Privacy Policy

KSquared Tech Solutions LLC is a managed IT services provider based in Lansing, Michigan, serving businesses in the Greater Lansing area. Our registered address is 3616 Delta River Dr, Lansing, MI 48906. You can reach us using the details in section 15.

We are the controller of the personal information described in sections 3, 4 and 5 of this Policy. For personal information belonging to a client's own customers, employees or patients that we encounter while providing services, the client remains the controller and we act on their instructions, as described in section 6.

This Policy applies to two different situations, and the information we hold is very different in each.

• Visiting this website, or contacting us through it. This is covered by sections 3, 4 and 5.
• Receiving services from us under a Managed Service Agreement, Service Schedule, Quote or Order. This is covered by section 6.

This Policy does not apply to any third-party website you may reach from a link on ours. See section 13.

This website does not use cookies. It does not run analytics software, advertising pixels, session recording, tag managers, or any other tracking technology. It loads no fonts, scripts, images or other files from third-party servers. We do not build profiles of visitors, and we do not sell, rent or share visitor information with anyone for advertising purposes.

Our hosting provider automatically records standard technical information when a page is requested, in the same way that essentially every web server does. This typically includes the IP address the request came from, the date and time, the page requested, the referring page if there was one, and the browser and operating system reported by your device. This information is generated by the act of serving the page and is used only to operate the site, keep it secure, and diagnose faults.

We do not attempt to identify individual visitors from this technical information, and we do not combine it with any other information we hold.

Because we do not track visitors across websites, browser Do Not Track and Global Privacy Control signals do not change what this site collects. There is nothing for them to switch off.

If you contact us by phone, by email, through a form on this site, or by requesting an assessment, you choose what to tell us. That will usually include your name, your business, your email address and your phone number, along with whatever you write in your message. If you go on to discuss an engagement, it may also include details about your existing technology, your current IT arrangements and your business requirements.

We use this information to reply to you, to prepare a quote or proposal if you have asked for one, and to keep a record of our correspondence. We do not use it for automated decision-making.

We do not add enquirers to a marketing mailing list without asking first, and we do not sell or rent your contact details to anyone.

Please do not send us passwords, account credentials, payment card details or protected health information through a website form or ordinary email. None of those channels is appropriate for that kind of information. If we need something sensitive from you, we will tell you a secure way to send it.

By providing your mobile number or initiating contact with us, you agree that we may contact you by text message for customer care and account-related purposes. Message frequency varies. Message and data rates may apply. Reply HELP for help, or STOP to unsubscribe at any time.

Mobile information and mobile opt-in data will not be shared with third parties or affiliates for marketing or promotional purposes. No mobile information is sold, rented or otherwise disclosed for anyone else's marketing.

We may share a mobile number with the service providers that deliver our messaging and support systems, strictly so that a message can be sent or a ticket can be handled. Those providers may not use it for any other purpose. This mirrors clause 31 of our General Terms and Conditions.

Delivering managed IT services requires access to our clients' systems. In the course of monitoring, patching, backing up, securing and supporting those systems, we may encounter personal information belonging to a client's employees, customers or patients. Examples include user account names and email addresses, device and network records, support ticket contents, and the contents of files or backups we are engaged to protect.

We do not access this information for our own purposes. We access it only as far as is necessary to perform the services the client has engaged us to perform, or where the law requires it. The client decides what is collected and why. We act on the client's instructions and under the confidentiality obligations set out in our General Terms and Conditions.

Where we access protected health information on a client's behalf, a Business Associate Agreement satisfying 45 CFR 164.504(e) governs that access, and its terms take precedence over this Policy for the information it covers.

All personal data collected in the course of providing services is handled in compliance with applicable US federal and state privacy laws, including the Michigan Identity Theft Protection Act and relevant FTC regulations.

