Privacy Policy

1. What we collect

What we collect depends on how you interact with us: browsing this public website, or holding an active Care Hub account as an ongoing customer or staff member.

From this public website (all visitors):

• Contact & project forms. When you use the quick contact form, the project intake form, the Website Designer tool, or the newsletter signup, we receive the name, email, phone, and message/project details you submit — including, for the Website Designer, any logo or photo files you choose to upload.
• Customer accounts. If you create an account, we store your name, email address, and a securely hashed password — we never see or store your actual password in readable form.
• Documents, messages, favorites & notifications. Once you have an account, we store the documents (such as invoices or receipts) shared with your account, the content of messages exchanged with our staff, items you save as favorites, and account-related notifications — all tied to your account and visible only to you and authorized staff.
• IP addresses. We log the IP address associated with form submissions, account sign-ins, and other account actions. This is used to prevent abuse (for example, limiting how many requests one visitor can make in a short period) and is stored alongside the related inquiry or account activity.
• Site analytics. We use Netlify Analytics, which is server-side and cookie-free — it reports aggregate traffic (pages visited, referring sites, rough location by country/region) without tracking individual visitors across sites or building an ad profile.
• Local storage, not cookies. Your dark/light mode choice and whether you've dismissed the cookie notice are saved in your browser's local storage, not a cookie. Nothing here is used to track you across other websites.
• Website Designer quote tool. If you use our quote-builder tool, the project details, preferences, and budget range you enter are saved as a lead so we can follow up with a quote.
• American Heroes Discount eligibility. If you claim our American Heroes Discount, we need to confirm you qualify. We do not ask for, and will not accept, an unredacted DD-214, Leave and Earnings Statement, or any other document showing your Social Security number, date of birth, or financial details. Verification is done in person, from a copy with those fields blacked out, or from a professional license number we check directly with the issuing body. Federal ID cards are verified in person only and are never copied, scanned, or photographed (18 U.S.C. § 701). Where you do send us a document, it is deleted within 7 days of your eligibility being confirmed — after that we retain only your name, the category you qualified under, and the date we verified it, so you never have to prove it twice. These documents are never shared with anyone outside Little Technical Solutions LLC, are not used for any purpose other than confirming the discount, and are not stored in the Care Hub.

From the Care Hub (customers and staff with an account):

The Care Hub is our customer/staff portal for supporting an ongoing service relationship — accounts are created by invitation, not open self-signup. If you have a Care Hub account, we also collect and store:

• Account information. Your name, email, a securely hashed password (never stored in plain text), your organization, and your role.
• Sign-in records. Session and login activity, and — for staff/administrator accounts only — a two-factor authentication secret (encrypted at rest) and one-time recovery codes (stored as irreversible hashes).
• Service records. Support tickets, readiness checklists, service history, approvals, and change orders related to the work we do for your organization.
• Files and messages you exchange with us through the portal, and technology/website records we maintain on your behalf (device inventory, renewal reminders, website uptime and backup status).
• Billing status. Which invoices are pending or paid, and a reference ID from our payment processor — never your card number.
• Internal audit log. A record of who did what and when within your account, used for security and accountability, not shared outside Little Technical Solutions LLC except where required by law.

We do not collect or store payment card information, on this website or in the Care Hub. Payments are processed directly by Square; see their own privacy policy for how they handle payment data.

2. How we use it

Information you submit through this website is used to respond to your inquiry, scope and deliver the service you requested, operate your account (if you create one) and the features you use within it, and — only if you opted in — send the occasional blog update. Care Hub information is used solely to authenticate you, deliver the services your organization is a customer for, bill you, keep the platform secure, and meet our own recordkeeping obligations. We do not use your information for advertising, and we do not build advertising profiles.

3. How it's shared

We do not sell your personal information. We use a small number of service providers to run this website and the Care Hub, none of whom are permitted to use your information for their own purposes: Netlify (our hosting, forms, file-storage, and traffic-analytics provider, and — for the Care Hub — some account/session/document storage); Neon (our database provider, storing Care Hub account, ticket, and service records); Resend (sends transactional emails on our behalf, such as account verification, password reset, invitations, and notifications — Resend sees only the content of an email we ask it to send); and Square (our payment processor, which we never see or store card details from). We do not share your information with anyone else except where required by law.

4. Cookies & tracking

This site does not set third-party advertising or tracking cookies. The cookie notice you may see on your first visit is a transparency notice, not a tracking opt-in — there's nothing nonessential to opt into beyond the analytics described above, which collects no personal data.

5. Data retention & your rights

We retain form submissions and project records for as long as reasonably necessary to deliver the service, maintain business records, and meet legal obligations. You can request access to, correction of, or deletion of your information at any time by contacting us at 804-309-0968 or dylan@lit-solutions.tech.

For Care Hub accounts specifically, our retention targets are: files and records for a closed account, 30 days; abandoned leads, 12 months; closed support tickets, 24 months; financial and payment records, 7 years (a standard recordkeeping requirement); and backups, a rolling 90-day window.

American Heroes Discount eligibility documents are deleted within 7 days of verification, as described in section 1 — they are the shortest-lived thing we hold, deliberately.

We respond to access, correction, and deletion requests within 30 days. If you are a Virginia resident, the Virginia Consumer Data Protection Act gives you these rights directly; we honor them for everyone regardless of where you live, and we do not charge for it.

6. Security

This site is served entirely over HTTPS. We do not store payment card data. Form data is transmitted and stored through Netlify's infrastructure with reasonable technical safeguards.

Care Hub accounts add further safeguards: passwords are hashed, never stored in plain text; administrator accounts require two-factor authentication; two-factor secrets are encrypted at rest; and every change to your account or records is logged for accountability.

6A. Your files and passwords when we service your equipment

Repair work sometimes requires access to a device that has your whole life on it, so it's worth stating plainly how we handle that:

• We look at what the job requires and nothing else. We do not browse your personal files, photos, email, or messages. If a job genuinely requires opening a file (for example, confirming that a recovered document is intact), we tell you first.
• We don't want your passwords. Where a job can be done without one, we won't ask. Where one is genuinely required, we ask you to enter it yourself or to change it afterwards, and we never store it, write it down, or keep it in a password manager of ours.
• We don't keep copies of your data. Where a repair requires temporarily copying data off a device, that copy is deleted once the job is complete and you have confirmed everything is back in place. It is never retained "just in case."
• If we find something illegal we are obliged to act on it, and we will. That is the one exception to everything above.
• You can watch. For on-site work, you are welcome to stay in the room for the entire job. We would rather you did.

7. Children's privacy

This site is intended for business owners and adults and is not directed at children under 13. We do not knowingly collect information from children.

8. Changes to this policy

We may update this policy from time to time. The version in effect at the time you use this site or submit a form governs that use.

9. Contact

Questions about this policy can be directed to Little Technical Solutions LLC at 804-309-0968 or dylan@lit-solutions.tech. See also our Terms & Conditions.