Privacy Policy

This policy explains how All Included IT (“we,” “us,” or “our”) collects and uses personal information through allincludedit.net (the “Site”). Information we handle on a client’s behalf while providing managed IT services is governed by that client’s service agreement, not by this policy.

• Information you send us. If you email or call us about a quote, we receive whatever you choose to share — typically a name, business name, email address, phone number, employee count, and office locations.
• Administration sign-in. Authorized personnel sign in to the administration area with a phone number. We store that phone number and the timestamps of sign-in attempts. A one-time code is sent by SMS to verify it.
• Technical logs. Our hosting provider records standard request data such as IP address, user agent, requested URL, and timestamp for security and reliability purposes.

We do not sell personal information, and we do not use advertising or cross-site tracking cookies on the Site.

The public marketing pages set no cookies. The administration area sets a session cookie that is strictly necessary to keep an authenticated user signed in. It is not used for analytics or advertising.

We use the information above to:

• respond to inquiries and prepare quotes;
• provide and support services under a service agreement;
• authenticate authorized personnel and protect the administration area;
• maintain the security, availability, and integrity of the Site; and
• comply with legal obligations.

We rely on a small number of vendors who process data on our behalf under contract: a website host, a database and authentication provider, and an SMS provider that delivers one-time sign-in codes. These vendors may process personal information only as needed to perform their services for us.

One-time codes are transactional messages sent only when someone requests a sign-in code. They are not marketing messages. Standard message and data rates from your carrier may apply.

We keep inquiry correspondence for as long as needed to respond and to maintain ordinary business records. Administration accounts are kept while the person remains authorized and are removed when access ends. Technical logs are retained on our providers’ standard schedules.

Traffic to the Site is encrypted in transit. Access to the administration area requires verification of a registered phone number, and administrative data is protected by access controls at the database layer. No system is perfectly secure, so we cannot guarantee absolute security.

You may ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. Email hello@allincludedit.net and we will respond within a reasonable time. We may need to keep some records where the law requires it.

The Site is intended for businesses. We do not knowingly collect personal information from anyone under 13.

If this policy changes, we will update the “last updated” date above and post the revised version on this page.

Privacy questions: hello@allincludedit.net or (801) 555-0142.