Cookie Policy

1. Corporate Identity

Tech Sol Outsourcing is a business brand, public-facing service platform, and media/service-delivery front owned and operated by Koshar and Harris LLC. References to “Tech Sol Outsourcing,” “we,” “us,” or “our” mean Koshar and Harris LLC acting through Tech Sol Outsourcing unless the context expressly requires otherwise.

This Cookie Policy explains how cookies and similar technologies may be used on Tech Sol Outsourcing websites, why they may be used, the categories into which they may fall, how choices are managed, and how different regional rules may apply.

The presence of a technology category in this Policy does not mean that every technology described is currently active. Our operational inventory should reflect technologies actually deployed.

A cookie is a small piece of data that a website or related service may store on, or retrieve from, a browser or device. Cookies may support security, sessions, preferences, analytics, performance, advertising, consent management, and other website functions.

4. Similar Storage and Access Technologies

For convenience, this Policy uses “cookies” broadly to include comparable storage or access technologies where relevant, such as local storage, session storage, browser storage, pixels, web beacons, scripts, tags, SDK-based storage, device identifiers, conversion tags, link-decoration technologies, and certain fingerprinting or similar techniques.

5. First-Party and Third-Party Technologies

5.1 First-Party Technologies

First-party technologies are set or accessed by the Tech Sol Outsourcing website or infrastructure used directly to operate it.

5.2 Third-Party Technologies

Third-party technologies may be provided by external organizations used for security, communications, video, analytics, advertising, conversion measurement, fraud prevention, infrastructure, or other functions. Where applicable, those providers may have their own privacy documentation.

6. Session and Persistent Technologies

Session technologies generally expire when a session or browser interaction ends. Persistent technologies may remain for a defined period or until removed, depending on purpose, provider configuration, browser settings, consent status, and applicable law.

Category	Typical Purpose	Default Treatment	Examples of Functions
Strictly Necessary	Core operation, security, routing, consent storage, requested services	May operate where lawfully exempt from consent	Security, session integrity, load balancing, anti-abuse, consent-preference storage
Functional	Optional preferences or enhanced functionality	Consent-dependent where required	Language, display preferences, optional embedded features
Analytics / Performance	Measure site use, performance, errors, and aggregate engagement	Disabled pending consent where prior consent is required	Traffic measurement, performance analytics, diagnostic analytics
Advertising / Marketing	Attribution, conversion measurement, remarketing, targeting, ad effectiveness	Disabled pending consent where prior consent is required	Advertising pixels, conversion tags, audience measurement

8. Strictly Necessary Technologies

Strictly necessary technologies may be used where required to provide a service explicitly requested by the user or to support essential security, network, session, routing, or consent-management functions.

Where applicable law provides an exemption for genuinely necessary storage or access, these technologies may operate without optional consent. A technology is not treated as “necessary” merely because it is useful to us.

9. Functional Technologies

Functional technologies may remember choices or enable optional website features. Where prior consent is legally required, such technologies will not be intentionally activated until the required consent is recorded.

10. Analytics and Performance Technologies

Analytics technologies may help us understand website performance, navigation patterns, technical errors, traffic sources, aggregate visitor behavior, conversion performance, and usability.

Where prior consent is legally required for non-essential analytics, those technologies should remain inactive until appropriate consent is obtained.

11. Advertising and Marketing Technologies

Where used, advertising or marketing technologies may support campaign attribution, conversion measurement, audience measurement, remarketing, retargeting, targeted advertising, or similar functions.

Where prior consent is legally required, such technologies will not be intentionally activated before the required consent is obtained.

Nothing in this Policy authorizes the sale or marketing-sharing of mobile phone numbers or SMS/MMS consent. Those restrictions are governed by the Privacy Policy and apply regardless of cookie settings.

12. Security and Fraud-Prevention Technologies

Security technologies may detect malicious traffic, prevent abuse, enforce rate limits, protect forms, identify suspicious activity, secure sessions, or protect network integrity. Depending on their actual function and applicable law, some may qualify as strictly necessary.

Where applicable law requires consent before non-essential storage or access, consent should be obtained before the relevant technology is activated. Consent should be affirmative where required and should not be inferred solely from continued browsing.

Consent choices may be stored so the website can remember and respect the user's preference.

Where a consent banner or preference center is required, the interface should provide meaningful controls appropriate to the applicable law. Depending on jurisdiction and implementation, choices may include:

Accept All
Reject Non-Essential
Manage Preferences

Where applicable law requires a genuine choice, rejecting non-essential technologies should not be made materially more difficult than accepting them.

15. Prior Blocking

16. Granular Preferences

Where appropriate, users should be able to manage non-essential categories separately. Strictly necessary technologies may remain active where they are legitimately exempt from consent requirements.

17. Withdrawal and Changing Preferences

Where processing relies on cookie consent, users should be able to withdraw or modify consent through an accessible preference mechanism. Withdrawal affects future use of technologies that rely on the withdrawn consent and does not retroactively invalidate processing that was lawful before withdrawal.

We may retain limited records of cookie preferences, consent timestamps, categories selected, or related technical information where reasonably necessary to remember choices, demonstrate compliance, prevent repeated prompts, and honor withdrawals.

The website should maintain an operational inventory of cookies and similar technologies actually deployed. Where reasonably practicable, the inventory or preference center should identify:

Technology or cookie name
Provider
Purpose
Category
First-party or third-party status
Typical duration
Whether prior consent is required under the applicable implementation

We intentionally do not list generic analytics, advertising, or CRM vendors merely because they are commonly used. A provider should be identified as active only if the deployed website actually uses that provider.

20. Changes to Technology Providers

Providers, cookie names, configurations, purposes, and durations may change as the website evolves. The operational inventory or consent-management interface may therefore contain more current technical details than this narrative Policy.

Where a material change requires fresh consent, the website should request fresh consent as required by applicable law.

21. European Union and EEA

Where applicable, storage of information on, or access to information already stored on, terminal equipment may be governed by national laws implementing Article 5(3) of Directive 2002/58/EC (the ePrivacy Directive), as amended.

Where Article 5(3) requires consent, non-essential technologies should not be intentionally activated before valid consent is obtained. Technologies strictly necessary to transmit a communication or provide a service explicitly requested by a user may fall within an applicable exemption.

Where information generated through these technologies constitutes personal data, the EU GDPR may also apply, including Articles 4(11) and 7 for consent, Article 5 principles, Article 6 lawful bases, Articles 12-14 transparency, and applicable data-subject rights.

22. United Kingdom

Where applicable, UK storage and access technologies are governed by the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR), including Regulation 6 and applicable exceptions or amendments. The UK GDPR and Data Protection Act 2018 may also apply where information obtained through those technologies is personal data.

The Data (Use and Access) Act 2025 amended aspects of UK data-protection and PECR law. This Policy should be interpreted according to the law in force at the relevant time.

23. United States and California

The United States does not have a single nationwide cookie-consent regime equivalent to the EU ePrivacy framework. However, tracking may be regulated by federal or state privacy, consumer-protection, communications, or sector-specific laws.

Where the California CCPA applies, certain tracking disclosures may constitute “sharing” for cross-context behavioral advertising. California Civil Code § 1798.120 and related provisions may provide eligible consumers an opt-out right. Where legally required, qualifying Global Privacy Control signals will be honored.

24. Canada

Where cookie-derived information constitutes personal information governed by PIPEDA or applicable provincial privacy legislation, relevant accountability, transparency, consent, purpose, collection, disclosure, safeguard, access, and retention obligations will be considered. Not every cookie necessarily requires the same form of consent in every Canadian context.

25. Australia

Where cookie-derived information constitutes personal information and the Privacy Act 1988 applies, relevant Australian Privacy Principles may include APP 1, APP 3, APP 5, APP 6, APP 7, APP 8, and APP 11, depending on the processing.

26. United Arab Emirates, Brazil, Singapore, and South Africa

Where applicable, cookie- or device-derived personal data may be subject to the UAE PDPL (Federal Decree-Law No. 45 of 2021), Brazil's LGPD (Law No. 13,709/2018), Singapore's PDPA, South Africa's POPIA, or other local privacy regimes. Cross-border transfer obligations may also apply.

27. Global Privacy Control and Similar Signals

Where applicable law requires recognition of a legally qualifying browser or device-based universal opt-out mechanism, including Global Privacy Control, we will process that signal as legally required.

An ordinary browser “Do Not Track” signal is not necessarily equivalent to a legally recognized universal opt-out mechanism.

28. Browser and Device Controls

Users can often remove, block, or restrict cookies using browser or device settings. Blocking strictly necessary technologies may impair website security or functionality. Browser and device controls operate independently of our website's own preference center.

29. Third-Party Controls

Some external providers offer their own privacy, advertising, or opt-out controls. Those controls are administered independently by the relevant provider and may operate in addition to our website preferences.

30. International Processing

Some service providers may process cookie-derived information internationally. Where such information is personal data and a restricted international transfer occurs, the transfer will be handled under the Privacy Policy and applicable transfer rules.

31. Retention

Cookie and similar technology durations vary according to category, purpose, provider, configuration, and consent status. We seek to use retention periods proportionate to the relevant purpose. The operational inventory or consent interface should provide specific durations where reasonably practicable.

32. Relationship With the Privacy Policy

This Cookie Policy governs cookies and similar storage/access technologies. The Privacy Policy governs personal information generated, received, or processed through those technologies, including disclosures, international transfers, rights, security, and retention.

33. Relationship With the Terms & Conditions

The separate Terms & Conditions govern use of the website, service descriptions, intellectual property, disclaimers, liability, and other public website rules.

We may update this Cookie Policy when technologies, vendors, configurations, consent requirements, legal standards, or website functionality change. The Last Updated date identifies the current version.

Contact Information

Privacy and data protection: privacy@kosharandharris.us

Legal matters: legal@kosharandharris.us

Corporate matters: corporate@kosharandharris.us

Website: https://techsoloutsourcing.us

For privacy-rights requests, please use the privacy email so the request can be routed and recorded appropriately.

Selected Legal Framework References (Non-Exhaustive)

European Union: Directive 2002/58/EC (ePrivacy Directive), Article 5(3), as implemented by applicable national law; Regulation (EU) 2016/679 (GDPR), including Articles 4(11), 5, 6, 7, and 12-14 where relevant.
United Kingdom: Privacy and Electronic Communications (EC Directive) Regulations 2003, Regulation 6 and applicable exceptions/amendments; UK GDPR; Data Protection Act 2018; Data (Use and Access) Act 2025.
California: CCPA as amended, including California Civil Code § 1798.120 and related opt-out provisions where tracking constitutes regulated sharing.
Canada: PIPEDA and applicable provincial privacy law where cookie-derived information is personal information.
Australia: Privacy Act 1988 and Australian Privacy Principles where cookie-derived information is personal information.
Other regions: applicable UAE PDPL, Brazil LGPD, Singapore PDPA, South Africa POPIA, and other local privacy or device-storage requirements where legally applicable.