Privacy Policy

1. Scope & Applicability

This Privacy Policy applies to:

• Our Website: https://nolimitsystems.com and all associated subdomains, landing pages, and web applications we operate.
• Our Services: Managed IT services, co-managed IT, cybersecurity services, Microsoft 365 and Google Workspace administration, business phone systems (VoIP/UCaaS), internet connectivity services, network infrastructure, IT consulting, and related professional services.
• Business Interactions: Sales inquiries, support requests, vendor coordination, on-site visits, and any other communications with prospects, customers, and partners.

This Policy does not apply to:

• Third-party websites, applications, or services linked from our Website (see Section 13).
• Information collected by our clients through systems we manage on their behalf. In those cases the client’s privacy policy governs.
• Employment-related information collected from job applicants and employees, which is governed by separate notices.

2. Information We Collect

We collect information in several ways, depending on how you interact with us.

2.1 Information You Provide Directly

• Contact Information: Name, email address, phone number, company name, job title, and mailing address when you fill out forms, request quotes, or contact us.
• Account Information: Credentials and profile information for client portals, ticketing systems, or other authenticated services.
• Communications: Content of emails, chat messages, phone calls (which may be recorded for quality and training purposes), and support tickets.
• Billing Information: Company name, billing address, purchase order numbers, and payment-related information. Full payment card numbers are processed by PCI-DSS compliant third-party processors; we do not store complete card numbers.
• Service-Related Information: Technical details about your IT environment, network configurations, user lists, and other information necessary to deliver our Services.

2.2 Information Collected Automatically

• Device Information: IP address, browser type and version, operating system, device type, and unique device identifiers.
• Usage Information: Pages visited, time spent on pages, links clicked, referring and exit pages, and navigation patterns.
• Location Information: General geographic location inferred from IP address at city or region level. We do not collect precise GPS location.
• Log Data: Server logs recording requests, errors, timestamps, and related technical information.

2.3 Information from Third Parties

• Service Providers: Information from vendors we use for analytics, marketing, payment processing, and service delivery.
• Public Sources: Publicly available business information such as company websites, professional networks, and business directories, for sales and marketing purposes.
• Client Systems: When providing managed IT services, we may access system logs, alerts, asset inventories, and configuration data necessary to monitor, maintain, and secure client environments.

3. How We Use Your Information

3.1 Service Delivery

• Providing, operating, maintaining, and improving our Website and Services.
• Processing quotes, orders, and service requests.
• Delivering technical support, troubleshooting, and incident response.
• Managing client accounts, access credentials, and service configurations.
• Coordinating on-site visits, installations, and vendor interactions.

3.2 Communications

• Responding to inquiries, support requests, and feedback.
• Sending service-related notices, including security alerts, maintenance notifications, and billing communications.
• Providing newsletters, marketing communications, and promotional offers, with opt-out options as required by law.

3.3 Security & Compliance

• Protecting our systems, networks, and users from fraud, abuse, and security threats.
• Detecting, investigating, and preventing violations of our policies and applicable laws.
• Complying with legal obligations, including responding to lawful requests from law enforcement or government agencies.
• Enforcing our Terms & Conditions and other agreements.

3.4 Analytics & Improvement

• Analyzing usage patterns to improve Website functionality and user experience.
• Conducting research and analysis to enhance our Services.
• Developing new features, products, and services.

3.5 Legal Basis for Processing

Where applicable, our legal bases for processing include:

• Contract Performance: Processing necessary to fulfill our contractual obligations to you.
• Legitimate Interests: Processing for our legitimate business interests, such as fraud prevention, network security, and direct marketing, where not overridden by your rights.
• Legal Compliance: Processing required to comply with applicable laws and regulations.
• Consent: Where you have provided explicit consent for specific processing activities.

4. How We Share Information

4.1 Service Providers & Subprocessors

We engage third-party vendors to perform services on our behalf, including:

• Cloud hosting and infrastructure providers
• Remote monitoring and management (RMM) platforms
• Professional services automation (PSA) and ticketing systems
• Email and communication platforms
• Payment processors and billing systems
• Analytics and marketing tools
• Security tooling (EDR/XDR, SIEM, backup platforms)

These providers are contractually bound to use information only for the purposes of providing services to us, and must maintain appropriate security measures.

4.2 Business Transfers

In connection with any merger, acquisition, financing, reorganization, bankruptcy, or sale of company assets, your information may be transferred to the successor entity. We will notify you of any such change in ownership or control.

4.3 Legal Requirements

We may disclose information when required by law or in response to:

• Subpoenas, court orders, or other legal process
• Requests from law enforcement or government agencies
• The need to protect our rights, property, or safety, or that of our users or others
• Investigation of suspected fraud, security issues, or policy violations

4.4 With Your Consent

We may share information with third parties when you have given us explicit consent to do so.

5. Cookies, Tracking & Consent

We use cookies and similar technologies to operate the Website, understand how it is used, and where permitted, measure marketing.

5.1 Types of Cookies We Use

Essential Cookies

Required for basic Website functionality, security, and authentication. These cannot be disabled, because the Website cannot operate without them.

Analytics Cookies

Help us understand how visitors interact with the Website, such as Google Analytics, and are used to improve site performance and content.

Functional Cookies

Remember your preferences and settings to provide enhanced functionality.

Marketing Cookies

Used to deliver relevant advertising and measure campaign effectiveness. Deployed only with consent where consent is required.

5.2 Consent Banner & Managing Your Choice

When you first visit the Website, a consent banner appears offering three choices:

• Accept All: allows all cookie categories described above.
• Reject: declines non-essential categories. Essential cookies remain active because the Website cannot function without them.
• Preferences: lets you allow or decline individual categories rather than accepting or rejecting everything.

You can change your choice at any time by reopening the preferences control on the Website, or by clearing cookies in your browser, which causes the banner to appear again on your next visit.

Declining non-essential cookies does not restrict your access to the Website or to our Services.

5.3 Other Controls

• Browser Settings: Most browsers allow you to block or delete cookies. Disabling certain cookies may affect Website functionality.
• Analytics Opt-Out: For Google Analytics, see tools.google.com/dlpage/gaoptout.
• Global Privacy Control: We honor GPC signals where technically feasible.

5.4 Do Not Track

Some browsers offer a Do Not Track feature. There is no uniform standard for responding to those signals. We honor Global Privacy Control signals as described above.

6. Data Security

We implement administrative, technical, and physical safeguards designed to protect your information, including:

• Encryption: Data encrypted in transit (TLS 1.2 or higher) and at rest where applicable.
• Access Controls: Role-based access, multi-factor authentication, and least-privilege principles.
• Monitoring: Continuous monitoring, logging, and alerting for suspicious activity.
• Vendor Management: Security assessments and contractual requirements for third-party providers.
• Employee Training: Regular security awareness training for all staff.
• Incident Response: Documented procedures for detecting, responding to, and reporting security incidents.

7. Data Retention

We retain personal information only as long as necessary for the purposes described in this Policy, or as required by law. Retention periods vary by data type:

• Contact & Lead Information: Retained while you remain a prospect or customer, plus a reasonable period afterward for potential re-engagement, typically 3 years from last interaction.
• Contract & Billing Records: Retained for the duration of the business relationship plus 7 years, or longer where required by tax, accounting, or legal obligations.
• Support Tickets & Communications: Retained for 3 years after resolution, for quality assurance and dispute resolution.
• System Logs & Security Data: Retained for 1–2 years for security monitoring and incident investigation.
• Cookie Data: Varies by cookie type, typically 13–24 months.

When information is no longer needed, we securely delete or anonymize it in accordance with our data retention procedures.

8. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal retention requirements.
• Portability: Request your information in a structured, commonly used format.
• Opt-Out: Opt out of marketing communications at any time using the unsubscribe link in our emails, or by contacting us.
• Withdraw Consent: Where processing is based on consent, withdraw that consent at any time.

8.1 Exercising Your Rights

To exercise any of these rights, contact us at:

• Email: privacy@nolimitsystems.com
• Phone: (608) 285-2252
• Mail: No Limit Systems, LLC, Attn: Privacy, 1220 Femrite Dr. Ste 204, Monona, WI 53716

We verify your identity before processing requests, and respond within applicable legal timeframes, typically 45 days with possible extension where the law allows. You will not be discriminated against for exercising your privacy rights.

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act.

9.1 Categories of Information Collected

In the past 12 months, we have collected the following categories of personal information:

• Identifiers: Name, email, phone, IP address, account credentials.
• Commercial Information: Service records, purchase history, billing information.
• Internet or Network Activity: Browsing history and interactions with our Website.
• Geolocation Data: General location inferred from IP address.
• Professional Information: Job title, company name, business contact information.
• Inferences: Preferences and characteristics derived from the above.

9.2 Your California Rights

• Right to Know: Request disclosure of what personal information we collect, use, and disclose.
• Right to Delete: Request deletion of your personal information.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing: We do not sell personal information, and do not share it for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information beyond the purposes permitted without a limitation right.
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights.

