex life or sexual orientation. We do not maintain systems designed to process such sensitive data, and we request that you refrain from providing any such information to us through any channel. If sensitive data is inadvertently received, it will be promptly deleted or anonymized to the extent technically feasible.

2.3 Client Project Data

In the course of delivering our professional services — which involve computer systems design, network engineering, infrastructure assessment, technology advisory, and related consulting activities — we may receive access to, or generate, technical data related to your information-technology environment. This may include server specifications, network diagrams, system-configuration files, log files, performance metrics, security scan results, and architectural documentation. While such data is primarily non-personal and relates to hardware and software systems rather than to natural persons, it may incidentally contain references to named individuals — for example, system administrators listed in configuration files or users referenced in access-control lists. We treat any such incidentally included personal data with the same level of care as directly collected personal information and process it only to the extent necessary to deliver the contracted services.

3. How We Collect Information

3.1 Information You Provide Directly

The primary and most common method by which we obtain personal information is through your direct, voluntary provision. This occurs when you fill out and submit our website contact form; when you send an email to any @ducenamazi.buzz email address including care@ducenamazi.buzz; when you call our business telephone number — +1 (820) 348-7741 — and provide information during a conversation with our staff; when you schedule a consultation or introductory meeting; when you provide a business card or professional contact details at an industry event or meeting; when you complete a client intake questionnaire; when you submit a request for proposal or statement of work; when you engage us to perform professional services and provide project-related information; and when you communicate with us via any messaging platform or social media channel where we maintain a business presence. In each of these scenarios, you control the type and volume of information you share, and we collect only what is necessary and relevant to the purpose of the interaction.

3.2 Information Collected Automatically

When you visit the Website, certain technical information is collected automatically through the normal operation of our web servers and through standard internet communication protocols. This automatic collection occurs regardless of whether you actively submit information through a form. The web-server software that hosts our domain, www.ducenamazi.buzz, generates standard access logs that record each HTTP request received, including the requesting IP address, the date and time of the request, the HTTP method and URL path, the HTTP status code returned, the volume of data transferred in bytes, and the User-Agent string transmitted by your browser. These server logs are a standard feature of web-server operation and are maintained by virtually all websites on the internet. We also use cookies, local-storage objects, and similar browser-based technologies to collect information about your browsing session. Our use of these technologies is described in detail in Clause 10 of this policy.

3.3 Information from Third-Party Sources

In limited circumstances, Duce Namazi LLC may receive personal information about you from third-party sources. This can occur when a colleague or business associate refers you to our services and provides your contact information to facilitate an introduction; when an industry directory or professional networking platform lists your business contact details and we access that information for legitimate business-development purposes; when a technology vendor or partner we work with shares relevant contact information in the context of a joint engagement or co-marketing activity; or when publicly available sources — such as corporate websites, professional licensing databases, or government registries — contain professional contact information that is relevant to our service offerings. In all cases where we receive information from third-party sources, we assess the source's authority to share such information and process the received data only for purposes compatible with the original context in which it was made available.

4. How We Use Your Information

4.1 Service Delivery

We use personal information primarily to deliver the professional services that you have requested from Duce Namazi LLC. This encompasses responding to your initial inquiries and assessing whether our capabilities align with your needs; preparing proposals, scoping documents, and statements of work tailored to your technical environment; conducting discovery sessions and stakeholder interviews to understand your current-state architecture; performing system assessments, audits, and technical evaluations of your computing infrastructure; designing and engineering computer-systems solutions that address your identified requirements; communicating with you throughout the engagement lifecycle about project status, milestones, and deliverables; managing the administrative, billing, and contractual aspects of our client relationships; and maintaining accurate business records as required for legal compliance, financial reporting, and operational continuity. Each of these uses is directly connected to the performance of a contract or the fulfillment of a service request initiated by you.

4.2 Communications

We use your contact information to communicate with you about matters related to your relationship with Duce Namazi LLC. This includes responding to questions and inquiries you submit; sending confirmation messages when you request information or schedule consultations; providing updates about changes to our services, policies, or terms; delivering relevant technical content, white papers, case studies, or educational materials that relate to computer systems design — but only when you have expressed interest in receiving such communications; inviting you to events, webinars, or presentations that align with your professional interests; and seeking your feedback through client-satisfaction surveys or post-engagement evaluations. You may opt out of receiving promotional or informational communications at any time by following the unsubscribe instructions included in each such communication or by contacting us directly at care@ducenamazi.buzz. Opting out of promotional communications does not affect our ability to send you transactional or service-related messages necessary for an ongoing client engagement.

4.3 Business Operations

Duce Namazi LLC uses personal information to support the internal operations of our business. This includes analyzing website traffic patterns and usage trends to improve the functionality, content, and user experience of the Website; maintaining the security and integrity of our information-technology systems through access-log monitoring, intrusion detection, and vulnerability management; defending against malicious, deceptive, fraudulent, or illegal activity directed at our business or our clients; complying with applicable legal obligations, regulatory requirements, and industry standards; enforcing our Terms of Service and other contractual agreements; resolving disputes and protecting the rights, property, and safety of Duce Namazi LLC, our clients, and the public; and conducting business analytics to understand market demand for our service offerings, measure the effectiveness of our marketing efforts, and guide strategic business planning. Where personal information is used for analytics purposes, we aggregate or de-identify data to the maximum extent practicable.

