Who We Are

Vertical IT Solutions Inc is the data controller responsible for the processing of personal data described in this Privacy Policy.

Contact email: info@verticalits.com
Address: 14182 Central Ave, Suite D, Chino, CA 91710, USA

What Data We Collect

We collect the following types of personal data when you visit or interact with our website:

Cookie consent preferences (recorded through our consent management system).
Device and connection information needed to load and protect the website, such as IP address, browser type, device type, operating system, referring page, and approximate location derived from IP address.
Form and communication data you submit when you request a quote or consultation, submit support or billing forms, or otherwise contact us, such as your name, business contact details (email address, phone number, company name), and the content of your message.
Self-assessment quiz inputs and results you submit through our security score quiz, to the extent you choose to provide them.
Information you submit through website forms that helps us respond to your request, such as service interests (managed IT, cybersecurity, cloud, VoIP) and any details you include about your organization’s needs.

Sources of data:
We collect data directly from you when you submit forms or communicate with us through the website.
We collect some data automatically when you access the website (for example, through server logs and similar technical records).
We use cookies and similar technologies; non-essential cookies are set only after you make a choice through our cookie consent controls.

Whether you must provide data:
Providing technical data is necessary to use the website securely.
Providing information in forms is optional, but if you choose not to provide it, we may not be able to respond to your request or provide the assistance you asked for.

How We Use Your Data

We use your personal data for the following purposes, each with a corresponding legal basis under GDPR where applicable:

To respond to your requests (such as quote and consultation requests) and to communicate with you about the services you asked about (legal basis: contract).
To handle support and billing-related requests you submit through our forms (legal basis: contract).
To provide and display the security score self-assessment quiz results based on the information you submit (legal basis: contract).
To operate, maintain, and secure our website and forms, including preventing spam, abuse, and fraudulent activity (legal basis: legitimate interest).
To manage and store your cookie preferences and apply them on future visits (legal basis: consent).

Who We Share Your Data With

We share personal data only as needed to operate this website and respond to your requests.

We use our own consent management system (Trustwards) to record and manage your cookie preferences. This data is processed internally and not shared with third parties.

We use the following service providers to support website functionality:

Google reCAPTCHA v2 (bot protection on forms): used to help protect our forms from automated abuse. When reCAPTCHA is used, certain device and interaction data may be processed to assess whether activity appears to be automated. This processing is subject to Google’s privacy practices.

Cloudways / DigitalOcean (website hosting): used to host and deliver the website. Website and form data you submit, as well as technical data (such as IP address and server logs), may be processed on the hosting infrastructure to operate and secure the site. This processing is subject to the provider’s privacy practices.

FluentSMTP (transactional email delivery): used to send and deliver emails generated by website forms (for example, to route your inquiry to us and to support communications). The data included in those emails (such as your contact details and message content) is processed for delivery. This processing is subject to the relevant provider’s privacy practices.

International Data Transfers

Because we are based in the United States and our website infrastructure and service providers may process data in the United States, your personal data may be transferred to, stored in, or accessed from the United States.

For individuals in the EU/EEA/UK/Switzerland, when personal data is transferred to the United States and the transfer is subject to GDPR, we use appropriate safeguards intended to protect your data, such as Standard Contractual Clauses approved by the European Commission, where applicable to the service provider and transfer scenario.

Our consent management system (Trustwards) is based in Spain (EU), so consent data is not transferred internationally.

How Long We Keep Your Data

Account and customer records: retained until the account is deleted.
Cookie consent records: 10 years, to demonstrate compliance and address potential claims within legal limitation periods.
Security logs and technical records: 12 months.
Tax and accounting records: 10 years, as required by law.
Analytics data: until consent is withdrawn, or per the retention settings of the analytics tool.
Marketing email data: until consent is withdrawn or the user unsubscribes.

Cookie consent records: 10 years (to demonstrate compliance and address potential claims within legal limitation periods).
Security logs and technical records: 12 months.

Your Rights

Your rights depend on where you live and which laws apply to you. You can exercise your rights by contacting us at info@verticalits.com.

If you are in the EU/EEA/UK/Switzerland, you have the right to:
Access your personal data.
Correct inaccurate or incomplete data.
Delete your personal data.
Restrict how we use your personal data.
Receive a copy of certain personal data you provided to us in a portable format and have it transmitted to another organization where technically feasible.
Object to processing based on our legitimate interests.
Withdraw your consent at any time where we rely on consent (this does not affect processing already carried out before you withdrew consent).
Not be subject to automated decision-making or profiling that produces legal effects or similarly significantly affects you.

