Privacy Policy
What we collect
- Information you submit: information you choose to send by email or provide through Microsoft Bookings. Website inquiry forms are currently disabled and do not accept submissions.
- Technical data: request and server-log data, such as IP address, user agent, and requested pages, processed by our hosting provider. Vercel Web Analytics is not currently configured on this site. We do not use advertising trackers.
- Calculator inputs: control toggles and scenario selections run entirely in your browser. The calculator does not submit these inputs to us. Some checklist progress is stored locally in your browser; you may choose to share results separately by email or during a meeting.
- Meeting bookings: Microsoft Bookings collects your name, email, organization, appointment details, and any optional phone number or high-level information you provide. Do not enter CUI, export-controlled information, credentials, or sensitive documents in the booking form.
How we use it
To respond to email inquiries, schedule and prepare for meetings, and communicate about requested services. Disabled website forms do not trigger resource delivery or email sequences. We do not sell or rent personal information, and we do not use your submissions for advertising audiences.
Who processes it
Vercel hosts the website and processes associated request data. The inquiry integration with Cloudflare Turnstile and Resend is inactive while forms are disabled; it is not currently used to deliver website inquiries.
Microsoft 365 and Microsoft Bookings process meeting requests, availability, confirmations, invitations, and reminders on our behalf. Booking information is used to schedule and prepare for your meeting, and to communicate about that appointment.
Retention
Email inquiries and booking records are retained as needed to respond, provide services, and meet applicable recordkeeping obligations. Contact us with a deletion request; any required retention will be explained.
Your choices
Email rj@indirectit.com to access, correct, or delete information you've submitted, or to opt out of further contact. We respond subject to applicable recordkeeping obligations.
Security
This site is served exclusively over HTTPS with strict transport security, and inDirectIT operates its own systems inside a CMMC Level 2-assessed environment. No method of transmission is perfectly secure, but we hold ourselves to the standards we implement for clients.
Children
This site addresses businesses and is not directed to children under 13; we do not knowingly collect their information.
Changes
We'll update this page when our practices change and revise the effective date above. Questions: rj@indirectit.com.