4.4 Purposes for Which We Do Not Use Data

To ensure complete clarity, we explicitly state the following prohibitions on our use of personal information. Duce Namazi LLC does not use personal information to make automated decisions that produce legal or similarly significant effects concerning individuals — we do not employ profiling algorithms that determine eligibility for services, pricing, or contractual terms without meaningful human review. We do not use personal information for the purpose of training machine-learning models, artificial-intelligence systems, or large-language models, whether our own or those of third-party providers. We do not use client-derived data — including system configurations, network diagrams, or security findings — for any purpose other than the specific engagement for which the data was provided. We do not use personal information to engage in discriminatory practices prohibited by applicable law. These prohibitions are binding on all employees, contractors, and service providers acting on behalf of Duce Namazi LLC.

5. Legal Basis for Processing

5.1 Consent

In certain circumstances, Duce Namazi LLC processes personal information on the basis of your freely given, specific, informed, and unambiguous consent. Consent-based processing applies primarily to our sending of marketing communications and informational newsletters, to our placement of non-essential cookies and tracking technologies on your device — which are subject to a separate cookie-consent mechanism — and to any uses of personal information that fall outside the scope of our contractual obligations or legitimate business interests. When we rely on consent as the legal basis for processing, we will clearly inform you of the specific purpose, and you will have the right to withdraw your consent at any time without affecting the lawfulness of processing conducted prior to the withdrawal. Withdrawal of consent may be communicated through any of the contact methods listed in Clause 15 of this policy and will be honored promptly.

5.2 Contractual Necessity

The majority of our personal-information processing activities are undertaken because they are necessary for the performance of a contract to which you are a party — either as an individual client or as a representative of a client organization. When you engage Duce Namazi LLC to perform professional services, we must process your contact information, communicate with you about project requirements, and maintain records of the engagement in order to fulfill our contractual obligations. Similarly, pre-contractual steps taken at your request — such as providing a consultation, preparing a proposal, or scoping a potential engagement — require that we process the personal information you provide during those preliminary discussions. Without such processing, we would be unable to establish a business relationship or deliver the services you seek from us.

5.3 Legitimate Interests

Duce Namazi LLC may process personal information where it is necessary for the purposes of our legitimate business interests or those of a third party, provided that such interests are not overridden by your data-protection rights and fundamental freedoms. Our legitimate interests include the following: protecting the security and operational integrity of our Website and information systems against unauthorized access, cyberattacks, and technical failures; understanding how visitors interact with our Website so that we can improve its design, navigation, and content relevance; conducting business-development activities — including responding to inquiries and reaching out to prospective clients — in a manner that is reasonable in volume and respectful of recipient preferences; maintaining accurate business records and financial accounts for tax, audit, and corporate-governance purposes; and exercising or defending our legal rights in the event of disputes, claims, or litigation. We perform a legitimate-interest assessment for any processing activity that relies on this basis, documenting the specific interest pursued and balancing it against the impact on individual privacy, and we make reasonable efforts to inform data subjects of the processing and provide opt-out mechanisms where feasible.

5.4 Legal Obligation

In some cases, processing of personal information is necessary to comply with a legal obligation to which Duce Namazi LLC is subject. This may include obligations under tax laws requiring the retention of financial transaction records; obligations under corporate laws requiring the maintenance of shareholder, member, or governance records; obligations under court orders, subpoenas, or other lawful requests from government authorities with jurisdiction over our operations; and obligations under data-protection laws themselves — including the duty to respond to verified consumer requests regarding their personal information. When we process personal data in response to a legal demand, we evaluate the validity and scope of the demand before complying and, where permitted by law, we make reasonable efforts to notify the affected individual prior to disclosure.

6. Data Sharing and Disclosure

6.1 Our Core Principle: No Sale of Data

Duce Namazi LLC does not sell personal information. We do not sell, rent, lease, trade, or otherwise exchange personal information for monetary or other valuable consideration. We do not operate as a data broker, and we do not participate in the buying or selling of consumer data through data marketplaces, exchanges, or similar arrangements. We do not share personal information with advertising networks, data-analytics firms, or consumer-profiling companies for the purpose of targeting advertisements to you based on your behavior across different websites or services. Our business model is based on the provision of professional consulting and engineering services, not on the monetization of user data. This no-sale commitment applies to all categories of personal information we process and to all categories of recipients, without exception.

6.2 Service Providers

Duce Namazi LLC may share personal information with third-party service providers that perform business functions on our behalf and under our instruction. These providers are contractually bound to process personal information only for the specific purposes we authorize, to maintain the confidentiality and security of the data, and to refrain from using, selling, or disclosing the data for their own commercial purposes. Categories of service providers we may engage include: web-hosting and infrastructure providers that host the www.ducenamazi.buzz domain and its associated files; email-service providers that facilitate our business email communications including the care@ducenamazi.buzz address; cloud-storage and collaboration-platform providers used for internal document management and project coordination; professional-services automation tools used for client-relationship management and project tracking; accounting, billing, and payment-processing services used for invoicing and financial reconciliation; and professional advisors including attorneys, accountants, and auditors who provide services to Duce Namazi LLC and are bound by professional obligations of confidentiality. A current list of our primary service providers and their privacy practices is available upon request submitted to care@ducenamazi.buzz.

6.3 Legal and Safety Disclosures

Duce Namazi LLC may disclose personal information when we believe in good faith that such disclosure is necessary to comply with a valid legal obligation, including a court order, subpoena, warrant, regulatory demand, or other legal process duly issued by a court or government authority of competent jurisdiction. We may also disclose personal information when we believe in good faith that disclosure is reasonably necessary to detect, prevent, or address fraud, security breaches, or technical issues affecting our systems or the systems of our clients; to protect the rights, property, or personal safety of Duce Namazi LLC, our employees, our clients, or members of the public — consistent with applicable law; to enforce our Terms of Service or other contractual agreements, including investigation of potential violations; or to respond to claims that any content violates the rights of third parties. Before making any such disclosure, we evaluate the specific circumstances, the nature and sensitivity of the information requested, the purpose for which the disclosure is sought, and the safeguards applicable to the recipient. Where legally permissible, we endeavor to provide you with advance notice of any compelled disclosure so that you may seek a protective order or other appropriate remedy.

6.4 Business Transfers

In the event that Duce Namazi LLC enters into discussions concerning, or completes, a merger, acquisition, reorganization, sale of assets, or similar corporate transaction involving all or a portion of our business, personal information held by us may be among the assets transferred to the successor entity. In such circumstances, we will require the recipient to treat your personal information in a manner consistent with this Privacy Policy, and we will make reasonable efforts to notify you — through a posting on our Website or through direct communication — of any such transfer and any material changes to the privacy practices applicable to your data as a result of the transaction. If the recipient intends to process your personal information for purposes materially different from those described in this policy, you will be provided with an opportunity to opt out of such processing before it commences.

6.5 Disclosures Made in the Preceding Twelve Months

In the twelve months preceding the effective date of this policy, Duce Namazi LLC has disclosed the following categories of personal information to the specified categories of recipients for the business purposes indicated: identifiers and contact information have been disclosed to email-service providers, web-hosting providers, and communication-platform providers for the purpose of delivering and managing our business communications; internet and network activity data has been disclosed to web-hosting and infrastructure providers for the purpose of operating and securing the Website; and commercial information — specifically billing and invoicing records — has been disclosed to accounting-software providers and payment-processing services for the purpose of financial management. No other categories of personal information have been disclosed to any other categories of recipients. No personal information has been sold in the preceding twelve months or at any time prior.

7. Data Retention

7.1 Retention Criteria and Durations

Duce Namazi LLC retains personal information only for as long as is reasonably necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our retention periods are determined by reference to the following criteria: the nature and sensitivity of the information; the volume and context of the collection; the potential risk of harm from unauthorized access, use, or disclosure; the purposes for which the information was collected and whether those purposes can be fulfilled through alternative means; the duration of our client relationship with you — information related to active clients is retained for the full term of the engagement; applicable statutes of limitations for potential legal claims, which typically extend to between three and seven years in the State of Utah depending on the nature of the claim; and legal or regulatory obligations mandating specific retention periods, such as tax-record retention requirements extending to seven years under federal law.

As a general guideline, and subject to the criteria above: contact-form submissions and associated correspondence are retained for a period not exceeding three years from the date of last communication, unless a client relationship is established, in which case the data is retained as part of the client file; website server logs are retained for a period not exceeding eighteen months to support security analysis and performance monitoring, after which they are permanently deleted or anonymized; billing and financial transaction records are retained for a period of seven years to comply with tax-law requirements, after which they are securely destroyed; client engagement files — including project documents, assessment reports, architectural diagrams, and related deliverables — are retained for a period of five years following the conclusion of the engagement, after which they are securely archived or destroyed in accordance with our client-data handling procedures; and marketing contact lists and consent records are reviewed annually, and records associated with individuals who have not engaged with our communications for more than twenty-four months are removed.

7.2 Secure Deletion and Disposal

When personal information reaches the end of its designated retention period, Duce Namazi LLC takes affirmative steps to securely delete or anonymize the data. Our deletion procedures include: permanent erasure of digital records from active storage systems, including associated backups to the extent technically feasible and commercially reasonable; secure shredding or destruction of any physical documents containing personal information; removal of email communications and attachments from our email systems; deletion of contact records from our client-relationship management tools; and anonymization of any residual information that cannot be completely deleted due to technical constraints — for example, information embedded in aggregated datasets or immutable backup archives. We maintain a deletion log documenting the categories of data deleted, the date of deletion, and the method of disposal, which is reviewed as part of our annual privacy-program audit.

8. Data Security

8.1 Security Program Overview

Duce Namazi LLC has implemented and maintains a comprehensive information-security program designed to protect the confidentiality, integrity, and availability of personal information in our possession. Our security program is informed by recognized industry standards and frameworks, including the National Institute of Standards and Technology — NIST — Cybersecurity Framework and Special Publication 800-53. The program is governed by written policies and procedures that define roles and responsibilities, establish security controls, and prescribe incident-response protocols. The effectiveness of the program is reviewed on a periodic basis, and controls are updated in response to changes in the threat landscape, technological developments, and operational experience.

8.2 Technical Security Measures

The technical measures we employ to protect personal information include, but are not limited to: encryption of data in transit using Transport Layer Security — TLS — protocols with a minimum version of TLS 1.2, applied to all communications between your browser and our Website as well as to all internal data transmissions; encryption of data at rest for stored personal information using industry-standard encryption algorithms — specifically AES-256 for stored files and encrypted volumes; implementation of firewalls, intrusion-detection systems, and network-segmentation controls to prevent unauthorized network-level access to systems containing personal information; deployment of endpoint-protection software — including anti-malware, host-based firewalls, and device-encryption — across all computing devices used to access or process personal information; enforcement of strong authentication mechanisms including multi-factor authentication for all administrative access to systems that store or process personal information; application of the principle of least privilege, ensuring that access to personal information is restricted to personnel whose job responsibilities require such access and is granted only at the minimum level necessary; maintenance of access logs and audit trails that record access to and modification of personal information, facilitating detection and investigation of unauthorized activity; and regular vulnerability scanning and penetration testing of our web-facing systems and internal infrastructure.

8.3 Organizational and Administrative Measures

Beyond technical controls, our security posture includes organizational measures such as: mandatory privacy and security training for all personnel with access to personal information, delivered at onboarding and refreshed annually; background screening of personnel prior to granting access to sensitive client data; documented disciplinary policies for violations of data-handling procedures; formal vendor-risk-management processes that evaluate the security practices of third-party service providers before engagement and periodically thereafter; physical security controls at our business premises including access-controlled entry, visitor-logging procedures, and secure storage for physical documents; formal change-management procedures governing modifications to systems that process personal information; and annual review of security policies and procedures by management, with documented outcomes and remediation tracking for identified deficiencies.

8.4 Data Breach Response

Despite the extensive measures described above, no method of electronic storage or transmission over the internet is entirely secure. Duce Namazi LLC maintains a documented incident-response plan — referred to as the Data Breach Response Protocol — that details the steps we will take in the event of a security incident involving personal information. This plan includes procedures for immediate containment of the incident; forensic investigation to determine the scope, cause, and impact; assessment of risk to affected individuals; notification to affected individuals and relevant regulatory authorities in accordance with applicable breach-notification laws — typically within the timeframes prescribed by those laws; remediation of vulnerabilities that contributed to the incident; and post-incident review to identify lessons learned and strengthen preventive controls. We maintain contact with external cybersecurity and forensic-investigation resources that can be engaged to support our response to significant incidents. In the event of a data breach, we will notify affected individuals through the contact information we maintain for them and will post a notice on our Website.

8.5 Your Security Responsibilities

While Duce Namazi LLC implements robust security measures, the security of information transmitted over the internet also depends in part on your own practices. We recommend that you use up-to-date antivirus and anti-malware software on your devices; keep your operating system and browsers current with security patches; avoid transmitting sensitive information over unsecured networks including public Wi-Fi hotspots; use strong and unique passwords for your online accounts; remain vigilant against phishing attempts, social-engineering attacks, and fraudulent communications that may appear to originate from Duce Namazi LLC but do not originate from our verified domain — ducenamazi.buzz — or our verified contact channels; and promptly notify us at care@ducenamazi.buzz if you suspect unauthorized access to, or misuse of, any information you have shared with us.

9. Your Rights and Choices

9.1 Overview of Rights

Depending on your jurisdiction of residence and the applicable data-protection legislation, you may have certain rights with respect to the personal information that Duce Namazi LLC holds about you. We extend these rights to all individuals whose data we process, to the fullest extent permitted by applicable law, regardless of whether your specific jurisdiction mandates such rights. We will not discriminate against you — by denying services, charging different prices, providing a different quality of service, or otherwise penalizing you — for exercising any of the rights described in this clause. The exercise of these rights is free of charge, except where requests are manifestly unfounded or excessive — particularly because of their repetitive character — in which case we may charge a reasonable fee reflecting the administrative costs of compliance or may decline to act on the request.

9.2 Right to Know and Access

You have the right to request that Duce Namazi LLC disclose to you the categories and specific pieces of personal information we have collected about you, the categories of sources from which the information was collected, the business or commercial purpose for collecting the information, and the categories of third parties with whom we have shared the information. You may submit a request for access — referred to in some jurisdictions as a Subject Access Request or a Request to Know — by contacting us using any of the methods described in Clause 15. Upon receiving a verifiable request, we will acknowledge receipt within ten business days and will endeavor to provide a substantive response within forty-five calendar days, with the possibility of a single forty-five-day extension where reasonably necessary and with notice to you. The response will cover the twelve-month period preceding the date of your request unless you specify a longer period and the request can reasonably be accommodated.

