Data Privacy Policy
Effective Date: August 6, 2026
Last Updated: August 6, 2026
This Privacy Policy describes how IT Solutions and Software Development ("we," "us," or "our") collects, uses, discloses, and safeguards your information when you visit our website, submit support tickets, request software development quotes, or engage our IT infrastructure and development services.
1. Information We Collect
We collect information directly provided by you, as well as data gathered automatically through technology.
A. Personal and Contact Data
- Identity Data: Name, job title, company name.
- Contact Data: Email address, phone number, physical business address.
- Billing Information: Invoicing addresses and payment details (processed via secure, compliant payment providers).
B. Technical Support & System Access Data
- Support Ticket Information: Problem descriptions, error logs, configuration screenshots, and system diagnostic data.
- Access Credentials: Remote access tokens, SSH keys, VPN details, or API keys provided explicitly by you to perform IT troubleshooting or software deployment.
- Client Assets: Source code repositories, database schemas, and application architecture specifications provided for development tasks.
C. Automated Usage Data
- Device & Log Data: IP address, browser type, operating system, referring URLs, access dates/times, and page view navigation.
- Cookies & Trackers: Session and persistent cookies used to analyze web performance and save interface preferences.
2. How We Use Your Data
We process personal and technical data strictly for operational, legal, and business purposes:
Data Category Purpose of Processing Legal Basis Contact Details Responding to inquiries, project consultations, issuing quotes. Legitimate Interest / Performance of Contract Support & Access Data Diagnosing infrastructure bugs, fulfilling service level agreements (SLAs), remote IT troubleshooting. Performance of Contract Development Assets Custom software creation, repository commits, testing, deployment. Performance of Contract Log & Analytics Data Optimizing website performance, securing systems against unauthorized intrusion. Legitimate Interest
3. Data Protection and Access Management
Given the technical nature of our services, we enforce strict security standards to ensure confidentiality and integrity:
- Encryption: Data in transit is secured using modern TLS/SSL protocols. Storage environments utilize standard AES-256 encryption.
- Credential Handling: Shared administrative logins or API tokens provided for IT support or software deployment are managed using secure, encrypted password managers. They are never hardcoded or retained beyond the scope of work.
- Least Privilege: Access to your systems or codebase is restricted only to personnel assigned directly to your project or support ticket.
4. Data Sharing and Third-Party Processors
We do not sell, rent, or trade your personal data to third parties. We may disclose data only under the following conditions:
- Service Providers: Trusted cloud infrastructure hosts (e.g., AWS, GCP), ticketing platforms, or communication tools used strictly to run our service operations.
- Legal Compliance: When required by law, subpoena, or regulatory obligation to protect rights, safety, or system security.
- Business Transfer: In connection with a merger, sale of assets, or restructuring of our business entities.
5. Data Retention
- Client Support & Project Files: Retained for the duration of our contract plus standard accounting retention periods (typically 5 to 7 years for tax and legal verification).
- System Credentials & VPN Keys: Safely destroyed or returned immediately upon closure of a ticket or project contract.
- Website Analytics: Retained for a maximum of 14 months before automated deletion or anonymization.
6. Your Data Rights
Depending on your local jurisdiction (such as GDPR or regional privacy acts), you hold the following rights regarding your personal data:
- Access & Portability: Request a copy of the personal information held about you.
- Correction: Request updates or corrections to inaccurate data.
- Deletion ("Right to be Forgotten"): Request removal of personal data when legal retention obligations no longer apply.
- Consent Withdrawal: Opt-out of marketing communications or non-essential cookies at any time.
7. Contact Us
If you have questions, privacy requests, or security inquiries regarding this policy, contact: