Privacy Policy

1. Who we are

This website is run by Pug IT Solution LLC ("we", "us"), a company based in Texas that offers IT, cybersecurity, compliance and software services. We decide what personal information the site collects and how it is used.

The rules for using this website are set out in our Terms of Service.

2. What we collect

We collect only what you type into our two forms, what every visit sends to a web server, and three strictly necessary cookies. We use no analytics, advertising or tracking tools, and we do not buy personal information about you from anyone.

When you write to us

The contact form asks for:

• your full name;
• your company (optional);
• your work e-mail address;
• what you need help with, picked from a list;
• your message.

When you book a consultation

The booking form asks for:

• the length of the call (30 or 60 minutes), the day and the start time you pick, with the time zone they are shown in;
• your full name;
• your company (optional);
• your work e-mail address;
• what the call is about, picked from a list;
• anything we should read first (optional notes).

Both forms also send two technical fields our spam filter reads: the moment the form was shown to you, and a hidden field that people never see or fill in.

Your IP address

Every visit comes from an IP address. We store it with every contact request and booking you send, and with every security incident a request causes - for example a request our filters blocked or repeated failed sign-ins to our administration area. We also use it to limit how many requests and form submissions one address can send in a short time; these counters expire on their own once their time window has passed. Failed sign-ins to our administration area are counted per IP address in our database; such a counter is deleted at a later failed sign-in once its time has run out, after a successful sign-in from that address, or when we clear it ourselves.

If we block a sender

When a message or booking is spam, we can put the sender's e-mail address on our e-mail blocklist, so that later submissions from it are filtered out. The address stays on the blocklist until we remove it.

Server logs

Our web server and the website keep technical logs to run the site and protect it. They can include your IP address, the page you asked for, the time, and the browser details your browser sends with every request.

Cookies

The site sets only the cookies it needs to work - see Cookies below.

3. Why we use it

• To answer your request. We read what you sent through the contact form and reply to the e-mail address you gave us.
• To schedule your consultation. We hold the time you picked, confirm or decline it, and send you the meeting invitation ourselves.
• To protect the site. We filter spam, limit how often one address can send requests, and record security incidents so we can spot and stop attacks.
• To keep the site running. The server logs help us find and fix faults.

We do not use your information for anything else, and we never add you to a mailing list.

4. Who receives it

• Our hosting provider. The website, its database and its logs run on a server we rent from a hosting provider, which stores them for us.
• Google Fonts. Our pages load their typefaces from Google Fonts, so your browser fetches them directly from Google, which sees your IP address and the browser details your browser sends. Google's own privacy policy covers that request.
• When the law requires it. We disclose information when we are legally required to, for example to comply with a subpoena or court order, or when it is needed to protect our rights, our clients or this site against fraud or attack.

We do not sell your personal information, we do not share it for cross-context behavioral advertising, and we do not use it for targeted advertising.

5. How long we keep it

How long the website keeps what it stores:

• Contact requests are deleted 365 days after they arrive.
• Requests and bookings our spam filter held back are deleted 30 days after they arrive.
• Bookings are deleted 365 days after the consultation.
• Security incidents, with the IP address they name, are deleted 90 days after they are recorded.
• E-mail addresses we blocked as spam stay on our e-mail blocklist until we remove them.
• Sign-in counters of our administration area, which hold the IP address of failed sign-ins, are deleted at a later failed sign-in once their time has run out, after a successful sign-in from that address, or when we clear them.
• Server logs are limited in size: once they are full, the oldest entries are overwritten.
• Backups. Before an update changes our database, we take a full backup copy of it on our server, readable only by our server administrator. We keep the ten newest copies, so an entry the website has deleted can remain in a backup until newer backups replace it.
• The server statistics we keep - processor, memory and disk use - hold no personal information.

6. Security

• The site is served over HTTPS only, so what you send is encrypted on its way to us.
• The details you type into our forms - your name, company, e-mail address and message or notes - are stored encrypted in our database with your request or booking. An e-mail address we put on our e-mail blocklist is stored unencrypted, so that the filter can match it.
• Only one administrator account can open the stored requests and bookings, and signing in to it takes a password and a second step: a code from an authenticator app or a one-time recovery code.

No website can promise perfect security, but we take these steps to protect your information.

7. Your choices

You can ask us which personal information we hold about you, and ask us to correct or delete it. Write to us through the contact form; we answer within 45 days. We may ask you to confirm that the request comes from you, for example by writing from the e-mail address you used.

Residents of states with consumer privacy laws, for example California or Texas, may have more rights, such as the right to know what we collect or to opt out of certain uses. We honor them wherever those laws apply to us. We will never treat you differently for asking.

8. Do Not Track and Global Privacy Control

Your browser may send a Do Not Track or a Global Privacy Control signal. We do not track visitors across other websites, and we do not sell or share personal information, so these signals do not change anything about how this site handles your information.

9. Children

This website is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has sent us information, contact us and we will delete it.

10. Cookies

A cookie is a small piece of data a website stores in your browser. This site sets only cookies that are strictly necessary for it to work: no analytics, advertising or tracking cookies. These are all of them:

11. Changes to this policy

When we change this policy, we post the new version on this page with a new "Last updated" date at the top.

12. Contact

Questions about this policy or your information go to Pug IT Solution LLC:

• Or the contact form on this website.