Effective date: April 26, 2026
PNW IT Solutions (“we,” “us,” “our”) respects your privacy. This Privacy Policy explains what personal information we collect through pnwitsolutions.com (the “Site”) and the services we provide, why we collect it, how we use and share it, and the choices you have. By using the Site you agree to this policy.
1. Who we are
PNW IT Solutions is a Pacific Northwest web design agency. For privacy questions, contact us at hello@pnwitsolutions.com or via the contact page.
2. What we collect
Information you give us
- Contact form: name, email address, phone number (optional), and the message you send. We use this to respond to your inquiry and follow up about a project.
- Customer account: if you register for the customer portal, we store your username, email address, password (hashed, never stored in plain text), display name, and any optional profile information you choose to provide.
- Billing & project data: if you become a client, we may collect business name, billing address, project requirements, and information you share during a project. Payment card details are handled by our payment processor — we never see or store full card numbers on our servers.
- Communications: emails and messages you send to us are retained as part of our business records.
Information we collect automatically
- Server logs: our hosting provider records IP address, browser user-agent, the URLs requested, and timestamps for security and troubleshooting.
- Cookies: WordPress sets login and session cookies when you sign in. See our Cookie Policy for details.
- Spam protection: our contact form is protected by Google reCAPTCHA v3, which collects device and browsing signals to score whether a submission is automated. Use of reCAPTCHA is governed by Google’s Privacy Policy and Terms of Service.
3. How we use your information
- Respond to inquiries you submit through the contact form.
- Provide, deliver, and support our web design and care-plan services.
- Operate the customer portal — including authentication, account recovery (password reset emails), and showing you account-specific information.
- Send transactional emails — receipts, project status updates, password resets, and other service notices.
- Bill you and process payments for active engagements or subscriptions.
- Detect and prevent abuse, spam, fraud, and security incidents.
- Comply with legal obligations (tax, accounting, lawful requests).
We do not sell your personal information. We do not use your data for behavioral advertising or share it with ad networks.
4. Legal bases for processing
If you are in the EEA, UK, or another region with similar laws, we rely on the following bases:
- Contract: to deliver services you’ve engaged us for.
- Legitimate interests: to operate our business, secure the Site, prevent fraud, and respond to inquiries.
- Consent: where required (e.g., optional analytics, marketing emails). You can withdraw consent at any time.
- Legal obligation: to keep records required by law.
5. Who we share information with
We share data only with vendors and partners who help us operate the Site and deliver services. Each is bound to handle your data securely and only on our instructions:
- SiteGround — web hosting, server logs, automated backups.
- Google reCAPTCHA — spam protection on the contact form.
- Email delivery providers — to send transactional and project emails.
- Payment processors — to bill clients on active engagements (we never receive full card numbers).
- Professional advisors — accountants, lawyers, where required.
- Legal authorities — when we are required by law, court order, or to protect rights, safety, or property.
If we ever sell or merge our business, your data may transfer as part of that transaction. We’ll notify you and continue to honor this policy.
6. International transfers
We are based in the United States. If you access the Site from outside the U.S., your information will be transferred to and processed in the U.S., where data protection laws may differ from those in your country. Where required, we use Standard Contractual Clauses or equivalent safeguards with our vendors.
7. How long we keep your data
- Contact form submissions: retained up to 24 months, then archived or deleted.
- Customer accounts: retained for the life of the account; you can request deletion at any time.
- Billing records: retained for at least 7 years to satisfy U.S. tax and accounting rules.
- Server logs: typically rotated within 30–90 days.
- Backups: overwritten on our hosting provider’s rolling schedule.
8. How we protect your data
We use industry-standard safeguards: HTTPS encryption in transit, hashed passwords, principle-of-least-privilege access, server-level firewalling and intrusion monitoring through our host, regular software updates, and offsite encrypted backups. No system is perfectly secure — if we ever discover a breach affecting your data, we’ll notify you and any required regulators.
9. Your rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you.
- Correct inaccurate information.
- Delete your information (“right to be forgotten”), subject to records we must keep by law.
- Receive a portable copy of your information.
- Object to or restrict certain processing.
- Withdraw consent at any time, where consent is the basis for processing.
- Lodge a complaint with your local data-protection authority.
To exercise any of these rights, email hello@pnwitsolutions.com. We’ll respond within 30 days. We will not discriminate against you for exercising any of these rights.
10. California privacy rights
If you are a California resident, the California Consumer Privacy Act (CCPA/CPRA) gives you the right to know what personal information we collect, request deletion, correct inaccuracies, and opt out of any “sale” or “sharing” of your information. We do not sell your personal information and do not share it for cross-context behavioral advertising. To exercise CCPA rights, email hello@pnwitsolutions.com.
11. Children
The Site is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us their information, contact us and we will delete it.
12. Third-party links
The Site may link to other websites we don’t operate. Their privacy practices are their own — we encourage you to read their policies before sharing data with them.
13. Changes to this policy
We may update this Privacy Policy from time to time. The “Effective date” at the top reflects the most recent revision. Significant changes will be announced on this page and, where appropriate, by email to active customers.
14. Contact us
Questions, requests, or concerns about your privacy?
Email: hello@pnwitsolutions.com
Web: pnwitsolutions.com/contact-us
