Privacy Policy

This Privacy Policy explains how information may be collected, used, accessed, retained and disclosed in connection with the website and remote IT consulting and technology support services. It is intended to give visitors and business clients a clear description of the information practices that are reasonably associated with this service model.

1. Scope and purpose

This policy describes the handling of personal information associated with the public website, service inquiries, business communications, scheduling, project administration, billing records and authorized remote IT support. It is written for website visitors, prospective clients and business representatives who provide information in connection with a service request.

When technical work is performed inside a client-controlled account or system, the client ordinarily determines the business purpose for the information stored there. In that situation, the client may act as the controller or business responsible for the data, while the service provider performs only the authorized technical task within the agreed scope.

2. Categories of information that may be received

Depending on the interaction, information may include a name, business name, job role, business email address, telephone number, business mailing information, service selection, project description, support history, invoice information and communications relating to the requested work.

Technical support may also involve information about devices, operating systems, software versions, business applications, cloud environments, domain or email settings, error messages, account structures, user roles, configuration details and other technical context needed to diagnose or complete the authorized task.

3. Sources of information

Information is generally received directly from the person making an inquiry, from an authorized business representative, from communications exchanged during an engagement, or from systems and applications to which the client grants access for the purpose of providing the requested service.

Limited technical website information may also be generated automatically by the website platform, hosting infrastructure, security tools or analytics features if those features are enabled.

4. How information is used

Information may be used to respond to inquiries, understand technical requirements, provide estimates or scheduling information, perform authorized configuration or troubleshooting, maintain project records, administer invoices, document completed work, protect accounts and systems from misuse, improve service operations, and satisfy legitimate accounting, tax, legal or recordkeeping requirements.

Information obtained through technical access should not be intentionally used for unrelated purposes merely because it is technically visible during an engagement.

5. Remote access and client-controlled systems

Some services may require temporary access to client-controlled accounts, administrative consoles, shared drives, business applications or devices. Access should be limited to the level reasonably necessary for the requested task. Clients are encouraged to use temporary invitations, role-based access, separate administrator accounts or other methods that avoid unnecessary disclosure of credentials.

Clients should not place passwords, recovery codes, private encryption keys, payment-card data, Social Security numbers or other highly sensitive credentials into ordinary website forms. Where credentials must be exchanged, a secure method appropriate to the relevant platform should be used.

6. Website technical data and cookies

The website platform may process information such as IP address, browser type, device characteristics, operating system, referring page, page requests, session timing and basic security or performance logs. Cookies or similar browser storage may also be used by the platform or enabled services. The Cookie Policy explains these technologies in more detail.

Because Shopify storefront technology and installed applications can change, the exact list of technical cookies or service providers should be reviewed whenever the website configuration materially changes.

7. Service providers and processors

Business operations may rely on third-party providers for website hosting, cloud infrastructure, email, productivity tools, payment processing, accounting, scheduling, file storage or other administrative functions. Those providers may process limited information where necessary to provide their service.

Third-party providers operate under their own contracts, privacy terms, security practices and retention schedules. This policy does not replace the privacy notices issued by Microsoft, Google, Shopify, payment processors or other independent providers.

8. Sharing and disclosure

Personal information may be disclosed when reasonably necessary to provide an authorized service, use a service provider supporting business operations, follow a client instruction, protect systems or legal rights, investigate suspected fraud or misuse, respond to a lawful request, or comply with an applicable legal obligation.

The service model described on this website is not based on selling personal information to data brokers or unrelated third parties. If the website or business model later introduces data sale, targeted advertising or materially different sharing practices, this policy should be revised before or when those practices begin.

9. Data minimization and retention

Only information reasonably related to the business purpose should be collected or retained. Retention may vary according to the type of record, the duration of the client relationship, the need to document work performed, security considerations and applicable tax, accounting, contractual or legal requirements.

Temporary technical information and access should be removed, revoked or reduced when no longer reasonably needed for the engagement. Some business records may be retained longer where they are necessary to establish payment history, resolve disputes or satisfy legal recordkeeping requirements.

10. Security practices

Reasonable administrative and technical practices may include access controls, account-level authentication, multi-factor authentication where supported, encrypted connections provided by reputable platforms, limited credential exposure, software updates, secure provider configuration and removal of access that is no longer needed.

No website, remote connection, cloud platform or storage method can be guaranteed to be completely secure. Security controls reduce risk but cannot eliminate every possibility of unauthorized access, phishing, software vulnerability, device compromise or third-party failure.

11. Sensitive information

The ordinary service inquiry process is not intended to collect sensitive personal data. Clients should avoid providing medical information, biometric identifiers, government identification numbers, financial account credentials, precise geolocation information, information about children or other sensitive data unless it is genuinely necessary for a specifically authorized technical task and an appropriate method has been agreed.

If sensitive data is unexpectedly encountered during technical support, access should be limited to what is necessary to complete the task and should not be intentionally copied or retained without a legitimate service reason.

12. Privacy rights and requests

Depending on the applicable law and the circumstances of processing, an individual may have rights relating to access, correction, deletion, portability or certain processing choices. A request may require reasonable identity verification and may be limited where an exception or recordkeeping obligation applies.

Requests concerning information maintained directly by the business may be made through the ordinary business contact channel published elsewhere on the website. Requests concerning information controlled by a client inside the client’s own systems should ordinarily be directed to that client.

13. Colorado privacy considerations

The Colorado Privacy Act provides rights and imposes obligations on covered controllers that meet the law’s applicability requirements. Where and to the extent the law applies, a covered controller must provide transparent notice, honor applicable consumer rights, limit unnecessary collection, use reasonable security practices and address opt-out choices required by law.

This policy is written to describe the actual service model rather than to imply that every statutory threshold or duty necessarily applies to this business. Applicability depends on factors such as the nature and volume of personal data processed and the circumstances defined by applicable law.

14. Children

The services are directed to businesses and adult business representatives. The website is not designed as a child-directed service, and the ordinary inquiry process is not intended to solicit personal information from children.

15. Third-party links, platforms and integrations

References to Microsoft, Google, Shopify, CRM platforms, cloud providers or other technology vendors identify third-party products that may be relevant to services. Those providers independently determine their own privacy practices, security controls, account terms and product behavior. Clients should review the provider’s current documentation before placing sensitive information into a third-party service.

16. Changes and annual review

This policy is scheduled for review once each year on August 9 and may also be revised earlier if the website, service model, technology providers or legal requirements materially change. The annual review date shown above indicates the most recent scheduled review. Material changes should be reflected in the published policy so that the description remains accurate.