NorthStack IT ("we," "us," or "our") is a managed IT services provider based in Northglenn, Colorado. This policy explains what information we collect, how we use it, and your rights regarding that information.
Contact form. When you submit our contact form we collect your name, email address, company name (optional), and the message you send. This is the only data we collect from visitors who are not clients.
Client accounts. If you become a client, we collect billing information (processed by Stripe — we never see full card numbers), email address, company name, and service-related communications such as support tickets.
Automatically collected. Our servers log IP addresses and request metadata for security and abuse prevention. We do not use third-party analytics or advertising trackers.
Cookies. We use a single session cookie to keep you logged in to the client portal. No tracking or advertising cookies are set.
We do not use your information for advertising, profiling, or any purpose unrelated to delivering our services.
We share data only with the following service providers, strictly for operating our business:
We do not sell, rent, or trade your personal information to any third party.
All data is transmitted over HTTPS. Passwords are stored as bcrypt hashes — we cannot recover them. Payment card data is handled entirely by Stripe and never touches our servers. Client backup data, where applicable, is encrypted with keys held by the client — we cannot read it.
Colorado residents have the following rights under the Colorado Privacy Act (C.R.S. § 6-1-1301 et seq.):
To exercise any of these rights, email us at [email protected]. We will respond within 45 days as required by law.
If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR), including the right to data portability and the right to restrict processing. Our legal basis for processing contact form data is legitimate interest (responding to your inquiry). For clients, the legal basis is performance of a contract.
To exercise GDPR rights, contact us at [email protected].
Our services are directed at businesses, not individuals under 13. We do not knowingly collect data from children.
We may update this policy from time to time. The effective date at the top of this page will reflect the most recent revision. Material changes will be communicated to active clients by email.
Brown Trading Co. LLC dba NorthStack IT
Northglenn, CO 80241
[email protected]