We use the information described above to:

• Respond to enquiries and provide quotes, proposals and assessments.
• Deliver, monitor, maintain and support the services a client has engaged us to provide.
• Keep systems and data secure, and detect, investigate and respond to security incidents.
• Invoice for services and keep accounting records.
• Meet our legal, regulatory, insurance and contractual obligations.
• Operate and improve this website, and keep it available and secure.

We do not sell personal information. We do not share personal information with third parties for their own marketing purposes. We do not use personal information to train machine learning models.

We share information only where it is necessary, and only with the categories of recipient listed here.

• Service providers whose tools we use to deliver our services. These include remote monitoring and management, ticketing, documentation and password management, cloud backup, endpoint protection, and managed detection and response platforms. They process information on our behalf and under contract, and may not use it for their own purposes.
• Business software providers used to run our own operations, such as email, calendaring, accounting and invoicing.
• Our professional advisers, including accountants, lawyers and insurers, where they need the information to advise us.
• Law enforcement, regulators or courts, where we are legally required to disclose information or where disclosure is necessary to establish or defend a legal claim.
• A purchaser or successor, if the business or its assets are sold or transferred, in which case this Policy continues to apply to the information transferred until the recipient publishes its own.

We do not disclose client information to anyone else without the client's instruction or a legal obligation to do so.

We implement commercially reasonable administrative, technical and physical safeguards designed to protect personal and confidential information against loss, misuse and unauthorized access, disclosure, alteration or destruction. These include access controls and least-privilege administration, multi-factor authentication on administrative accounts, endpoint protection and monitoring, encrypted storage of credentials, and encryption of data in transit.

No method of transmitting or storing information is completely secure, and we cannot guarantee absolute security. What we can commit to is that our safeguards are reviewed and maintained as part of how we run the business, and that we hold ourselves to the same standards we recommend to our clients.

If a security incident affects personal information we hold or process, we will act in accordance with clause 36 of our General Terms and Conditions and with applicable law, including the notification requirements of the Michigan Identity Theft Protection Act.

Where an incident affects a client's data, the client is notified so that they can meet their own notification obligations to the people affected.

We keep information for as long as it is needed for the purpose it was collected for, and then for as long afterwards as we are required to keep it.

• Enquiries that do not become engagements are kept for a limited period and then deleted.
• Client records, contracts and correspondence are kept for the duration of the engagement and for a period afterwards, to meet accounting, tax, insurance and legal requirements.
• Backups are retained according to the retention schedule agreed with each client in their Service Schedule.
• Server logs for this website are kept for a short period for security and diagnostic purposes.

Where a client's Service Schedule or Managed Service Agreement sets a specific retention period, that period governs.

You can ask us what personal information we hold about you, ask us to correct it if it is wrong, ask us to delete it, or ask us to stop contacting you. Write to us using the details in section 15 and we will respond within a reasonable period.

There are limits on what we can do. We may need to keep information to meet a legal or contractual obligation, to maintain accounting records, or to establish or defend a legal claim. Where the information belongs to one of our clients rather than to us, we will pass your request to that client, because they decide what happens to it and we cannot act on it ourselves.

You can unsubscribe from text messages at any time by replying STOP. You can ask to be removed from any email correspondence by replying and telling us.

Depending on where you live, you may have additional rights under your state's privacy law. If you believe you have such a right, contact us and we will tell you how we can help.

This website may link to websites we do not operate. We are not responsible for their content or their privacy practices, and this Policy does not apply to them. We would encourage you to read the privacy policy of any site you visit.

Our services are provided to businesses, and this website is intended for a business audience. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

We may update this Policy from time to time. The version number and the date at the top of this page show when it was last changed. Where a change is significant, we will take reasonable steps to bring it to the attention of current clients.

If you have a question about this Policy, or you want to make a request under section 12, contact us by email at k2@ksquaredtechsolutions.com or by phone at (517) 395-2593. Written correspondence can be sent to KSquared Tech Solutions LLC at the address shown at the top of this page.