Privacy Policy - NDM Outsourcing Corporation

1. Introduction

NDM Outsourcing Corporation (“NDMOC,” “we,” “our,” or “us”) is committed to protecting the privacy and security of all personal information we collect, process, and store.

This Privacy Policy explains how we collect, use, disclose, and safeguard information in accordance with applicable United States privacy laws and recognized international data protection standards, including the California Consumer Privacy Act (CCPA), Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), and the EU-U.S. Data Privacy Framework (DPF).

NDMOC is a U.S.-based call center and business process outsourcing company providing services to clients both domestically and internationally. Our operations are guided by U.S. federal and state privacy principles, while recognizing and respecting international privacy laws that govern cross-border data flows.

By using our services, visiting our website, or engaging with us, you consent to the practices described in this policy.

2. Information We Collect

We collect personal and business information necessary to operate our services efficiently and securely. The information we collect falls into the following categories:

A. Personal Identifiers

Full name
Email address
Phone number
Business or mailing address
Job title or position

B. Account and Transactional Data

Login credentials (username and password)
Billing information, tax ID, and payment records
Contractual or service account details

C. Communication Data

Records of correspondence via phone, email, or chat
Call recordings (for quality assurance and training)
Feedback, inquiries, or support tickets

D. Technical and Website Data

IP address, browser type, device identifiers
Operating system, location (approximate), and language settings
Referring URLs, website activity, and cookie identifiers

We collect this information directly from you, from your employer (if you are a business contact), or automatically when you interact with our website.

3. How We Use Personal Information

NDMOC uses collected data for legitimate business and operational purposes, including to:

Deliver and manage call center, customer support, and outsourcing services
Communicate with clients, customers, and users
Process transactions, billing, and account management
Monitor service quality, compliance, and operational performance
Improve our systems, websites, and client experience
Protect against fraud, security threats, or unauthorized access
Comply with applicable laws, court orders, and regulatory requirements

We do not sell or rent personal information to third parties. All data processing is conducted with transparency, confidentiality, and purpose limitation in mind.

4. Legal Basis for Processing (for International Clients)

For individuals located in the European Union, United Kingdom, or Switzerland, we process personal data under the following legal bases consistent with the GDPR and Data Privacy Framework (DPF):

Performance of a contract or pre-contractual obligations
Compliance with legal obligations
Legitimate business interests
Consent (where required, especially for sensitive or marketing data)

5. Data Sharing and Disclosure

We may share limited personal information with trusted partners and vendors that support our operations, including:

Cloud hosting and IT infrastructure providers (for secure data storage)
Payment processors and accounting services
Customer relationship management (CRM) and communication platforms
Analytics, compliance, and auditing providers

Each third party is contractually obligated to protect the confidentiality and security of the data, and to process it only in accordance with our instructions and applicable law.

NDMOC may also disclose information:

To comply with legal or regulatory obligations
To respond to lawful requests from government or law enforcement authorities
During a merger, acquisition, sale, or corporate restructuring, where permitted by law

To protect the safety, rights, or property of NDMOC, our clients, or the public

6. Data Retention

NDMOC retains personal information only as long as necessary for the purposes for which it was collected, or as required by applicable laws and contractual obligations.
When information is no longer needed, it is securely deleted, anonymized, or archived in accordance with our internal retention and destruction policy.

7. Data Security

We maintain robust administrative, technical, and physical safeguards to protect personal data against loss, misuse, unauthorized access, disclosure, or destruction.

Our security practices include:

Role-based access controls
Encryption of data at rest and in transit
Regular vulnerability assessments and audits
Multi-factor authentication for sensitive systems
Confidentiality and data protection training for all staff

While we take all reasonable measures to protect information, no electronic transmission or storage system can be guaranteed 100% secure.

8. Your Privacy Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information, including the right to:

Access the personal data we hold about you
Request correction or deletion of inaccurate data
Object to or restrict specific types of processing
Withdraw consent for data use (where applicable)
Receive your data in a portable, machine-readable format
Opt out of marketing communications

To exercise your rights, please contact us at privacy@ndmoc.com. We will respond promptly and in accordance with applicable privacy laws.

9. Cookies and Tracking Technologies

NDMOC uses cookies and similar tracking technologies to enhance website functionality and analytics.
Cookies may collect non-personal information such as browser type, session duration, and pages visited. You may modify your browser settings to decline cookies; however, doing so may limit certain site features or functionality.

10. International Data Transfers

As a U.S. company serving global clients, NDMOC may transfer personal information across borders. We comply with recognized frameworks governing international data transfers, including:

EU-U.S. Data Privacy Framework (DPF)
UK Extension to the EU-U.S. DPF
Swiss-U.S. Data Privacy Framework

NDMOC ensures appropriate safeguards and accountability for all international data transfers consistent with the DPF Principles and applicable foreign data protection regulations.

11. Children’s Privacy

Our services are intended for adult professionals and businesses. NDMOC does not knowingly collect or process data from minors under the age of 18. If we learn that such data has been provided, we will delete it promptly.

12. Policy on U.S. Data Privacy Compliance

NDMOC complies with major U.S. privacy and consumer protection laws, including but not limited to:

California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)
Virginia Consumer Data Protection Act (VCDPA)
Colorado Privacy Act (CPA)
Connecticut Data Privacy Act (CTDPA)
Utah Consumer Privacy Act (UCPA)

These laws provide individuals with rights regarding how their personal information is collected, used, and shared. NDMOC honors valid consumer requests consistent with these laws.

13. Changes to This Policy

NDM Outsourcing Corporation may update this Privacy Policy periodically to reflect operational, legal, or regulatory changes.

The “Effective Date” at the top of this policy indicates the most recent update. We encourage users to review this page regularly for updates. Continued use of our services after changes take effect constitutes acceptance of the revised policy.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact:

NDM Outsourcing Corporation
Attn: Data Protection Officer
📍 45 Dan Road, Suite 28, Canton, MA 02021
📧 privacy@ndmoc.com
📞 (508) 283-3103

If you are outside the United States and have concerns regarding international data transfers, NDMOC will address your inquiry in accordance with applicable international data privacy laws and frameworks.