Privacy Statement

1. Scope

This Privacy Statement applies to:

• Client organizations
• Client employees and authorized users
• External guest users granted access to systems we manage
• Individuals whose data may be processed within client environments

Reinertsen Technologies acts as a service provider and does not independently collect personal data for marketing or advertising purposes.

2. Information We Process

Reinertsen Technologies does not maintain independent databases of personal information outside of the platforms used to deliver services.

Information we may process on behalf of clients includes:

• Names
• Email addresses
• Phone numbers
• Business contact information
• User account credentials (managed securely)
• Device information
• Security logs and audit records
• Email and file metadata necessary for support and security monitoring

All such data remains the property of the client organization.

3. How Information Is Used

Information is processed solely for the purpose of delivering managed IT and cybersecurity services, including:

• Identity and access management
• System monitoring and maintenance
• Security threat detection and response
• Troubleshooting and technical support
• Configuration and administration of client systems

We do not sell, rent, trade, or use personal information for marketing, analytics, or advertising.

4. Platforms and Subprocessors

To deliver services, Reinertsen Technologies utilizes trusted third-party platforms, including:

• Microsoft 365
• Microsoft Entra ID
• Atera
• Guardz

These providers may process identity data, device information, and security-related information strictly to enable IT service delivery and cybersecurity monitoring.

Each provider maintains its own privacy and security policies. Reinertsen Technologies maintains contractual relationships with these providers to ensure appropriate data protection safeguards are in place.

5. Data Security

We implement administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, or destruction. These safeguards include:

• Multi-factor authentication
• Least-privilege access controls
• Role-based administrative access
• Secure credential management
• Encrypted connections where applicable
• Security monitoring and alerting

While we apply industry-standard protections, no system can be guaranteed to be completely secure.

6. Data Retention

Reinertsen Technologies does not independently retain client data outside of the platforms described above.

Data retention policies are determined by:

• Client configuration
• Microsoft 365 retention settings
• Security logging requirements
• Applicable contractual or regulatory obligations

Upon termination of services, client data remains within the client’s Microsoft 365 environment unless otherwise agreed in writing.

7. External and Guest Users

External or guest users granted access to client systems are subject to the same privacy and security controls as internal users. Access is granted only as necessary for business purposes and may be revoked at any time.

8. Data Breach Notification

In the event of a confirmed security incident affecting client data under our control, Reinertsen Technologies will notify the affected client without undue delay and provide reasonable assistance in response and remediation efforts.

9. Changes to This Privacy Statement

We may update this Privacy Statement periodically to reflect changes in our services, technology, or legal requirements. Updates will be posted on this page with a revised effective date.

10. Contact Information

If you have questions regarding this Privacy Statement or our data handling practices, please contact: