Privacy Policy

KSquared Tech Solutions LLC is a managed IT services provider based in Lansing, Michigan, serving businesses in the Greater Lansing area. Our registered address is 3616 Delta River Dr, Lansing, MI 48906. You can reach us using the details in section 15.

We are the controller of the personal information described in sections 3, 4 and 5 of this Policy. For personal information belonging to a client's own customers, employees or patients that we encounter while providing services, the client remains the controller and we act on their instructions, as described in section 6.

This Policy applies to two different situations, and the information we hold is very different in each.

• Visiting this website, or contacting us through it. This is covered by sections 3, 4 and 5.
• Receiving services from us under a Managed Service Agreement, Service Schedule, Quote or Order. This is covered by section 6.

This Policy does not apply to any third-party website you may reach from a link on ours. See section 13.

This website uses Google Analytics to count visits and see which pages get read, and Google's advertising tags to tell which of our adverts led to an enquiry. Both set cookies on your device. What follows says exactly what is here and how to stop it. We run no session recording, we do not ask you to create an account, and we do not sell or rent visitor information to anyone.

Google Analytics writes two cookies, named _ga and _ga_ followed by a code for this site. They last up to two years unless you clear them, and they let Google tell a returning browser from a new one, so that ten visits from one person are not counted as ten people. Google processes what is collected, which includes the pages you look at, roughly where you are from your network connection, and the type of device and browser you use. What we see in our account is counts and patterns. We do not see your name and we cannot look up an individual visitor.

We also use Google Tag Manager. It measures nothing by itself and sets no cookie of its own. It is a container that lets us add or remove measurement tools without rebuilding the site, so what runs here can change. Whenever it does, we update this section. At present it carries Google's advertising tags, described below, and nothing else. If you want to know what is loading on any given day, the tools in the next paragraph will show you.

You can stop all of it. Most browsers let you block or delete cookies, Google publishes an opt-out add-on for Analytics at tools.google.com/dlpage/gaoptout, you can control how Google uses your activity for advertising at myadcenter.google.com, and an ad-blocking or tracker-blocking extension will usually prevent both of these loading here at all. None of that breaks the rest of this site. Browser Do Not Track and Global Privacy Control signals are not acted on automatically.

Two pages are different, and they are worth naming. The contact page, and the page our adverts send visitors to, carry a form built and hosted by Nutshell, the customer relationship system we use. Opening either page loads the form from Nutshell's servers, which tells Nutshell that a browser opened it, in the same way that loading any image or script from another company's server does. While the form is open, Nutshell keeps a copy of the form's own layout in your browser's session storage so it does not have to fetch it twice. That is cleared when you close the tab and holds nothing about you.

Nutshell's form also loads hCaptcha, which checks that a submission is coming from a person rather than an automated script. hCaptcha is run by a separate company, and what it collects while making that check is governed by its own terms. All we receive from it is whether the check passed.

If you would rather not load any of that, email or call us instead. Both reach the same two people and neither involves that form. The address and the number are on the contact page and at the foot of every page.

We advertise on Google, and this site carries Google's advertising tags, loaded through Google Tag Manager. When you arrive by clicking one of our adverts, Google adds a click identifier to the page address, and a tag called the Conversion Linker stores it in cookies named _gcl_aw and _gcl_au, which last up to 90 days. If you then send us an enquiry through the form, a conversion tag tells Google Ads that an enquiry was made, so that we can see which advert led to it. Google learns that a form was submitted. It does not receive what you typed into it. Google may also use cookies on its own domains to measure and deliver adverts, and that is governed by Google's own privacy policy.

This site carried Google's advertising tag once before, between 31 August and 17 September 2026. We removed it when we paused advertising and added it back in September 2026 when advertising resumed. Google Analytics, added on 17 September 2026, is separate from it: Analytics measures how this site is used, while the advertising tags connect a visit to the advert that produced it.

We do measure how the site is used, through a service called Vercel Web Analytics provided by our hosting company. It records the page visited, the date and time, the address you arrived from, approximate location such as country and region, and the type of device, browser and operating system you are using. It does not use cookies and it stores nothing on your device.

Rather than identifying you, it creates a scrambled code from your request so that repeat page views within a single visit can be counted once. That code is discarded after 24 hours and cannot be linked back to you, to any earlier visit, or to your activity on any other website. The result is a count of how many people read a page, not a record of who read it.

Our hosting provider also automatically records standard technical information when a page is requested, in the same way that essentially every web server does. This typically includes the IP address the request came from, the date and time, and the page requested. This information is generated by the act of serving the page and is used only to operate the site, keep it secure, and diagnose faults.

We do not attempt to identify individual visitors from the usage measurement or the server records, and we do not combine them with any other information we hold.

If you contact us by phone, by email, through a form on this site, or by requesting an assessment, you choose what to tell us. That will usually include your name, your business, your email address and your phone number, along with whatever you write in your message. If you go on to discuss an engagement, it may also include details about your existing technology, your current IT arrangements and your business requirements.

We use this information to reply to you, to prepare a quote or proposal if you have asked for one, and to keep a record of our correspondence. We do not use it for automated decision-making.

Anything you send through the form on our contact page goes into Nutshell, the customer relationship system described in sections 3 and 8. That is where we read it and where the record of it is kept. If you would rather not use that form, email or call us and it reaches the same two people.

We do not add enquirers to a marketing mailing list without asking first, and we do not sell or rent your contact details to anyone.

Please do not send us passwords, account credentials, payment card details or protected health information through a website form or ordinary email. None of those channels is appropriate for that kind of information. If we need something sensitive from you, we will tell you a secure way to send it.

By providing your mobile number or initiating contact with us, you agree that we may contact you by text message for customer care and account-related purposes. Message frequency varies. Message and data rates may apply. Reply HELP for help, or STOP to unsubscribe at any time.

Mobile information and mobile opt-in data will not be shared with third parties or affiliates for marketing or promotional purposes. No mobile information is sold, rented or otherwise disclosed for anyone else's marketing.

We may share a mobile number with the service providers that deliver our messaging and support systems, strictly so that a message can be sent or a ticket can be handled. Those providers may not use it for any other purpose. This mirrors clause 31 of our General Terms and Conditions.

Delivering managed IT services requires access to our clients' systems. In the course of monitoring, patching, backing up, securing and supporting those systems, we may encounter personal information belonging to a client's employees, customers or patients. Examples include user account names and email addresses, device and network records, support ticket contents, and the contents of files or backups we are engaged to protect.

We do not access this information for our own purposes. We access it only as far as is necessary to perform the services the client has engaged us to perform, or where the law requires it. The client decides what is collected and why. We act on the client's instructions and under the confidentiality obligations set out in our General Terms and Conditions.

Where we access protected health information on a client's behalf, a Business Associate Agreement satisfying 45 CFR 164.504(e) governs that access, and its terms take precedence over this Policy for the information it covers.

All personal data collected in the course of providing services is handled in compliance with applicable US federal and state privacy laws, including the Michigan Identity Theft Protection Act and relevant FTC regulations.

We use the information described above to:

• Respond to enquiries and provide quotes, proposals and assessments.
• Deliver, monitor, maintain and support the services a client has engaged us to provide.
• Keep systems and data secure, and detect, investigate and respond to security incidents.
• Invoice for services and keep accounting records.
• Meet our legal, regulatory, insurance and contractual obligations.
• Operate and improve this website, and keep it available and secure.

We do not sell personal information. We do not share personal information with third parties for their own marketing purposes. We do not use personal information to train machine learning models.

We share information only where it is necessary, and only with the categories of recipient listed here.

