Privacy Policy

In the course of operating our Site and delivering our Services, we may collect, use, or retain a range of information provided by you directly, generated by your device or browser, or observed through your interactions with our Site or Services. This may include, without limitation, contact and identifying information, technical and device information, browsing and navigation activity, and other information your browser or device makes available to us or to service providers we use to operate the Site. The specific categories of information collected can vary and may change over time as our Site, Services, and the tools we use to operate them evolve.

Where we deliver managed IT services under a signed agreement, we may also collect or access Client Data, as defined in our Master Services Agreement — meaning any data a client stores on, or transmits through, systems we manage on their behalf. Client Data remains the client's property; our access to it is solely to deliver contracted Services or as the client otherwise directs.

We may use the information described above for a range of business purposes, including, without limitation, responding to inquiries, delivering and supporting our Services, communicating with clients about their accounts and engagements, analyzing and improving our Site and Services, meeting our legal, accounting, insurance, and regulatory obligations, and other purposes consistent with operating our business. The specific purposes for which we use information can vary and may change over time as our Site, Services, and business practices evolve.

If you consent to receive text messages from us — for example, to coordinate a site visit or receive a status update — those messages are limited to operational communications related to your service engagement. We do not send marketing texts under this program, and we do not share phone numbers or associated information gathered through text messaging with third parties for their own marketing purposes.

You may opt out of text messages at any time by replying STOP (or a recognized equivalent) to any message from us. Message and data rates may apply. For help, reply HELP or contact us using the information in Section 13 below.

Our primary objective in collecting information is to ensure the functionality, performance, and dependability of our Site and Services. We may collect information from a range of sources, including directly from you, through your use of our Site and Services, through service providers and tools we use to operate and analyze our Site, and passively through your browser or device. We may collect any information reasonably available to us through these sources that helps us deliver, maintain, or improve our Site and Services.

We may share information with:

• Service providers and direct affiliates we use to operate our business and deliver Services (for example, our professional services automation platform, remote monitoring tools, accounting software, and similar operational vendors). These providers are listed in our Schedule of Third-Party Services, and each is bound by its own terms and privacy commitments. We only share what is necessary for them to perform their function.
• Legal and regulatory recipients, where required to comply with law, respond to a valid legal request, or protect our rights, property, or the safety of others.
• A successor entity, if we are involved in a merger, acquisition, or sale of assets — in which case client and Site-visitor information may transfer as part of that transaction, subject to the same protections described here.

Securing information entrusted to us is a core priority, not a secondary consideration — our operating priorities place client service delivery first and information security immediately alongside it, ahead of convenience or business efficiency. We restrict access to personal information and Client Data on a strict need-to-know basis and audit that access. We maintain reasonable administrative, technical, and physical safeguards appropriate to the nature of the information we handle, and we aim to adhere to the highest applicable standards under relevant data protection laws and industry guidelines.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Specific security practices are described to clients directly as part of our service agreements and, where applicable, our Data Processing Agreement.

Our Site may use cookies, analytics, and similar metadata-collection technologies to understand how our Site is used and to improve its performance, our service delivery, and our reach.

Our Site may link to third-party websites, including vendor terms and privacy policies referenced in our Schedule of Third-Party Services. A link to a third party's site does not constitute our endorsement of that site or its policies or practices. We are not responsible for the privacy practices of those third parties, and we encourage you to review their policies directly.

If you are a client and have a concern about a specific vendor's policy or practice, you may raise it with us using the contact information in Section 13, and we will address it consistent with our standard procedures.

Our Site and Services are intended for business use by adults — meaning individuals who are at least 18 years old, or who have reached the age of legal majority under the law of the country from which they are accessing our Site, whichever applies — and are not directed to children. We do not knowingly collect personal information from anyone under 13. If we become aware that we have inadvertently received personal information from a child under 13, we will delete that information from our records.

We offer clients the ability to access, correct, or request deletion of their personal information. If you are a client and would like to exercise any such right, contact us using the information below, and we will respond consistent with applicable law. Where a specific state or international privacy law applies to our processing of your information (such as the CCPA, GDPR, or a state privacy law identified in our Data Processing Agreement), the terms of that law govern our obligations to you, and we will handle your request accordingly.

Non-client Site visitor metadata is retained only briefly and is purged on a frequent, routine basis as part of our normal operations. As a result, we generally do not have the ability to produce, correct, or delete a specific non-client visitor's data on request, since it will typically no longer exist in our systems by the time such a request could be made.

We are a US-based company, and Client Data processed and stored in connection with the managed IT services we deliver under a signed agreement is retained within the United States. This includes data handled through our outsourced help desk function, which we specifically staff with US-based personnel and physical infrastructure.

For information collected through our Site generally — including Site-visitor metadata and data handled by third-party web infrastructure, developers, or service providers we use to operate the Site — we do not represent that such data is processed or stored exclusively within the United States. We generally aim to use US-based services, but a third-party vendor supporting our Site may operate outside the United States without our direct knowledge, and we cannot guarantee otherwise. By using our Site, you acknowledge that Site-related information may be handled outside your own country, and that your rights and remedies with respect to that information are limited to those available under applicable United States law, regardless of any additional or different protections that may exist under the law of another country.

We may update this Privacy Policy from time to time. When we do:

• We will update the effective date at the top of this Policy.
• We will send email notice to affected clients' primary contact on file describing the change, on or before the date it takes effect. We generally aim to send dedicated notice for each update; however, any email communication from us that references this Policy, an update to it, or our document suite generally may itself constitute sufficient notice, regardless of whether a separate dedicated notice is also sent.
• For Site-visitor-facing changes not tied to an active client relationship, the updated Policy posted on our Site governs, effective as of its stated date.
• Continued use of our Site or Services after notice constitutes acceptance of the updated Policy.

For privacy questions, concerns, or to exercise a data right, contact us at: