Effective Date: June 27, 2026

ServiceIT LLC, doing business as ServiceIT (“ServiceIT,” “we,” “us,” or “our”), provides Managed Service Provider (MSP) solutions, including IT support, remote and onsite support, network management, cybersecurity support, cloud services, Microsoft 365 and Google Workspace support, backup management, website support, software licensing support, project services, and related IT services through our website, serviceit.io.

Our Services are intended for business use by organizations and their authorized representatives who are at least 18 years of age. ServiceIT primarily serves business clients in Washington State and the United States.

We are committed to protecting personal information, business information, and client data that we access, collect, use, or process while providing Services.

This Privacy Policy explains how we collect, use, disclose, and protect information when you use our Website or Services. Depending on the circumstances, ServiceIT may act as a business, service provider, data controller, or data processor with respect to information handled through the Services.

This Privacy Policy is intended to describe our privacy practices and does not replace any written service agreement, statement of work, data processing agreement, business associate agreement, or other contract between ServiceIT and a client.

1. Information We Collect

As an MSP, we collect and access information necessary to deliver IT services, provide support, secure systems, manage client environments, and operate our business.

Personal Information

Contact Information:
Name, email address, phone number, business name, job title, and business address provided when contacting us, requesting support, or entering a service agreement.

Account and Support Information:
Usernames, account details, support ticket information, device details, service notes, screenshots, documentation, and other information needed to provide technical support.

Credentials and Access Information:
Administrative access, credentials, tokens, or privileged access may be used when required to provide Services. Credentials are only stored when needed or requested and are protected using reasonable safeguards.

Payment and Billing Information:
Billing contact details, invoices, payment status, accounting records, and related business records. Payment information may be processed by third-party payment processors and may not be stored directly by ServiceIT.

Business-Related Data:
Company, user, device, system, licensing, cloud, backup, security, website, and configuration information necessary to deliver MSP services.

Non-Personal and Technical Information

Website Usage Data:
IP address, browser type, operating system, pages visited, referring pages, timestamps, and similar website usage information.

IT System Data:
Device inventory, computer names, serial numbers, operating systems, patch status, installed software, security status, network metrics, security alerts, backup status, logs, and other technical data generated by systems we manage.

Cookies and Tracking Technologies:
Cookies and similar technologies may be used to secure the Website, improve functionality, remember preferences, analyze usage, and improve performance.

Information from Third Parties

We may receive information from third-party vendors, platforms, and service providers, including cloud providers, backup platforms, cybersecurity tools, remote monitoring and management tools, payment processors, licensing providers, domain registrars, hosting providers, software vendors, communications providers, and other technology platforms when integrating, supporting, or managing services on your behalf.

2. Legal Basis for Processing

Where the General Data Protection Regulation (GDPR) or similar privacy laws apply, we process personal data based on one or more of the following legal bases.

Contract:
To fulfill service agreements or respond to service requests.

Consent:
For certain marketing communications, non-essential cookies, or optional communications.

Legitimate Interests:
To provide support, improve Services, secure systems, prevent fraud, and operate our business.

Legal Obligation:
To comply with applicable laws, regulations, tax requirements, security obligations, and lawful requests.

ServiceIT does not primarily target individuals in the European Economic Area, United Kingdom, or other international jurisdictions, but this section applies where required by applicable law.

3. How We Use Your Information

We use information to deliver MSP services, provide remote and onsite support, monitor and secure client systems, manage accounts and licensing, process billing, communicate service-related updates, perform client-requested work, improve our Website and Services, respond to security incidents, comply with legal obligations, and protect the rights, property, and security of ServiceIT, clients, users, and systems.

This may include IT support, cybersecurity support, cloud services, backup management, network management, software support, website support, migrations, deployments, offboarding, account transfers, data exports, archiving, documentation, vendor coordination, and related services.

4. How We Share Your Information

We do not sell your personal information, business data, email addresses, or mobile phone numbers.

We may share information with the following parties when appropriate.

Service Providers:
Trusted third parties that help us provide Services, including cloud providers, backup providers, cybersecurity vendors, remote monitoring and management platforms, payment processors, hosting providers, communications providers, software vendors, and licensing providers. These providers are expected to use information only as needed to provide services to us or our clients.

Your Organization:
Authorized employees, owners, managers, or representatives of your organization for service coordination, account management, support, billing, security, and administrative purposes.

Vendors Authorized by You:
Third-party vendors, platforms, or providers that you authorize us to work with on your behalf.

Legal Authorities:
When required by law, subpoena, court order, legal process, regulation, or to protect rights, safety, systems, or property.

Business Transfers:
In connection with a merger, acquisition, sale of assets, reorganization, or similar business transaction.

With Your Consent or Request:
When you authorize or request a specific disclosure, integration, migration, support action, vendor interaction, offboarding task, or data transfer.

5. Your Rights Under GDPR and Other Applicable Privacy Laws

If you are located in a jurisdiction with applicable privacy rights, you may have rights including access, correction, deletion, restriction, portability, objection, and withdrawal of consent.

To exercise these rights, contact [email protected].

We may need to verify your identity and, where applicable, coordinate with the client organization that controls the data. We will respond within the timeframes required by applicable law.

6. Data Security

We implement commercially reasonable technical and organizational safeguards designed to protect information, including secure authentication, access controls, credential protection, encryption where appropriate, endpoint security, monitoring, secure backups, and least-privilege access practices where practical.

Because ServiceIT provides IT support and managed services, authorized ServiceIT personnel may access client systems, accounts, files, logs, backups, configurations, or security tools when necessary to provide Services.

No system, network, or method of transmission is completely secure, and absolute security cannot be guaranteed.

7. Security Incidents and Breach Notification

If we become aware of a security incident involving information that we control or process, we will take reasonable steps to investigate, contain, remediate, and document the incident.

When required by applicable law or contract, we will notify affected clients, individuals, regulators, or other required parties. Client-specific incident response obligations may also be addressed in a separate service agreement, statement of work, or security agreement.

8. Third-Party Links and Integrations

Our Website or Services may link to or integrate with third-party platforms, services, websites, or applications. We are not responsible for the privacy, security, or data practices of third parties that we do not control.

We encourage you to review the privacy policies and security practices of any third-party services you use.

9. Cookies, Analytics, and Tracking Technologies

Cookies and similar technologies may be used to secure our Website, improve performance, remember preferences, and analyze Website usage.

ServiceIT may use analytics tools to understand Website traffic, performance, and usage. We may also use additional marketing or advertising technologies in the future where configured and disclosed as required by applicable law.

Where required by law, consent will be obtained for non-essential cookies. You may manage or disable cookies through your browser settings, but some Website features may not function properly without cookies.

10. International Data Transfers

Information may be transferred to, stored in, or processed in the United States or other locations where ServiceIT, our clients, or our service providers operate.

Where GDPR or similar laws apply, we rely on appropriate safeguards, such as Standard Contractual Clauses or other lawful transfer mechanisms, when required.

11. Data Retention

We retain information only as long as reasonably necessary for business, service, security, legal, tax, and compliance purposes, unless a longer retention period is required or permitted by law.

Personal Information:
Retained during the service relationship and for a reasonable period afterward as needed for business records, support history, legal compliance, and dispute resolution.

Support Records and Documentation:
Support tickets, service notes, email threads, screenshots, documentation, and related records may be retained for business continuity, service history, legal, security, and operational purposes.

IT System and Backup Data:
Retained according to the applicable service scope, backup configuration, vendor platform, client instructions, and retention policies.

Security Logs and Monitoring Data:
Logs, alerts, reports, and monitoring history may be retained for a reasonable period to support security monitoring, troubleshooting, compliance, and incident investigation.

Billing and Business Records:
Retained as needed for accounting, tax, legal, and business purposes.

Marketing Data:
Retained until you unsubscribe, withdraw consent, or the information is no longer needed.

Some information may remain in backups, logs, vendor platforms, accounting records, or archived business records for a reasonable period even after services end.

12. Client Offboarding

When a service relationship ends, ServiceIT may assist with account transfer, data export, documentation transfer, access removal, tool removal, backup review, archiving, and other offboarding tasks when requested or required by the service scope.

ServiceIT may retain certain records after offboarding as described in this Privacy Policy or as required for legal, tax, accounting, security, or business purposes.

13. SMS Communications

ServiceIT may use SMS text messages to communicate with clients, prospective clients, and authorized representatives regarding service-related matters, including appointment reminders, support updates, scheduling, service requests, account notices, or other information you request.

By providing your mobile phone number and opting in to receive text messages from ServiceIT, you consent to receive SMS messages from ServiceIT related to your interactions with us. Consent to receive SMS messages is not required as a condition of purchasing Services.

We do not sell or share your mobile phone number with third parties for their independent marketing purposes. We may share your information with trusted service providers that help us deliver messages or provide technical services, but these providers may not use your information for their own marketing.

Message frequency may vary. Standard message and data rates may apply. You may opt out at any time by replying STOP. You may reply HELP or contact us directly for assistance.

14. Marketing Communications

We may send occasional marketing or informational communications about ServiceIT services, updates, or relevant business technology topics. You may opt out of marketing communications at any time by following the unsubscribe instructions in the message or contacting us directly.

Even if you opt out of marketing communications, we may still send service-related, billing, security, legal, or transactional communications.

15. Sensitive Client Data and Regulated Industries

Some clients may operate in industries that handle sensitive or regulated data, such as healthcare, legal, finance, insurance, government, defense, nonprofit, or other regulated sectors.

ServiceIT may access sensitive data only as needed to provide Services, respond to client requests, support systems, perform migrations, manage backups, assist with offboarding, troubleshoot issues, or fulfill contractual obligations.

Unless specifically agreed in writing, this Privacy Policy does not state or guarantee that ServiceIT provides HIPAA, CMMC, SOC 2, PCI, or other regulated compliance services. Any specialized compliance obligations must be addressed in a separate written agreement.

16. Children’s Privacy

Our Website and Services are intended for business use and are not directed to children under 13. We do not knowingly collect personal information from children under 13.

17. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Updates will be posted on our Website with a revised effective date.

If we make material changes to how we collect, use, disclose, or protect information, we will provide notice where required by law or where appropriate based on the nature of the change.

Minor updates, formatting changes, wording improvements, or clarifications may be posted on the Website without direct notice to every client.

18. Contact Information