9.3 Right to Correction and Rectification

You have the right to request that Duce Namazi LLC correct inaccurate personal information that we maintain about you, taking into account the nature of the information and the purposes of the processing. If you believe that any personal information we hold is incomplete, outdated, or otherwise inaccurate, you may submit a correction request that identifies the specific information at issue and provides the corrected data. We will evaluate the request, verify the accuracy of the proposed correction against available records, and implement the correction where warranted. If we determine that the contested information is in fact accurate, we will inform you of our determination and the basis for it, and we will place a note in our records documenting your dispute. We will also communicate any corrections we make to third parties to whom we have disclosed the inaccurate information, unless doing so proves impossible or involves disproportionate effort.

9.4 Right to Deletion

You have the right to request that Duce Namazi LLC delete personal information we have collected from you, subject to certain exceptions recognized by applicable law. These exceptions may include circumstances where retention of the information is necessary to complete the transaction for which it was collected; to detect security incidents or protect against malicious, deceptive, fraudulent, or illegal activity; to identify and repair errors that impair existing functionality; to exercise free speech or ensure another's exercise of free speech; to comply with a legal obligation — for example, tax-record retention; to enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us; or to otherwise use the information internally in a lawful manner compatible with the context in which you provided it. Upon receiving a verifiable deletion request, we will evaluate whether any exception applies. If an exception is identified, we will inform you of the specific exception and will retain only the information necessary to satisfy that exception. If no exception applies, we will delete the information from our active systems and direct our service providers to do the same.

9.5 Right to Data Portability

Where applicable law provides for a right to data portability, you may request that Duce Namazi LLC provide you with a copy of the personal information you have provided to us, in a structured, commonly used, and machine-readable format, and you may request that we transmit that information directly to another entity where technically feasible. We will comply with portability requests to the extent that the data in question is processed by automated means and was collected on the basis of your consent or for the performance of a contract. Data portability does not extend to information that we have generated through our own analysis or derivation — for example, inferences drawn from your data — nor to information that would adversely affect the rights and freedoms of others.

9.6 Right to Opt Out of Marketing

You have the right, at any time, to direct Duce Namazi LLC to cease sending you marketing and promotional communications. Every promotional email we send includes an unsubscribe link in the footer that, when clicked, will immediately remove you from the relevant mailing list. You may also exercise this right by sending an email to care@ducenamazi.buzz with the subject line that reads: Unsubscribe from Marketing Communications. We will process your opt-out request within ten business days of receipt. Please note that opting out of marketing communications does not affect our ability to send you transactional or service-related messages — such as project updates, billing notifications, or policy-change notices — that are necessary for an ongoing client engagement or that we are required to send by law.

9.7 Right to Non-Discrimination

Duce Namazi LLC will not discriminate against you for exercising any of the privacy rights described in this clause. Discrimination in this context means denying you goods or services; charging you different prices or rates for services, including through the use of discounts or other benefits or by imposing penalties; providing you a different level or quality of services; or suggesting that you will receive a different price, rate, level, or quality of services as a result of exercising your privacy rights. We do not offer financial incentives or price or service differences in exchange for the retention or sale of personal information, as we do not sell personal information.

9.8 Verification of Requests

To protect the security of personal information and prevent fraudulent requests, Duce Namazi LLC will verify the identity of any individual submitting a rights request before processing it. The verification process is tailored to the nature and sensitivity of the request. For requests to access categories of information or to opt out of marketing, we may verify identity by matching the email address or telephone number provided in the request against the information we maintain. For requests seeking specific pieces of information or for deletion requests, we may require additional verification — such as confirming details of prior interactions with our company that only the data subject would reasonably know. If we are unable to verify your identity to a sufficient degree of certainty, we will inform you and will treat the request as unverifiable, limiting our response to the information we can provide without risk of unauthorized disclosure. You may designate an authorized agent to submit a request on your behalf; in such cases, we will require written authorization from you confirming the agent's authority to act, and we may verify your identity directly with you.

9.9 Appeal Process

If you submit a rights request and are dissatisfied with our response — whether because we declined to take action, took action you believe to be incomplete, or failed to respond within the required timeframe — you have the right to appeal our decision. You may submit an appeal by sending an email to care@ducenamazi.buzz with the subject line: Privacy Rights Appeal. The appeal should include your name, contact information, a description of the original request, the date it was submitted, and the specific grounds on which you believe our response was inadequate. We will acknowledge receipt of your appeal within ten business days and will provide a written response within forty-five calendar days. If your appeal is denied, we will provide an explanation of the reasons for the denial and will inform you of any further recourse available to you under applicable law, including the right to file a complaint with the relevant data-protection authority — in the United States, typically the Attorney General of your state of residence.

10. Cookies and Tracking Technologies

10.1 What Are Cookies

Cookies are small text files that a website stores on your device — computer, tablet, smartphone, or other internet-connected device — through your web browser. Cookies enable a website to remember information about your visit, such as your language preference, your login status, or the contents of a shopping cart, so that the website can provide a more personalized and efficient experience on subsequent visits. Cookies may be session cookies — which are temporary and expire when you close your browser — or persistent cookies — which remain on your device for a set period or until you manually delete them. In addition to cookies, websites may use similar technologies such as local-storage objects — commonly referred to as web storage or localStorage — which store data in your browser for retrieval during subsequent visits; session-storage objects, which store data for the duration of a single browsing session; and tracking pixels — also known as web beacons or clear GIFs — which are tiny, transparent images embedded in web pages or emails that allow the sender to determine whether the page or email was accessed. This clause describes how Duce Namazi LLC uses these technologies on the Website.

10.2 Types of Cookies We Use

The Website, www.ducenamazi.buzz, uses only the following limited categories of cookies and similar technologies:

1. Strictly Necessary Cookies: These cookies are essential for the operation of the Website and enable core functionality such as security, network management, and accessibility. Our Website uses a minimal set of strictly necessary cookies for purposes including load-balancing across our hosting infrastructure to distribute traffic efficiently; maintaining session state to support the proper functioning of our contact form and to prevent cross-site request forgery; and remembering your cookie-consent preference so that the consent banner does not reappear on every page visit. Strictly necessary cookies do not require your consent under most data-protection frameworks, as the Website cannot function properly without them.
2. Performance and Analytics Cookies: With your consent, we may use a privacy-focused analytics solution — such as a self-hosted instance of a lightweight analytics platform — that collects aggregated, anonymized data about how visitors interact with the Website. This data helps us understand which pages are most frequently visited, how users navigate through the site, and whether any technical errors are occurring. The analytics solution we use does not set third-party cookies, does not track users across different websites, does not collect personal identifiers beyond the IP address — which is truncated or hashed before storage — and does not share data with advertising networks or data brokers. All analytics data is stored on infrastructure within the United States, and we do not combine analytics data with information from other sources to build individual user profiles.

10.3 Cookies We Do NOT Use

For the avoidance of doubt, Duce Namazi LLC explicitly states that the Website does not use: advertising or targeting cookies that track your browsing activity across different websites for the purpose of delivering targeted advertisements; social-media tracking cookies or social-sharing widgets that report your browsing behavior to social-media platforms; third-party analytics services — such as Google Analytics, Adobe Analytics, or Hotjar — that collect user-level behavioral data and share it with advertising or data-brokerage networks; or any form of browser fingerprinting, digital fingerprinting, or device-graph technology that seeks to identify or track individual users across sessions and sites based on unique device characteristics. We have made a deliberate choice to minimize the use of tracking technologies as part of our commitment to privacy-respecting business practices.

10.4 Managing Your Cookie Preferences

You have full control over the cookies stored on your device. Most web browsers allow you to view, manage, and delete cookies through the browser settings or preferences menu. You can typically configure your browser to block all cookies, to block only third-party cookies, to delete cookies when you close the browser, or to prompt you each time a website attempts to set a cookie. The specific procedure varies by browser: in Google Chrome, cookie controls are found under Settings, Privacy and Security, Cookies and Other Site Data; in Mozilla Firefox, under Options, Privacy and Security, Cookies and Site Data; in Apple Safari, under Preferences, Privacy, Cookies and Website Data; and in Microsoft Edge, under Settings, Cookies and Site Permissions, Manage and Delete Cookies and Site Data. Please note that if you choose to block all cookies — including strictly necessary cookies — certain features of the Website may not function as intended, and your ability to submit inquiries through our contact form may be impacted. You may also choose to browse the Website using your browser's private or incognito mode, which typically automatically deletes cookies, browsing history, and temporary internet files at the end of each session.

10.5 Do Not Track Signals

Some web browsers offer a Do Not Track — DNT — setting that sends a signal to websites indicating the user's preference not to be tracked across different sites. At present, there is no universally accepted standard for how websites should respond to DNT signals, and no consensus among industry participants, regulators, or standards bodies regarding the interpretation or effect of such signals. As a result, the Website does not currently respond to DNT signals. However, given our limited use of tracking technologies — as described in this clause — and our commitment not to sell personal information or to engage in cross-context behavioral advertising, the absence of a DNT response has minimal practical impact on your privacy when interacting with the Website.

11. International Data Transfers

11.1 Location of Data Processing

Duce Namazi LLC is headquartered in Sandy, Utah, United States of America, and all personal information we collect is processed and stored on servers and information systems located within the United States. Our web-hosting infrastructure, email-service provider, and cloud-storage platforms maintain data centers within the territorial borders of the United States. We do not operate data centers, server infrastructure, or processing facilities outside the United States, and we do not transfer personal information to any international locations as a matter of routine business practice. If a specific engagement requires that we access client systems or data located outside the United States — for example, in the course of providing remote system-assessment services — such access is temporary, purpose-limited, and conducted solely through encrypted remote-access channels in accordance with the terms of the applicable client agreement.

11.2 International Visitors

The Website is intended for use primarily by individuals and organizations located within the United States. If you access the Website from a location outside the United States — including, but not limited to, the European Economic Area, the United Kingdom, Switzerland, Canada, Australia, or any other jurisdiction — please be aware that your personal information will be transferred to, processed, and stored in the United States, where data-protection laws may differ from, and may not provide the same level of protection as, the laws applicable in your country of residence. By accessing the Website from outside the United States and providing personal information to us, you acknowledge and expressly consent to the transfer of your information to the United States and to the processing of your information in accordance with the terms of this Privacy Policy. If you do not consent to such transfer and processing, you must refrain from using the Website and from providing any personal information to Duce Namazi LLC.

11.3 Safeguards for Cross-Border Transfers

In the event that Duce Namazi LLC engages a service provider or business partner that processes personal information outside the United States — a scenario that has not occurred as of the effective date of this policy — we will implement appropriate safeguards to ensure that the transferred data receives a level of protection equivalent to that provided under this Privacy Policy and applicable U.S. law. Such safeguards may include: entering into Standard Contractual Clauses — also referred to as Model Clauses — approved by the relevant data-protection authorities; verifying that the recipient country has been deemed to provide an adequate level of data protection by the relevant regulatory body; implementing binding corporate rules where the transfer occurs within a corporate group; or obtaining your explicit, informed consent to the transfer after having clearly communicated the risks associated with the absence of adequate safeguards. This clause will be updated if and when such safeguards are put in place.

12. Children and Minors Privacy

12.1 Age Restrictions

The Website is a business-to-business and business-to-consumer platform designed for use by individuals who are at least eighteen years of age and who possess the legal capacity to enter into binding contracts. The professional services offered by Duce Namazi LLC — including computer systems design, infrastructure engineering, technology advisory, and related consulting — are intended exclusively for adult professionals, business owners, and organizational decision-makers capable of evaluating, negotiating, and contracting for technical consulting services. We do not direct the Website, our services, or any of our marketing communications to individuals under the age of eighteen. We do not knowingly collect, solicit, request, or otherwise process personal information from any individual whom we know or have reason to believe is under the age of eighteen. If we become aware that we have inadvertently collected personal information from an individual under the age of eighteen, we will take prompt steps to delete that information from our systems and records, subject to any legal obligation that may require retention. If you are a parent or legal guardian and believe that your child under the age of eighteen has provided personal information to us, please contact us immediately at care@ducenamazi.buzz using the subject line: Minor Data Removal, so that we can investigate and take appropriate action.

12.2 No Knowing Collection from Minors

Duce Namazi LLC does not have actual knowledge that we collect, process, or sell the personal information of individuals under the age of eighteen. As a business-to-business professional services firm operating in the computer systems design industry, our client base consists of organizations and adult professionals. We do not offer products or services that appeal to minors, we do not use advertising or marketing channels directed toward minors, and we do not employ design features — such as gamification, animated characters, or child-oriented themes — that would attract a minor audience. Our client engagements typically involve corporate procurement processes, signed service agreements, and payments through business banking channels — all mechanisms that presuppose adult participants with legal capacity. These characteristics of our business model make it highly improbable that a minor would provide personal information to us in the ordinary course.

12.3 Data Rights for Minors

Should a minor — defined as an individual between thirteen and eighteen years of age — provide personal information to Duce Namazi LLC despite the restrictions set forth in this clause, that minor, or their parent or legal guardian, may request the deletion of such information by contacting us at care@ducenamazi.buzz. We will process such requests in accordance with the procedures described in Clause 9.4 and the applicable provisions of the Children's Online Privacy Protection Act — COPPA — and any analogous state-level statutes. For individuals under the age of thirteen, COPPA imposes additional obligations on operators of websites and online services, including requirements to obtain verifiable parental consent before collecting personal information. Because we do not knowingly collect information from anyone under thirteen, we do not maintain a COPPA-compliant consent mechanism, and we ask that no individual under thirteen provide any information through the Website.

13. Third-Party Links and Services

13.1 Links to External Websites

The Website may, from time to time, contain hyperlinks to external websites, platforms, or resources that are not owned, operated, or controlled by Duce Namazi LLC. These links are provided solely for your convenience and informational purposes. The inclusion of any link does not constitute or imply our endorsement, sponsorship, approval, or recommendation of the linked website, its operator, or the products, services, or content offered through it. Duce Namazi LLC is not responsible for the privacy practices, data-handling policies, or content of any external website. When you navigate away from the Website by clicking an external link, the privacy policy of the destination website governs any information you subsequently provide or that is collected through your interaction with that website. We strongly encourage you to read the privacy policy and terms of service of every website you visit, particularly those that request personal information or deploy tracking technologies.

13.2 Embedded Content and Social Features

Duce Namazi LLC does not currently embed content — such as videos, social-media feeds, maps, or interactive widgets — from third-party platforms on the Website. If we introduce such embedded content in the future, we will update this policy to describe the nature of the embedded content, the third-party provider, the types of data collected through the embedded functionality, and your options for controlling data collection. We will not introduce embedded content that collects personal information from visitors without providing clear notice and, where required, obtaining consent. Similarly, the Website does not currently incorporate social-media sharing buttons, social-login functionality, or comment systems hosted by third-party platforms that would enable social-media companies to track your visit to our Website. This design choice reflects our philosophy of minimizing third-party data intermediaries in visitors' interactions with the Website.

