Your information. Your choices.

Twelve sections, each in plain English. We collect contact info, standard log data, and the social-media interactions you start with us. We don't sell, share, or rent personal information. Sub-processors named below. CCPA and GDPR rights honored. Questions go to hello@itcustomsolution.com.

Email a privacy question →

2026-04-30 · Reviewed quarterly

IT Custom Solution LLC · NY

/terms

Each section is one paragraph, sometimes a short list. If a clause needs a lawyer to read it, it shouldn't be in our privacy policy.

Contact information you give us directly (name, work email, work phone, company, role) when you write to us, request a quote, or schedule a briefing. Standard server log data on every request: IP address, user-agent, referrer, timestamp, and page path. Nothing else. We do not buy lists, we do not scrape, and we do not enrich.

To reply to you, to send the materials you asked for, to coordinate scope on an active engagement, and to keep the site running. A bounded, non-identifying campaign label may remain in session storage until the tab session ends so a contact request can be attributed to the page that brought you here. We use aggregate, non-identifying traffic data to decide what to improve. We do not profile, score, or target advertising based on what you read.

TLS 1.3 in transit. AES-256 at rest on managed cloud storage. MFA on every admin account via hardware FIDO2 keys. Access to identifying data is limited to the founder and named sub-processors below. Engineer workstations run endpoint detection and response. Quarterly internal access review · removal within 24 hours of role change.

Optional traffic analytics use PostHog and Google Analytics 4. Sentry provides website error and performance diagnostics; session replay is disabled, and diagnostic fields are filtered before transmission. These tools initialize only after you accept analytics cookies. ITC page-load measurements use the same consent choice. Reject keeps those tools and those measurements disabled. One measurement sits outside that choice: Cloudflare Web Analytics is injected by our hosting platform on every page and reports page timings, the page address, the page you came from, your browser and operating system version, and a browser memory figure to Cloudflare whatever you choose. It sets no cookie and stores nothing on your device, and we rely on our legitimate interest in knowing the site is fast and working. Your choice is stored in your browser; clear this site’s stored data to choose again on your next visit. Anti-spam verification and the Cal.com booking embed support the forms and scheduling separately.

Under the California Consumer Privacy Act you may: (a) request the categories and specific pieces of personal information we hold about you, (b) request deletion, (c) correct inaccurate information, (d) opt out of sale or sharing (we do neither · see § 11), (e) limit use of sensitive personal information (we collect none), and (f) be free from retaliation for exercising any of the above. Mail hello@itcustomsolution.com with subject line "CCPA request" and we reply within 45 days.

If you're in the EU, UK, or EEA, you have the right of access, rectification, erasure, restriction, portability, and objection under Articles 15 through 22 of the GDPR. The lawful basis for the contact data we hold is your consent (you wrote to us) and our legitimate interest in replying. Withdraw consent any time at hello@itcustomsolution.com. Supervisory authority complaints go to your national DPA.

This is a business-to-government site. We do not knowingly collect any information from anyone under 13 and our services are not directed at children. If you believe a child has submitted information to us, write to hello@itcustomsolution.com and we will delete it the same business day.

General contact and inquiry records: 24 months from last contact, then purged. Engagement and audit records: 7 years, per federal record-retention norms applicable to our work. Server logs: 90 days. Backups roll on a 30-day cycle. Deletion requests under § 05 or § 06 supersede these defaults except where a record-keeping law overrides.

Cloudflare provides site hosting, content delivery, Turnstile anti-spam verification and the Web Analytics measurement described in § 04. Supabase provides database services. PostHog and Google Analytics 4 provide traffic analytics; this site uses PostHog’s US ingestion endpoint. Sentry provides error and performance diagnostics. Cal.com provides the booking embed. SendGrid provides transactional email. Microsoft 365 supports mail, calendar and documents. Stripe processes payments for invoiced engagements.

If we discover a breach of personal data we are required to notify under GDPR Article 33 (within 72 hours to the supervisory authority where the risk is more than minimal) and California Civil Code §1798.82 (without unreasonable delay to affected residents). Notification goes to the email on file plus the regulator of record. We publish a post-incident note here within 30 days.

We do not sell personal information. We do not share it for cross-context behavioral advertising. There is no opt-out toggle here because there is nothing to opt out of today. If that ever changes we will publish the toggle and tell you on this page first.

When you comment on our Facebook Page or Instagram posts, or send our accounts a direct message, we receive that content and your public username through the platform, as an administrator of our own accounts. We use it only to respond on our own accounts and to route questions, requests, and messages to our staff. We do not access any account we do not own, and we do not sell or share this information. To delete it, see our Data Deletion page at /data-deletion or email hello@itcustomsolution.com.

There is one inbox and one phone number. Both belong to the founder. Both are below.

Same-business-day reply for any privacy, CCPA, or GDPR request. Subject line tags accepted.

Direct to the founder. Voicemail rolls to the same inbox above.

POB 1005, New York, NY 10170. Certified mail accepted for formal requests.

Delaware · Registered 2021. Controller and processor of record for this site.

(646) 671-3399