If you are a California consumer, you have the right to:
Know what personal information is collected, used, shared, or sold.
Request deletion of personal information.
Opt-out of the sale or sharing of personal information for cross-context behavioral advertising (“Do Not Sell or Share My Personal Information”).
Correct inaccurate personal information.
Limit the use and disclosure of sensitive personal information.
Not be discriminated against for exercising your rights.

Response timing:
For GDPR requests, we aim to respond within one month.
For CCPA/CPRA requests, we respond within 45 days and may extend by an additional 45 days when reasonably necessary, with notice.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Children's Privacy

Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

Data Security

We implement appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

Data Breach Notification

We maintain procedures designed to detect, report, and investigate security incidents. If a personal data breach occurs that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay and provide information about the nature of the breach, the likely consequences, and the measures taken or proposed to address it.

If you suspect a security issue involving our website or communications, please contact us at info@verticalits.com.

How to Lodge a Complaint

If you are in the EU/EEA/UK/Switzerland, you have the right to lodge a complaint with the competent data protection authority in your jurisdiction. We encourage you to contact us first so we can try to resolve your concern.

If you are a California consumer, you may also contact the California Privacy Protection Agency (CPPA) or the California Attorney General. CPPA website: https://cppa.ca.gov/

Updates to This Policy

We review and update this Privacy Policy periodically to reflect changes to our practices, technology, or legal requirements. The “Last updated” date at the top of this policy indicates when changes were last made. If we make significant changes, we will provide notice by email or through a notice on our website. Changes take effect from the date indicated at the top of this policy. Where processing is based on consent, we will request new consent when required.

Contact Us

Email: info@verticalits.com
Address: 14182 Central Ave, Suite D, Chino, CA 91710, USA
Data Controller: Vertical IT Solutions Inc

California Privacy Rights (CCPA/CPRA)

This section provides additional information for California consumers and includes our Notice at Collection.

Categories of personal information we collect (in the last 12 months):
Identifiers, such as name, email address, phone number, IP address, and other online identifiers.
Internet or other electronic network activity information, such as information about your device and how you interact with our website (for example, basic log data).
Professional or employment-related information, such as company name and business contact details, when you provide them through our forms.
Other information you provide to us in communications, support requests, billing-related requests, or through the security self-assessment quiz.

Business or commercial purposes for collecting personal information:
To provide and operate the website and its features, including the security self-assessment quiz.
To respond to quote and consultation requests and communicate with you about the services you asked about.
To handle support and billing-related requests you submit.
To help keep our website and forms secure and prevent fraud, abuse, and spam.
To record and apply your cookie preferences.

Sale or sharing of personal information:
We do not sell personal information.
We do not share personal information for cross-context behavioral advertising.

Your CCPA/CPRA rights and how to exercise them:
You may request to know, access, delete, or correct your personal information by contacting us at info@verticalits.com. You may also request information about our collection, use, and disclosure practices for the prior 12 months.

“Do Not Sell or Share My Personal Information” right:
Because we do not sell personal information and do not share personal information for cross-context behavioral advertising, we do not offer an opt-out link for these activities. If this changes, we will update this policy and provide the required opt-out choice.

Right to limit the use and disclosure of sensitive personal information:
We do not collect or use sensitive personal information for purposes that would require offering a right to limit under CCPA/CPRA. If our practices change, we will provide the appropriate notice and choices.

Verification of requests:
To protect your information, we will take steps to verify your request by matching information you provide with information we maintain. The information we request for verification will depend on the nature of the request and the sensitivity of the information involved.

Authorized agents:
You may use an authorized agent to submit a request on your behalf. We may require proof that the agent is authorized and may also require you to verify your identity directly with us.

Response timing:
We respond to verifiable consumer requests within 45 days. If we need more time, we may extend the response period by an additional 45 days and will notify you of the reason for the extension.

Non-discrimination:
We do not discriminate against you for exercising your CCPA/CPRA rights.

Global Privacy Control (GPC):
We honor Global Privacy Control (GPC) signals as valid opt-out requests for the sale or sharing of personal information. Because we do not sell or share personal information for cross-context behavioral advertising, a GPC signal will not change how we process personal information for those purposes, but we will continue to treat the signal as a valid expression of your preference.