9.3 Authorized Agents

You may designate an authorized agent to make requests on your behalf. We require written authorization and will verify your identity before processing agent requests.

9.4 Shine the Light

California Civil Code § 1798.83 permits California residents to request information about disclosure of personal information to third parties for direct marketing. We do not disclose personal information to third parties for their direct marketing purposes.

10. Other U.S. State Privacy Rights

A number of U.S. states have enacted comprehensive consumer privacy laws that grant residents rights similar to those described in Section 8. Where such a law applies to us and to you, those rights may include:

• Confirming whether we process your personal information, and accessing it.
• Correcting inaccurate personal information.
• Deleting personal information you provided or we obtained.
• Obtaining a portable copy of personal information you provided to us.
• Opting out of targeted advertising, the sale of personal information, and certain profiling used for decisions with legal or similarly significant effects.

As stated in Section 4, we do not sell personal information and do not share it for cross-context behavioral advertising.

10.1 Submitting a Request

Use the contact details in Section 8.1. We will verify your identity, respond within the timeframe the applicable law requires, and tell you if we need an extension.

10.2 Appealing a Decision

If we decline your request, we will explain why. You may appeal by replying to our decision or by writing to privacy@nolimitsystems.com with the word “Appeal” in the subject line. We will review the appeal and inform you of the outcome in writing, along with any further options available to you under your state’s law.

11. Wisconsin-Specific Disclosures

No Limit Systems is headquartered in Wisconsin and complies with applicable Wisconsin state law.

11.1 Data Breach Notification (Wis. Stat. § 134.98)

In the event of a security breach involving your personal information, we will provide notice as required by Wisconsin law, and where the incident involves protected health information, in accordance with the HIPAA Breach Notification Rule. Notification will occur within a reasonable time after discovery, consistent with law enforcement needs and the measures necessary to determine the scope of the breach.

11.2 Social Security Number Protection

We do not routinely collect Social Security numbers. Where collected for specific business purposes, such as certain vendor or contractor relationships, we protect them with enhanced safeguards and restrict access to authorized personnel only.

11.3 Consumer Protection

We comply with the Wisconsin Consumer Act and applicable unfair trade practices law. If you have concerns about our practices, you may contact the Wisconsin Department of Agriculture, Trade and Consumer Protection.

12. Children’s Privacy

Our Website and Services are designed for businesses and are not directed to children under 16 years of age. We do not knowingly collect personal information from children under 13.

If you believe a child under 13 has provided personal information to us, contact us immediately at privacy@nolimitsystems.com. We will investigate and delete such information promptly.

13. Third-Party Links & Services

Our Website may contain links to third-party websites, applications, or services not operated by us. This Privacy Policy does not apply to those services, and we are not responsible for their privacy practices. We encourage you to review the privacy policy of any third-party service you access.

Examples of third-party services we may link to or integrate with include:

• Microsoft 365 and Google Workspace
• Payment processors
• Social media platforms
• Cloud service providers
• Business software vendors

14. International Data Transfers

No Limit Systems is based in the United States. If you access our Website or Services from outside the United States, your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

By using our Website or Services, you consent to that transfer. We implement appropriate safeguards for international transfers as required by applicable law.

15. Business Customers & Agreements

For business customers engaging our managed IT services, additional data protection terms may apply.

15.1 Data Processing Agreements

We offer Data Processing Agreements to customers who require them. A DPA defines the scope, nature, and purpose of processing, along with security requirements and subprocessor terms.

15.2 Business Associate Agreements

For customers subject to HIPAA who require us to access protected health information, we execute a Business Associate Agreement setting out our obligations as a Business Associate.

15.3 Other Compliance Frameworks

We support customers with a range of compliance requirements, including:

• PCI-DSS, for payment card environments
• CJIS, for criminal justice information
• SOC 2, NIST CSF, and ISO 27001 alignment

Contact info@nolimitsystems.com to request a DPA or BAA, or to discuss compliance requirements.

16. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes:

• We update the Last Updated date shown at the top of this Policy.
• We may provide additional notice, such as email notification or a Website banner, for significant changes.
• Your continued use of our Website or Services after changes take effect constitutes acceptance of the updated Policy.

17. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, contact us:

Copyright © 2026 No Limit Systems, LLC. All rights reserved.
This Privacy Policy is provided for informational purposes and does not create an attorney-client relationship. For legal advice, consult a qualified attorney.