Privacy Policy

If you fill out the contact form on our site, we collect your name, business name, email address, phone number, and whatever you write in the message field. If you book a call through our scheduling page, that scheduling provider collects the details you enter there and shares them with us. If you call or email us directly, we keep that correspondence.

We use this information for one purpose: to respond to you and, if you become a client, to provide and bill for our services. We do not sell it, rent it, or share it with advertisers.

Our website is hosted by a third-party hosting provider that keeps standard server logs, which may include IP address, browser type, referring page, and the pages you visited. These logs are used for security and to understand general traffic patterns. We do not run advertising trackers or sell visitor data.

Providing IT support means we sometimes have access to systems that contain your business's information — email accounts, files, network configurations, and in some cases patient records or client financial data. We treat that access as a responsibility, not a convenience.

• We access client systems only as needed to deliver the work you have asked for, or to monitor and maintain systems under a managed plan.
• We do not copy, retain, or repurpose client data outside of what is required to perform the work or to keep support notes and backups related to the engagement.
• We keep credentials in an access-controlled password manager and use multi-factor authentication where the systems involved support it.
• For medical practices and accounting firms, we are willing to sign a business associate agreement or a written confidentiality agreement covering this access. Ask and we will work through it with you.

We use a small number of third-party tools to run the business — website hosting and database services, email delivery, online scheduling, remote support and monitoring software, and accounting and invoicing tools. These providers process information on our behalf and are only given what they need to perform their function.

Contact form submissions and correspondence are kept while we are in touch and for a reasonable period afterward so we have a record of the conversation. Client service records, invoices, and documentation are kept for the duration of the engagement and for as long as we are required to keep business records. You can ask us to delete information we hold about you and we will do so unless we are legally required to retain it.

We use encrypted connections for our website and for remote support, restrict who on our side can access client systems, and keep our own tools patched. No system is perfect, and we will tell you honestly and promptly if we become aware of an incident that affects your information.

You can ask us what information we hold about you, ask for a copy, ask us to correct it, or ask us to delete it. California residents have these rights under the CCPA. We do not sell personal information as that term is defined under California law. To make a request, email us and we will respond.

Our services are for businesses and households seeking IT support. We do not knowingly collect information from anyone under 13.

If we change how we handle information, we will update this page and change the date at the top. Material changes affecting existing clients will also be communicated directly.

Questions about this policy, or about how we handle your data, go to contact@bruvs.org or 949-682-9753.