Skip to content

Privacy Policy

Last Updated: October 14, 2026

1. Who We Are and What This Privacy Policy Covers

In this Privacy Policy, “Abacus,” “we,” “us,” and “our” mean Abacus Information Technology LLC and its subsidiaries and affiliates, meaning each entity that directly or indirectly controls, is controlled by, or is under common control with Abacus Information Technology LLC (each, an “Abacus Company”). This Privacy Policy applies to every Abacus Company, including any company that joins the Abacus group in the future. The Abacus Companies include the businesses that formerly operated under the Medicus IT brand.

This Privacy Policy describes how we collect, use, and disclose personal information when you visit the websites we own or control that link to this Privacy Policy (collectively, the “Websites”), when you use our client portals, and when you otherwise interact with us, for example when you contact us by phone, email, or text message, register for an event or webinar, download content, or do business with us as a client, prospective client, or vendor contact. “Personal information” means information that identifies, relates to, or could reasonably be linked to an identified or identifiable individual.

The Abacus Company responsible for your personal information (the “controller,” where that concept applies under local law) is the Abacus Company with which you interact or contract. For personal information collected through the Websites, the responsible entity is Abacus Information Technology LLC, except that Abacus Information Technology UK Limited is responsible for visitors located in the United Kingdom, the European Economic Area, and Switzerland, and Abacus Technology (DIFC) Limited is responsible for visitors located in the United Arab Emirates.

2. What This Privacy Policy Does Not Cover

Information we process for our clients. In delivering our IT, cloud, and cybersecurity services, we process information, including personal information, on behalf of our clients. We act as a service provider or processor with respect to that information, and our handling of it is governed by our agreements with those clients, including, where applicable, business associate agreements under HIPAA. This Privacy Policy does not apply to that information. If you have questions about how one of our clients handles your personal information, please contact that organization directly. No protected health information is collected through or made available on the Websites.

Employees, contractors, and job applicants. Personal information of our personnel and candidates is addressed in our CPRA Employee & Contractor Privacy Notice and CPRA Job Applicant Privacy Notice, available on the Websites.

Data Privacy Framework. Our participation in the EU-U.S., UK Extension, and Swiss-U.S. Data Privacy Framework programs is described in our Data Privacy Framework Statement, available at https://abacustechnology.com/legal/data-privacy-framework-statement/.

Third-party sites and services. This Privacy Policy does not apply to websites, applications, or services operated by third parties, including sites we link to. Use of the Websites is also subject to our Website Terms of Use.

3. Personal Information We Collect

Information you provide to us. When you contact us, request information, register for an event or webinar, download content, subscribe to communications, or apply to do business with us, we collect information such as your name, email address, phone number, company name, job title, industry, country, and the content of your inquiry or communication. If you create an account on a client portal, we collect your account credentials and related account information. If you communicate with us by phone or text message, we collect the content of those communications; calls to our service desk may be recorded or monitored for quality, training, and security purposes where permitted by law.

Billing information. Payments are collected and processed by our third-party payment processors under their own terms and privacy policies. We do not directly store full payment card numbers.

Information collected automatically. When you use the Websites and our client portals, we and our analytics providers automatically collect information about your device and usage, such as IP address, browser type, operating system, pages viewed, time spent, referring pages, and approximate location derived from IP address, using cookies and similar technologies, as described in Section 6. In our client portals, this includes usage information such as pages viewed, features used, and documents downloaded, associated with your portal account.

Information from other sources. We may receive personal information from other sources, including publicly available sources, business contact databases, social media platforms, event sponsors and partners, referrals, and our clients when they designate you as a business contact or authorized user.

The categories of personal information we collect, described by reference to the categories used in U.S. state privacy laws, are:

Category Examples
Identifiers and contact information Name, email address, phone number, mailing address, account credentials, IP address
Professional or employment-related information Company name, job title, industry, business contact details
Commercial information Billing and transaction records related to our services, event registrations, content downloads
Internet or other electronic network activity Pages visited, usage data, browser and device information, interactions with our emails and Websites
Approximate geolocation General location derived from IP address
Audio, electronic, and similar information Service desk call recordings, voicemails, text messages, and other communications with us

 

4. How We Use Personal Information

We use personal information to:

  • Provide, operate, secure, and improve the Websites and our products and services;
  • Respond to your inquiries and requests and provide client support;
  • Communicate with you about our services, including service, account, and administrative communications;
  • Market our services, including sending newsletters, event invitations, and information about new or improved offerings (with your consent where required by law, and always with the ability to opt out);
  • Perform analytics and understand how visitors use the Websites;
  • Protect the security and integrity of the Websites, our services, our business, and our clients, including detecting, investigating, and preventing fraud, cyberattacks, and other unauthorized or illegal activity;
  • Comply with legal and regulatory obligations, including responding to lawful requests from public authorities;
  • Evaluate or complete a corporate transaction, such as a merger, acquisition, financing, or sale of assets; and
  • Fulfill any other purpose disclosed to you at the time of collection or with your consent.

Where the laws of the European Economic Area, the United Kingdom, Switzerland, or the DIFC apply, we process personal information on the following legal bases: performance of a contract with you; our legitimate interests (such as operating and securing our business, and marketing our services to business contacts); compliance with legal obligations; and your consent, where required.

5. Text Message (SMS) Communication

If you choose to provide your mobile phone number, we may use it to send you text (SMS) messages related to our services, including account and service notifications, scheduling and support updates, and other business-related communications. We will send marketing or promotional text messages only with your prior express consent. Message frequency may vary. Message and data rates may apply. You may opt out of receiving text messages at any time by replying STOP to any message; reply HELP for assistance. Opting out of text messages does not affect other communications you receive from us.

We do not share your mobile phone number, text messaging originator opt-in data, or SMS consent with third parties or affiliates for their marketing or promotional purposes. The disclosures described in Section 7 exclude text messaging originator opt-in data and consent, which we will not share with any third party.

6. Cookies and Similar Technologies

We and our service providers use cookies, pixels, and similar technologies on the Websites and our client portals for the following purposes:

  • Essential operation. Technologies necessary to operate the Websites, maintain sessions, and support security.
  • Analytics. Services such as Google Analytics and HubSpot on the Websites, and Microsoft Azure Application Insights in our client portals, that help us understand how visitors and users interact with them so we can make improvements. You can learn how Google uses data at https://policies.google.com/technologies/partner-sites.
  • Marketing for our own services. Technologies, such as ZoomInfo WebSights and Lead Forensics, that help us identify the organizations visiting the Websites and market our own services to business audiences. We use this information for our own sales and marketing.
  • Advertising. Technologies from advertising partners, such as Demandbase, StackAdapt, and Google advertising features, that help us deliver and measure advertising for our services on other websites and platforms, including advertising based on your visits to the Websites.

You can manage your cookie preferences at any time through the cookie settings tool on the Websites (the “Your Privacy Choices” or “Cookie Settings” link). Where required by law, non-essential cookies are set only with your consent. The cookie preference panel also lists the specific cookies and trackers currently in use. We also honor opt-out preference signals such as the Global Privacy Control (GPC): if your browser sends a GPC signal, we treat it as a request to opt out of the sale or sharing of personal information associated with your browser. Most browsers also let you remove or reject cookies through your browser settings; if you disable cookies, some features of the Websites may not function properly. For more information about cookies, visit www.allaboutcookies.org.

7. How We Disclose Personal Information

We disclose personal information in the following circumstances:

  • Within the Abacus group. We share personal information among Abacus Companies for the purposes described in this Privacy Policy, including centralized business operations, service delivery, security, and marketing of Abacus services.
  • Service providers. We disclose personal information to vendors that perform services for us, such as cloud hosting, communications and telephony, payment processing, customer relationship management, email distribution, analytics, and event management, under contracts that restrict their use of the information to providing services to us.
  • Advertising partners. Unless you opt out, we allow advertising and account-based marketing partners to collect identifiers and internet activity information on the Websites through cookies and similar technologies, in order to serve and measure advertising for our services on other websites and platforms. See Sections 6 and 8 for your choices.
  • Professional advisors. We may disclose personal information to lawyers, auditors, insurers, bankers, and other professional advisors where necessary.
  • Legal and safety. We may disclose personal information to comply with applicable law or legal process (such as a subpoena or lawful government request), to enforce our agreements and policies, or to protect the rights, property, safety, or security of Abacus, our clients, or others.
  • Corporate transactions. We may disclose personal information in connection with the evaluation or completion of a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, in which personal information may be among the transferred assets.
  • Aggregated and de-identified information. We may create and disclose aggregated or de-identified information that does not identify you.
  • With your consent. We may disclose personal information for any other purpose with your consent or at your direction.

Sales and sharing under U.S. state privacy laws. We do not sell personal information in exchange for money. However, our use of advertising cookies and similar technologies described in Section 6 may constitute a “sale” or “sharing” of personal information (identifiers and internet activity information) under some U.S. state privacy laws. You may opt out at any time as described in Section 8. Disclosures among Abacus Companies and to service providers acting on our behalf are not sales or sharing, and we never sell or share your mobile phone number, text messaging originator opt-in data, or SMS consent (see Section 5).

8. Your Privacy Rights and Choices

Depending on where you live, you may have some or all of the following rights with respect to your personal information: the right to know or access the personal information we hold about you; the right to correct inaccurate personal information; the right to delete personal information; the right to receive a portable copy of personal information; the right to opt out of certain processing; and, in the jurisdictions described in Sections 10 and 11, the rights to restrict or object to processing and to withdraw consent.

How to exercise your rights. You may exercise your rights by emailing us at DPO@abacustechnology.com or calling us at the numbers in Section 18. We may need to verify your identity before acting on your request, and we will respond within the time required by applicable law. Where permitted, you may use an authorized agent to submit a request on your behalf; we may require proof of the agent’s authority and verification of your identity. We will not discriminate against you for exercising your privacy rights.

Opting out of targeted advertising, sales, and sharing. You can opt out of the use of your personal information for targeted advertising, and of any related “sale” or “sharing,” at any time by using the “Your Privacy Choices” or “Cookie Settings” link on the Websites, or by enabling an opt-out preference signal such as the Global Privacy Control in your browser. You do not need an account to opt out.

Appeals. If we decline to act on your request, you may appeal our decision by replying to our response or emailing DPO@abacustechnology.com with the subject line “Privacy Request Appeal.” If your appeal is unsuccessful, you may contact your state attorney general or the data protection authority in your jurisdiction.

Marketing communications. You may opt out of marketing emails at any time by clicking the “unsubscribe” link in any marketing email, and you may opt out of text messages as described in Section 5. You will continue to receive transactional and administrative communications related to our services.

Cookies. You can manage cookies as described in Section 6.

9. Additional Disclosures for U.S. Residents

This section provides additional disclosures required by U.S. state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (the “CCPA”), for residents of California and other states with comprehensive privacy laws.

In the preceding 12 months, we collected the categories of personal information listed in Section 3, from the sources listed in Section 3, for the purposes listed in Section 4, and we disclosed each of those categories for business purposes to the categories of recipients listed in Section 7 (Abacus Companies, service providers, professional advisors, and parties to legal process or corporate transactions). We retain personal information as described in Section 13.

In the preceding 12 months, we “sold” or “shared” (as those terms are defined under the CCPA and similar laws) identifiers and internet or other electronic network activity information to or with advertising and account-based marketing partners and data analytics providers, for the targeted advertising purposes described in Sections 6 and 7. You have the right to opt out of sales, sharing, and targeted advertising at any time, as described in Section 8, including through an opt-out preference signal such as the Global Privacy Control. We do not knowingly sell or share the personal information of consumers under 16 years of age. We do not collect or use sensitive personal information for purposes that would trigger a right to limit under the CCPA. We do not engage in profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers.

