Privacy Policy
How ITECS collects, uses, shares, secures, and retains personal information for website visitors, leads, applicants, and portal users.
Updated for Texas and U.S. state privacy rights
A clearer notice for how this site actually works
This notice is intended to cover the data we collect and control through itecsonline.com, our lead forms, recruiting flows, and client portal experiences. It does not replace a separate contract, data processing addendum, BAA, or other client-specific privacy or security terms.
Need to make a privacy request?
Email [email protected] or use our contact page.
Who this notice covers
Website visitors, leads, job applicants, client portal users, and people who communicate with us through forms, email, phone, or text.
Primary request methods
Email us at [email protected] or use our contact page. If a law gives you an appeal right, you can also submit a privacy appeal to the same inbox.
Laws reviewed for this update
Texas TDPSA, Texas breach-notification requirements, California CCPA/CPRA guidance, Colorado and Virginia state privacy rights, COPPA, and U.S. marketing-message rules.
Important security note
Please do not submit Social Security numbers, payment card numbers, medical records, or other highly sensitive data through general website forms unless we specifically ask you to use a secure workflow.
Overview
We collect information directly from you, automatically from your device or browser, and from the tools we use to operate the site and deliver services. We use that information to respond to requests, run our portal and forms, secure the site, recruit candidates, communicate with you, and understand how our website performs.
We do not sell personal information for monetary consideration. However, some analytics or advertising configurations may be treated as “sharing,” “sale,” or “targeted advertising” under certain state laws. Where applicable, you may request to opt out using the methods described below.
We also maintain separate contractual and security commitments for certain client work. If we process information on behalf of a customer as part of a managed services or hosting engagement, those client-specific terms usually govern that processing.
Information we collect
The exact information we collect depends on how you interact with us. The categories below are intended to align our notice with how the site, forms, portal, and recruiting flows currently operate.
Contact and business identifiers
Name, business email, phone number, company name, job title, mailing address, and other contact details you choose to provide.
Inquiry, proposal, and questionnaire content
Messages, project details, onboarding responses, managed cloud or service questionnaires, meeting requests, and files or documents you upload or submit.
Account and authentication data
Portal login email, company affiliation, role, password hash, password-reset activity, and account-access timestamps.
Device, usage, and log data
IP address, browser type, operating system, referring URL, page interactions, timestamps, and related server or security logs.
Analytics, advertising, and campaign data
Cookie or device identifiers, Google Analytics measurements, Google Ads conversion data, and attribution details generated when marketing tools are enabled.
Communications preferences
Email preferences, SMS consent status, unsubscribe choices, support history, and other communication records.
Browser-stored data
Draft questionnaire responses, UI preferences, chatbot/session state, and similar data saved locally in your browser using localStorage or sessionStorage.
Recruiting and candidate data
Job application details and any recruiting information you submit directly to us or through linked recruiting workflows such as Culture Index.
How we use information
- Respond to inquiries, schedule consultations, prepare proposals, and deliver requested services.
- Create and manage client portal accounts, authenticate users, and enforce account-level permissions.
- Process questionnaires, onboarding requests, project requests, and related uploads or follow-up communications.
- Detect spam, fraud, abuse, and security events, including through CAPTCHA and log review.
- Measure site performance, understand marketing effectiveness, and improve our content, navigation, and conversion flows.
- Recruit, evaluate, and communicate with candidates who apply for open roles.
- Comply with legal obligations, enforce contracts and policies, investigate incidents, and maintain business records.
Texas and U.S. privacy rights
Depending on where you live and how your information is processed, you may have the right to request access, correction, deletion, portability, or to opt out of certain uses such as targeted advertising, sale, sharing, or profiling. Some laws also require us to provide an appeal path if we deny a request.
Texas residents
The Texas Data Privacy and Security Act may give you rights to confirm whether we process your personal data, access it, correct inaccuracies, delete certain data, obtain a portable copy, and opt out of targeted advertising, sale, or certain profiling. If we deny a request where an appeal right applies, you may appeal by emailing us with the subject line “Privacy Appeal.”
California residents
The CCPA/CPRA may give you rights to know/access, correct, delete, and opt out of certain sale or sharing activities, and to limit certain uses of sensitive personal information where applicable. We will not discriminate against you for exercising rights required by law.
Residents of other U.S. states
Colorado, Virginia, and other state privacy laws may provide similar access, correction, deletion, portability, opt-out, and appeal rights. Applicability depends on where you live, the nature of your relationship with us, and statutory thresholds or exemptions.
How to exercise your rights
- Email [email protected] with the subject line “Privacy Request” and tell us what right you want to exercise.
- You may also use the contact form at /contact-us and clearly identify the request as a privacy request.
- Please include enough information for us to verify your identity and state of residence, your relationship to ITECS, and the scope of your request.
- If applicable law gives you an appeal right and we deny your request, reply to our decision or email us with the subject line “Privacy Appeal.”
We may need to verify your identity before completing a request. When required by law, we aim to respond within the applicable statutory period and may extend the response time if the law allows and we notify you.
Retention and security
Retention principles
- We retain information only for as long as needed for the purpose for which it was collected, to maintain our business records, to secure our systems, and to comply with law.
- Retention periods vary by category. For example, active portal account data may be retained while the account remains active, inquiry records may be retained for sales and support follow-up, and security logs may be retained for incident investigation and legal compliance.
- Browser-stored draft data remains on your device until you submit the form, clear the draft, clear your browser storage, or your browser automatically removes it.
Security measures
- TLS/SSL encryption for data transmitted through the site.
- Administrative and technical access controls designed to limit access to authorized personnel.
- Credential security measures, including password hashing for portal authentication workflows.
- Logging, monitoring, and anti-abuse controls intended to detect suspicious activity and protect site availability.
No security measure is perfect, but we work to reduce risk, investigate incidents, and provide legally required notifications if a reportable security breach occurs, including notices required by applicable state breach laws when they apply.
Special contexts
Client data we process on behalf of customers
If we process information for a managed services, hosting, cybersecurity, or other client engagement, we may act as a service provider, processor, or contractor rather than as the primary controller. In those cases, the relevant service agreement, data processing addendum, BAA, or other contract generally governs that processing.
Children’s privacy
Our public website and services are not directed to children under 13, and we do not knowingly collect personal information from children under 13 through the site. If you believe a child provided us information, contact us so we can review and delete it if appropriate.
International visitors
ITECS is a U.S.-based business. If you visit the site from outside the United States, your information may be transferred to, stored in, and processed in the United States and other locations where our providers operate.
Marketing messages
You can opt out of marketing emails by using the unsubscribe link in the message. If you have consented to text messages, you can opt out by replying STOP or by using any unsubscribe method provided in the message.
Changes and contact
We may update this notice from time to time to reflect changes in our services, technology, legal obligations, or business practices. When we do, we will update the “Last Updated” date at the top of this page.
For privacy questions, requests, or appeals, contact us using the information below. If you prefer, you can also use our contact page and label the inquiry as a privacy matter.
ITECS IT Outsourcing, LLC
500 North Central Expressway Suite 455
Plano, TX 75074
United States
Last updated March 17, 2026