What we collect, and what we never do with it

When you fill in a form on this site or contact us, we receive what you typed, typically your name, your contact details and a description of your IT problem. We use it to reply to you and, if you become a client, to deliver service and send invoices. We keep basic, aggregate website analytics so we can see which pages are useful. We do not sell your information, we do not share it with advertisers or data brokers, and we do not send marketing email to people who did not ask for it. You can ask us at any time what we hold about you and ask us to delete it, and we will.

Information you give us directly

This is anything you type into a contact or quote form on this site, or send to us by text message or over the phone. Typically that means your name, business name, email address, phone number, service address if you need an onsite visit, and whatever description of the problem or project you choose to include.

We ask for the minimum needed to respond usefully. If a form field is not required, you can leave it blank and we will still reply. Please do not send us passwords, full account numbers, medical records or other sensitive material through a website form or ordinary email, if a job requires that kind of information, we will arrange a secure method with you.

Information collected automatically

Like nearly every website, ours records standard technical information when a page loads: the pages requested, the approximate region derived from your IP address, the referring site, your browser type and the date and time. This is used in aggregate to understand which pages people find useful and to spot problems such as broken links or unusual traffic.

We do not build advertising profiles, we do not run retargeting pixels for third-party ad networks, and we do not attempt to identify individual visitors from analytics data. Your browser's Do Not Track or Global Privacy Control signal is respected where the tools we use support it.

Client and service records

If you become a client, we necessarily hold more: contact and billing details, service history, invoices, and technical documentation about your environment such as device inventories, network diagrams and configuration notes. That information exists so we can support you properly, and it is treated as confidential.

Where we hold credentials or access to your systems in order to provide support, that access is tied to named engineer accounts protected by multi-factor authentication, not shared passwords. Your data, your tenant, your domain and your licenses remain yours throughout, and are handed back with documentation if our relationship ends.

We do not knowingly collect more than the above, and we do not buy contact lists, scrape addresses or enrich the data you give us with information purchased from third parties.

How we use it

To reply to your enquiry, prepare an estimate, deliver the service you asked for, send and reconcile invoices, keep records required for tax and accounting, and improve the website. If you are an existing client we may email you about your own service, a scheduled maintenance window, a security advisory that affects your systems, or an invoice. That is service communication, not marketing.

Who we share it with

We do not sell, rent, trade or otherwise monetize your personal information. We have never done so and we will not.

A small number of service providers necessarily process data on our behalf in order for the business to function: our website host, our email provider, our analytics tool, and our invoicing and payment processors. They are bound to use that information only to provide their service to us. We do not authorize them to use it for their own marketing.

The only other circumstances in which information leaves us are when you ask us to share it with someone, such as your accountant or another vendor, or where we are legally required to disclose it, a valid court order, a subpoena, or a legal obligation. If that ever happens and we are permitted to tell you, we will.

How long we keep it

Enquiries that do not become work are kept for a reasonable period in case you come back to us, and then deleted. Client records, invoices and service documentation are retained for as long as you are a client and afterward for the period required by tax, accounting and legal obligations, generally several years. Website analytics are retained in aggregate form only.

When retention is no longer necessary or lawful, records are deleted or securely destroyed. Where we dispose of physical media as part of a client engagement, drives are wiped or destroyed rather than passed on.

We are an IT company. Selling your data would be a strange way to earn your trust with your network.Orca IT, Gilbert AZ

Cookies and similar technologies

This site uses a small number of cookies. Some are strictly necessary. They keep the site functioning, remember form state and help protect against abuse. Others support basic analytics so we can count visits and see which pages are read.

You can block or delete cookies in your browser settings at any time. Strictly necessary cookies are the only ones the site needs to function, so blocking analytics cookies will not break anything. If we ever add a tool that requires consent under applicable law, we will ask before it runs rather than after.

Your rights and how to exercise them

Regardless of which state you are in, we extend the same practical rights to everyone who contacts us. You can ask us what personal information we hold about you, ask for a copy of it, ask us to correct anything inaccurate, and ask us to delete it. You can also ask us to stop contacting you, and we will.

• To make a request, email the contact form with the subject line Privacy Request, or call (602) 677-0779
• Tell us what you want, a copy, a correction, or deletion, and enough detail for us to find your record
• We will confirm receipt and respond within a reasonable period, normally well under thirty days
• There is no charge for a reasonable request, and we will not treat you differently for making one
• Some records must be retained for tax or legal reasons even after a deletion request. We will tell you plainly if that applies

How we protect it

The site is served over HTTPS. Internally we apply the same controls we recommend to clients: multi-factor authentication on business accounts, least-privilege access, endpoint protection, patching, and monitored backups. Access to client documentation is limited to the engineers who need it.

No system is perfect, and any provider who tells you otherwise is selling something. What we can commit to is that if an incident ever affected your information, you would hear it from us promptly and directly rather than discovering it elsewhere.

Children's privacy

This website and our services are directed at businesses and adults. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with information, contact us through the form on this page and we will delete it.

Third-party links and changes to this policy

Our site links to our own tools and microsites and occasionally to third-party resources. Once you leave orcait.io, the privacy practices of the site you land on apply, not ours.

If this policy changes materially, we will update it here and revise the review date shown on this page. Continued use of the site after an update means the current version applies. If a change affected how we handle information already collected from you, we would contact you about it rather than relying on a silent update.