Privacy Policy

Last revised: August 12, 2025

Introduction

We respect your privacy and are committed to handling personal information responsibly. “Personal information” means information that identifies or can reasonably be linked to an individual or household. This does not include publicly available information or de-identified/aggregated data.

Notice at Collection — Categories & Purposes

We collect the minimum necessary personal information to operate our Sites and respond to you. The table below summarizes typical categories and business purposes.

Category Examples Business Purposes
Contact & identifiers Name, company, email, phone; any details you submit via forms or email Respond to inquiries, provide quotes, schedule work, send operational notices
Technical & usage data IP address, device/browser, pages viewed, timestamps, referrers Site functionality, security, fraud prevention, analytics and service improvement
Commercial data Service requests, quotes, invoices, transaction history Account administration, billing (per MSA/T&Cs), compliance with law
Support interactions Emails, tickets, phone recordings (if applicable) Provide and improve support; quality and training

We do not intentionally collect sensitive categories through the Sites. If you need to share regulated data (e.g., HIPAA/PCI), do so only under the MSA and a signed DPA.

How We Collect

  • Directly from you (forms, email, phone, meetings).
  • Automatically via limited analytics and server logs when you use the Sites.
  • From service providers that support our operations (e.g., analytics, email delivery, payment processors) consistent with this Policy.

How We Use Personal Information

  • Operate and secure the Sites; prevent fraud and misuse.
  • Respond to inquiries; provide quotes, proposals, and service information.
  • Administer accounts, invoicing, and records consistent with our MSA and T&Cs.
  • Comply with law, enforce agreements, and protect rights, safety, and security.
  • Improve our services and user experience (aggregate/de-identified analytics).

How We Share

  • No sale of personal information.
  • With vendors that help us operate (hosting, email, analytics, payment processing, security). They must use the information only to provide contracted services and protect it appropriately.
  • With professional advisors (accounting, legal) under confidentiality.
  • When required by law or to protect rights, safety, and security.

Client production data handled during managed services is shared only as permitted under the MSA/Exhibits and any applicable DPA or vendor terms.

Data Security

We use administrative, technical, and physical safeguards appropriate to the services we offer (e.g., access controls, encryption-in-transit where applicable, logging/monitoring).

No method of transmission or storage is 100% secure. We limit access to authorized personnel and vetted providers. Security controls specific to managed services are described in the MSA and Security Baseline.

Retention

We keep personal information for as long as needed to fulfill the purposes described above and to meet legal, regulatory, tax, accounting, or reporting requirements. For managed services data, retention follows the MSA/Exhibits and any signed DPA or SOW.

RMM/EDR Telemetry (Managed Services)

When you enroll devices or accounts under our managed services, our Remote Monitoring & Management (RMM) and Endpoint Detection & Response (EDR/AV) tools collect operational telemetry to maintain, secure, and support your environment. Examples include:

  • Device and software inventory, health and performance data, patch/compliance status
  • Security events, malware detections, and response actions (e.g., isolating a device)
  • Alerts and logs related to backups, networking, and Microsoft 365 where covered

This telemetry is processed within our service delivery platforms and by vetted security/backup vendors to provide the contracted services. We use it only for service delivery, security, support, and reporting—not for advertising. The scope of these tools and required controls are described in your MSA and Security Baseline. Removal of these tools or disabling telemetry may make devices ineligible for coverage under the Agreement.

Cookies & Analytics

Our Sites currently do not set cookies for core functionality. We use a lightweight, privacy‑focused analytics script to understand aggregate website usage (e.g., pages visited and duration). This tool is configured not to identify individual visitors. You can block scripts or cookies via your browser; core features of the Sites should continue to work.

Marketing & Unsubscribe

If you receive non‑transactional marketing emails from us (e.g., newsletters, product updates, or drip campaigns), each message will include an unsubscribe link or clear instructions to opt out.

  • You can also email contact@vulpinemsp.com with the subject “Unsubscribe.”
  • We honor opt‑out requests promptly and maintain suppression lists to prevent further sends.

Your Choices & Rights

  • Access/Update/Delete: Email contact@vulpinemsp.com to request access, correction, or deletion, subject to verification and legal limits.
  • Cookies/Scripts: Manage or block via your browser or device settings.
  • Marketing: Use the unsubscribe link or email us as described above.

Residents of certain jurisdictions (e.g., California) may have additional rights under local law. We will honor verifiable requests as required by applicable law.

Children

Our Sites are intended for business use by adults and are not directed to children under 13. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. The “Last revised” date will be updated, and the current version will be posted on our Sites. Your continued use of the Sites after an update signifies acceptance of the revised Policy.

Contact Us

Questions or requests regarding this Privacy Policy:

Vulpine Solutions, LLC
13194 US Hwy 301, Suite #364
Riverview, FL 33578
contact@vulpinemsp.com · (813) 421-4443