13.3 Third-Party Services Used in Business Operations

While the Website itself minimizes integration with third-party services, Duce Namazi LLC does rely on certain third-party providers for internal business operations, as described in Clause 6.2. These providers — including our email-service provider, cloud-storage platform, and accounting-software provider — have their own privacy policies governing the data they process on our behalf. We select providers who demonstrate a commitment to data protection and who provide contractual commitments regarding data security, confidentiality, and processing limitations. However, the privacy practices of these providers are ultimately governed by their own policies and terms. If you have questions about the specific privacy practices of a provider that processes your data in connection with our services, please contact us at care@ducenamazi.buzz, and we will provide you with the identity of the relevant provider and a link to their privacy policy.

14. Changes to This Privacy Policy

14.1 Policy Updates and Modifications

Duce Namazi LLC reserves the right to amend, modify, or update this Privacy Policy at any time and from time to time in response to developments in the law, changes in our business practices, evolution of the technology platforms we use, and feedback from clients, regulators, and other stakeholders. When we make changes to this policy, we will revise the last updated date displayed at the top of this page. Material changes — meaning changes that materially expand the categories of personal information we collect, that introduce new purposes for which we use personal information, that alter the categories of third parties with whom we share information, or that otherwise materially affect your rights or our obligations under this policy — will be communicated more prominently. For material changes, we may provide notice through a banner on the Website, through a direct email communication to individuals for whom we hold contact information, or through a pop-up notice that appears when you first visit the Website after the updated policy takes effect, depending on the significance of the change and the communication channels we have available.

14.2 Your Obligation to Review

It is your responsibility to review this Privacy Policy periodically to remain informed of our current data-handling practices. The version of the policy posted on the Website at any given time is the operative version and governs our use of your personal information from that time forward. Your continued use of the Website following the posting of an updated Privacy Policy constitutes your acknowledgment of the changes and your acceptance of the updated terms. If you do not agree with any modifications to this policy, you must cease using the Website and, to the extent you maintain a client relationship with Duce Namazi LLC, notify us that you do not consent to the updated policy. In such circumstances, we will work with you to address your concerns, but we may be unable to continue providing services if the updated policy reflects practices that are necessary for the continuation of those services.

14.3 Archived Versions

Duce Namazi LLC maintains an archive of prior versions of this Privacy Policy for a period of not less than three years. If you wish to review a prior version of the policy — for example, to understand the privacy terms that were in effect at the time you initially provided information to us — you may request access to the archived versions by contacting us at care@ducenamazi.buzz with the subject line: Archived Policy Request. Please specify the date or date range for which you seek the policy version, and we will provide the relevant documents within a reasonable timeframe. Archived policies are provided for informational purposes only; the current version published on the Website remains the governing document for all current and ongoing data processing.

14.4 No Retroactive Application Without Consent

To the extent required by applicable law, material changes to this Privacy Policy will not be applied retroactively to personal information collected before the effective date of the change without your express consent. If we wish to use previously collected personal information for a new purpose that is materially different from the purposes described at the time of collection and that is not otherwise compatible with those original purposes, we will seek your explicit consent before doing so. This commitment ensures that you retain meaningful control over the uses of your information, even as our business practices and this policy evolve over time.

15. Contact Information

15.1 How to Reach Us

Duce Namazi LLC welcomes your questions, comments, and concerns regarding this Privacy Policy and our privacy practices. If you wish to exercise any of the rights described in this policy, to report a suspected privacy or security violation, to inquire about our data-handling practices, or to provide feedback on how we can improve our privacy program, please contact us using any of the following channels. We are committed to responding to all privacy-related inquiries in a timely, thorough, and respectful manner.

15.2 Response Timeline

Upon receiving your privacy-related communication, we will acknowledge receipt within ten business days. We will provide a substantive response to your inquiry or request within forty-five calendar days, subject to the possibility of a single forty-five-day extension where the complexity or volume of your request necessitates additional processing time. If an extension is required, we will notify you within the initial forty-five-day period and explain the reason for the delay. Requests submitted through postal mail may experience additional transit and processing time; for the most expeditious response, we recommend using email communication to care@ducenamazi.buzz.

15.3 Complaint and Escalation

If you believe that Duce Namazi LLC has not adequately addressed your privacy concerns, or if you believe that our processing of your personal information violates applicable data-protection law, you have the right to file a complaint with the relevant supervisory authority. In the United States, the appropriate authority is typically the Office of the Attorney General of your state of residence. For residents of Utah, complaints may be directed to the Utah Attorney General's Office, Consumer Protection Division. For individuals located in the European Economic Area or the United Kingdom, complaints may be directed to the data-protection supervisory authority in your country of residence or to the Information Commissioner's Office — ICO — in the United Kingdom. We would, however, appreciate the opportunity to address your concerns directly before you escalate the matter to a regulatory authority. Please contact us at care@ducenamazi.buzz, and we will make every reasonable effort to resolve your concern at the earliest possible stage of the process.

15.4 Accessibility

Duce Namazi LLC is committed to ensuring that this Privacy Policy and our privacy-related communications are accessible to all individuals, including those with disabilities. If you require this policy in an alternative format — such as large print, screen-reader-optimized text, or a format compatible with assistive technology — please contact us at care@ducenamazi.buzz, and we will work with you to provide the policy in a format that meets your needs. We aim to provide alternative-format documents within a reasonable timeframe following receipt of your request.