This Privacy Policy describes how Northeastern IT LLC ("Company," "we," "our," "us") collects, uses, and protects personal information when you visit northeasternit.com, submit our contact form, interact with us via SMS, or engage us for managed IT services. By using our website or services, you agree to the practices described here.
01 Information We Collect
We collect personal information only when you voluntarily provide it or when it is generated through your use of our website and services.
- Contact information — name, email address, phone number, and any message content submitted via our contact form or direct communication.
- SMS opt-in data — your mobile phone number and a record of your consent when you subscribe to SMS notifications.
- Service engagement data — information necessary to deliver managed IT services, such as network details, device inventory, account credentials (stored securely), and support ticket content.
- Website usage data — IP address, browser type, pages visited, and referring URL, collected automatically when you visit our site.
We do not collect payment card information directly. Any billing is handled through secure third-party processors.
02 How We Use Your Information
We use collected information for the following purposes:
- Responding to inquiries submitted through our contact form or email.
- Delivering, managing, and improving managed IT services for clients.
- Sending SMS messages you have consented to receive, including service updates and alerts.
- Processing support tickets submitted through our helpdesk portal.
- Complying with legal obligations and protecting our legal rights.
- Improving our website based on aggregated usage data.
We do not use your information for advertising, marketing to third parties, or automated profiling.
03 SMS Communications
By subscribing to our SMS service, you consent to receive text messages from Northeastern IT LLC regarding service updates, alerts, and support communications.
- Opting out: Reply STOP to any SMS message to unsubscribe immediately. You will receive a single confirmation message and no further texts.
- Opting back in: Reply START to resubscribe at any time.
- Help: Reply HELP for assistance or contact us at 518-620-6185.
- Message and data rates may apply depending on your carrier plan.
- We do not share your mobile number with third parties for their marketing purposes.
04 Contact Form Data
When you submit the contact form on our website, we collect your name, email address, phone number (optional), and message content. This information is:
- Transmitted via encrypted SMTP (SSL/TLS) to our internal inbox.
- Used solely to respond to your inquiry.
- Not stored in a database on our web server — the form submission is delivered directly as an email.
- Never sold or shared with third parties for marketing purposes.
Our website and contact form are served through Cloudflare, which acts as a service provider on our behalf. Because Cloudflare processes web traffic for our site, information you submit through the form (and technical data such as your IP address) may be accessible to Cloudflare while it passes through their network. The form is also protected by Cloudflare Turnstile, which checks that a submission comes from a real person. See Cloudflare's Privacy Policy and the Turnstile Privacy Addendum.
Our contact form includes technical measures to prevent automated spam submissions, including Cloudflare Turnstile, rate limiting and honeypot fields. No personally identifiable information is collected from visitors who do not submit the form.
05 Client & Managed Services Data
As a managed IT service provider, we may access, store, or process client systems and data in the course of delivering contracted services. This may include:
- Network configurations, device inventories, and system credentials.
- Data accessed during remote support sessions.
- Backup and recovery data as part of managed backup services.
- Security event logs and monitoring data.
All client data is handled under the terms of individual service agreements. We implement industry-standard security controls and access restrictions. We do not access client systems or data beyond what is necessary to deliver contracted services.
Clients handling payment card data should note that our PCI DSS compliance assistance services are scoped to advisory and remediation guidance; clients retain responsibility for their own compliance posture.
Healthcare clients. We are HIPAA-aware and support healthcare practices whose systems may contain protected health information. Where our services involve access to such information, we handle it only as needed to deliver the contracted services and in line with applicable agreements and law. Clients remain responsible for their own HIPAA compliance. Please do not send patient or other medical information through this website or its contact form.
06 Cookies & Website Analytics
Our website uses minimal technical cookies necessary for site functionality. We do not currently use third-party advertising cookies or behavioral tracking services (such as Google Analytics). If this changes, this policy will be updated prior to implementation.
- No cookies are set for marketing or cross-site tracking purposes.
- Basic server access logs (IP address, request path, timestamp) are retained for security and diagnostic purposes.
07 How We Protect Your Information
We apply security-first principles — the same standard we recommend to our clients — to our own systems:
- Encryption in transit: All web traffic is served over HTTPS (TLS). Email communications use SMTPS (SSL on port 465).
- Credential isolation: SMTP credentials and sensitive configuration values are stored outside the publicly accessible web root and are not exposed in source code.
- Access controls: Access to internal systems and client data is restricted to authorized personnel on a need-to-know basis.
- Personnel screening: Northeastern IT staff are background-checked and fingerprinted. We will gladly complete additional screening if a client requires it.
- Regular reviews: We conduct periodic security assessments of our own infrastructure consistent with services we provide to clients.
No method of transmission over the internet is 100% secure. While we take commercially reasonable precautions, we cannot guarantee absolute security of transmitted data.
08 Data Sharing & Disclosure
We do not sell, rent, or trade your personal information. We may share information only in the following limited circumstances:
- Service partners: Trusted partner firms (such as BluForce, Inc. and Fortified Vision) engaged on joint client projects, under confidentiality obligations.
- Third-party contractors: On occasion, for larger installation projects such as structured cabling, we engage independent third-party contractors. Any contractor given access to client information or premises is held to the same privacy and confidentiality standards as our service partners, BluForce, Inc. and Fortified Vision.
- Internet and telecom carriers: When we contact a carrier or ISP (such as FirstLight Fiber, Frontier Business, Spectrum Business or Verizon Business) on a client's behalf, we share only the account and service details needed to resolve the issue, and only with the client's authorization.
- Infrastructure providers: Hosting, email, or ticketing platform vendors who process data solely on our behalf and under strict data handling terms.
- Legal requirements: When required by law, court order, or to protect the rights, property, or safety of Northeastern IT LLC, our clients, or others.
09 Data Retention
- Contact form inquiries: Retained in email for as long as needed to fulfill the inquiry and for reasonable follow-up, then deleted per standard email retention practices.
- SMS records: Opt-in/opt-out records retained for the duration of the subscription and up to 3 years thereafter for compliance purposes.
- Client service data: Retained for the duration of the service agreement plus any legally required retention period as specified in individual contracts.
- Server access logs: Retained for up to 90 days for security review, then purged.
10 Your Rights & Choices
You have the right to:
- Request access to personal information we hold about you.
- Request correction of inaccurate information.
- Request deletion of your personal information, subject to any legal retention obligations.
- Opt out of SMS communications at any time by replying STOP.
- Withdraw consent for future communications at any time.
To exercise any of these rights, contact us using the information in Section 13. We will respond within a reasonable timeframe.
11 Children's Privacy
Our website and services are directed at businesses and are not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us immediately so we can delete it.
12 Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or operational practices. Updated policies will be posted on this page with a revised effective date at the top. We encourage you to review this page periodically. Continued use of our website or services after changes are posted constitutes acceptance of the updated policy.
13 Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
← Back to Home