California residents may exercise the rights described in Section 8, including through an authorized agent. California employees, contractors, and job applicants should refer to the CPRA notices referenced in Section 2. Nevada residents: we do not sell covered information as defined in Nevada Revised Statutes Chapter 603A.

10. Additional Information for the EEA, UK, and Switzerland

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the controller of personal information collected through the Websites is Abacus Information Technology UK Limited, Palladium House 3rd Floor, 1-4 Argyll Street, London, W1F 7LD, United Kingdom. We process personal information on the legal bases described in Section 4.

In addition to the rights described in Section 8, you have the right to object to processing based on legitimate interests (including direct marketing), the right to restrict processing, the right to withdraw consent at any time (without affecting prior processing), and the right to lodge a complaint with your local supervisory authority, which in the United Kingdom is the Information Commissioner’s Office (www.ico.org.uk).

Where we transfer personal information from the EEA, the United Kingdom, or Switzerland to the United States or other countries, we rely on appropriate safeguards, including the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (as described in our Data Privacy Framework Statement) and standard contractual clauses approved by the applicable authorities.

11. Additional Information for the UAE and DIFC

If you interact with Abacus Technology (DIFC) Limited, Unit GA-00-SZ-L1-RT-208, Level 1, Gate Avenue South Zone, Dubai International Financial Centre, Dubai, UAE, your personal information is processed in accordance with DIFC Data Protection Law No. 5 of 2020. In addition to the rights described in Section 8, you have the rights to object to or restrict processing, to withdraw consent, and to lodge a complaint with the DIFC Commissioner of Data Protection. Transfers of personal information outside the DIFC are made in accordance with the DIFC Data Protection Law, including on the basis of applicable adequacy decisions or appropriate safeguards.

12. International Data Transfers

We are a global business headquartered in the United States. Personal information we collect may be transferred to, stored in, and processed in the United States and other countries in which Abacus Companies or our service providers operate, which may have data protection laws different from those of your country. Where required by applicable law, we implement appropriate safeguards for international transfers, as described in Sections 10 and 11.

13. Data Retention

We retain personal information for as long as needed to fulfill the purposes for which it was collected and thereafter as necessary to comply with our legal and regulatory obligations, resolve disputes, and enforce our agreements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the information, the purposes for which we process it, the potential risk of harm from unauthorized use or disclosure, and applicable legal requirements.

14. How We Protect Personal Information

We maintain administrative, technical, and physical safeguards designed to protect personal information against loss, misuse, and unauthorized access, disclosure, alteration, and destruction, taking into account the nature of the information and the risks involved in processing it. No method of transmission or storage is completely secure, however, and we cannot guarantee the security of information transmitted to us. Please take care in deciding what information you send to us by email or other electronic means.

15. Children

The Websites are intended for business audiences and are not directed to individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided personal information to us, please contact us and we will take appropriate steps to delete it.

16. Third-Party Websites

The Websites may contain links to third-party websites. Those links are provided for convenience; we do not control third-party sites and are not responsible for their content or privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version on the Websites and revise the “Last Updated” date above. If we make material changes, we will provide notice on the Websites or as otherwise required by applicable law. We encourage you to review this Privacy Policy periodically.

18. Contact Us

If you have questions about this Privacy Policy or our privacy practices, or wish to exercise your privacy rights, please contact the Abacus Privacy Team:

  • Email: DPO@abacustechnology.com
  • Telephone: US +1 (866) 997-3999 | UK +44 (0)20 7936 1799
  • United States: Abacus Information Technology LLC, 655 Third Avenue, 8th Floor, New York, NY 10017
  • United Kingdom: Abacus Information Technology UK Limited, Palladium House 3rd Floor, 1-4 Argyll Street, London, W1F 7LD
  • UAE: Abacus Technology (DIFC) Limited, Unit GA-00-SZ-L1-RT-208, Level 1, Gate Avenue South Zone, DIFC, Dubai, UAE