• Service providers whose tools we use to deliver our services. These include remote monitoring and management, ticketing, documentation and password management, cloud backup, endpoint protection, and managed detection and response platforms. They process information on our behalf and under contract, and may not use it for their own purposes.
• Business software providers used to run our own operations, such as email, calendaring, accounting and invoicing.
• Our website hosting and website analytics provider, which processes the technical information described in section 3 so that this site can be served and its traffic counted.
• Google, which provides the analytics, the advertising tags and the tag container described in section 3. It receives what you look at on this site and, where you arrived from one of our adverts, the fact that you sent an enquiry. It does not receive what you send us through a form.
• hCaptcha, which checks that a form submission comes from a person rather than a script, and which sees only what it needs for that check rather than what you typed.
• Nutshell, the customer relationship system we use, which both hosts the form on our contact page and receives what you send through it. An enquiry goes to Nutshell first and we read it there, rather than arriving in our inbox by another route. Nutshell acts on our instructions, may not use what you send for its own purposes, and receives only what you typed along with the information described in section 4.
• Our professional advisers, including accountants, lawyers and insurers, where they need the information to advise us.
• Law enforcement, regulators or courts, where we are legally required to disclose information or where disclosure is necessary to establish or defend a legal claim.
• A purchaser or successor, if the business or its assets are sold or transferred, in which case this Policy continues to apply to the information transferred until the recipient publishes its own.

We do not disclose client information to anyone else without the client's instruction or a legal obligation to do so.

We implement commercially reasonable administrative, technical and physical safeguards designed to protect personal and confidential information against loss, misuse and unauthorized access, disclosure, alteration or destruction. These include access controls and least-privilege administration, multi-factor authentication on administrative accounts, endpoint protection and monitoring, encrypted storage of credentials, and encryption of data in transit.

No method of transmitting or storing information is completely secure, and we cannot guarantee absolute security. What we can commit to is that our safeguards are reviewed and maintained as part of how we run the business, and that we hold ourselves to the same standards we recommend to our clients.

If a security incident affects personal information we hold or process, we will act in accordance with clause 36 of our General Terms and Conditions and with applicable law, including the notification requirements of the Michigan Identity Theft Protection Act.

Where an incident affects a client's data, the client is notified so that they can meet their own notification obligations to the people affected.

We keep information for as long as it is needed for the purpose it was collected for, and then for as long afterwards as we are required to keep it.

• Enquiries that do not become engagements are kept for a limited period and then deleted.
• Client records, contracts and correspondence are kept for the duration of the engagement and for a period afterwards, to meet accounting, tax, insurance and legal requirements.
• Backups are retained according to the retention schedule agreed with each client in their Service Schedule.
• Server logs for this website are kept for a short period for security and diagnostic purposes.

Where a client's Service Schedule or Managed Service Agreement sets a specific retention period, that period governs.

You can ask us what personal information we hold about you, ask us to correct it if it is wrong, ask us to delete it, or ask us to stop contacting you. Write to us using the details in section 15 and we will respond within a reasonable period.

There are limits on what we can do. We may need to keep information to meet a legal or contractual obligation, to maintain accounting records, or to establish or defend a legal claim. Where the information belongs to one of our clients rather than to us, we will pass your request to that client, because they decide what happens to it and we cannot act on it ourselves.

You can unsubscribe from text messages at any time by replying STOP. You can ask to be removed from any email correspondence by replying and telling us.

Depending on where you live, you may have additional rights under your state's privacy law. If you believe you have such a right, contact us and we will tell you how we can help.

This website may link to websites we do not operate. We are not responsible for their content or their privacy practices, and this Policy does not apply to them. We would encourage you to read the privacy policy of any site you visit.

Our services are provided to businesses, and this website is intended for a business audience. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

We may update this Policy from time to time. The version number and the date at the top of this page show when it was last changed. Where a change is significant, we will take reasonable steps to bring it to the attention of current clients.

If you have a question about this Policy, or you want to make a request under section 12, contact us by email at k2@ksquaredtechsolutions.com or by phone at (517) 395-2593. Written correspondence can be sent to KSquared Tech Solutions LLC at the address shown at the top of this page.