Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

• Contact and quote forms (Contact Us page, service page inquiry forms): name, email address, phone number, company name, and any message content you submit.
• Domain Checker tool: the domain name you submit for a DMARC/SPF/DKIM scan, and any contact details submitted through the tool's request form.
• Client onboarding and service delivery: business contact information, network and system configuration data, login credentials/access details needed to deliver managed IT services, billing and account information.
• Point of Sale and Payment Processing inquiries: business information submitted when requesting a processing fee review or POS consultation.
• Text messaging: mobile phone number and your opt-in consent to receive text messages from WesTech MSP (see Section 4).

1.2 Information Collected Automatically

• Standard web analytics data (pages visited, browser/device type, IP address, referring site) via analytics tools running on the Site.
• Cookies and similar technologies used for site functionality and analytics (see Section 7).

1.3 Information From Third-Party Tools Embedded on Our Site

• EasyDMARC — powers the Domain Checker tool; domain names and scan results may be processed by EasyDMARC as a sub-processor.
• reCAPTCHA (Google) — used to prevent spam submissions on our contact and quote forms; Google may process technical/device data as part of this service.
• SMTP2GO — used to deliver form submissions and email notifications; form data passes through SMTP2GO's infrastructure to reach our team.

1.4 Information Collected as Part of Managed IT Services

As an MSP, when we provide managed services to a client (helpdesk, endpoint management, network management, backup, cybersecurity monitoring), we may access, process, or store data that resides on client systems and networks, which can include the client's own customers' or employees' personal data. This data is handled under the terms of your Managed Services Agreement, not this website policy — see Section 10.

2. How We Use Information

We use the information we collect to:

• Respond to inquiries, quote requests, and support tickets
• Deliver, maintain, and monitor managed IT, security, network, backup, cloud, VoIP, and POS/payment consulting services
• Run diagnostic tools you request (e.g., the Domain Checker scan)
• Send service-related communications (confirmations, alerts, invoices), including text messages to clients who have opted in
• Improve our website and service offerings
• Meet legal, regulatory, or contractual obligations, including PCI-related and (where applicable) HIPAA-adjacent compliance support

We do not sell personal information.

3. How We Share Information

We share information only as needed to operate our business:

• Service providers/sub-processors: EasyDMARC, Google reCAPTCHA, SMTP2GO, Datto (cloud backup/file storage), CrowdStrike (managed security/SOC services), Shift4 (POS), and payment processing partners — each solely to provide the service you've requested.
• Legal requirements: when required by law, subpoena, or to protect our rights, users, or the public.
• Business transfers: in connection with a merger, acquisition, or sale of assets.

We do not share client or visitor data with third parties for their independent marketing purposes.

4. Text Messaging (SMS)

WesTech MSP may send text messages to clients who have opted in to receive them. These messages relate to the services we provide, such as support ticket updates, appointment and scheduling notices, service alerts, and account notifications.

• Consent: we only send text messages to mobile numbers whose owners have provided opt-in consent. Consent to receive text messages is not a condition of purchasing any service.
• Frequency and charges: message frequency varies. Message and data rates may apply.
• Opting out: reply STOP to any message to stop receiving texts. Reply HELP for assistance, or contact us using the details in Section 11.

5. Data Security

Given our role as a security-focused MSP, we apply layered security practices to protect data, including endpoint protection, managed detection and response, encrypted backups, access controls, and monitoring. No system is 100% secure, but security is core to how we operate.

6. Data Retention

We retain personal information only as long as needed for the purposes described in this policy, to fulfill service agreements, or as required by law (including PCI-DSS and any applicable HIPAA business associate obligations). Client data handled under a Managed Services Agreement is retained per the terms of that agreement.

7. Cookies and Tracking

Our Site uses cookies and similar technologies for core functionality, analytics, and (if applicable) advertising. You can control cookies through your browser settings.

8. Your Rights and Choices

Depending on where you're located, you may have rights to:

• Request access to, correction of, or deletion of your personal information
• Opt out of certain data processing or communications, including text messages (reply STOP)
• Request a copy of your data

California Residents (CCPA/CPRA)

You have the right to know what personal information is collected, request deletion, and opt out of sale/sharing (we do not sell data). Contact us using the details in Section 11 to exercise these rights.

EU/UK Visitors (GDPR)

If applicable, you have rights to access, rectification, erasure, restriction, and data portability.

To exercise any of these rights, contact us at the details below.

9. Children's Privacy

Our Site and services are directed at businesses, not children. We do not knowingly collect personal information from individuals under 13.

10. Managed Services Clients (Business Data)

If you are a WesTech MSP managed services client, our handling of data on your network, systems, and backups is governed primarily by your Managed Services Agreement and any applicable Business Associate Agreement (BAA) or Data Processing Agreement (DPA), not solely by this website policy. This website policy governs data collected via westechmsp.com itself.

11. Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, contact:

12. Changes to This Policy

We may update this Privacy Policy periodically. The "Last Updated" date at the top reflects the most recent revision. Material changes will be posted on this page.