Privacy Policy

This policy explains what personal information Arbora Managed IT LLC (“Arbora,” “we,” “us”) collects through arborait.com, why, who we share it with, and the choices and rights you have. It covers our website only. Information we handle while providing IT services to clients is governed by our client agreements and our General Terms & Conditions.

What we collect

Information you give us

• Forms: your name, phone number or email, company, the topics you pick, how you’d like to meet, and anything you write in the message box.
• Email, calls and texts: whatever you choose to share when you contact us directly.
• Job applicants: what you send through our careers form: name, email, phone, the areas that interest you, any link you share and your note. We use it only to consider you for roles and to contact you about them.
• Newsletter: your email address, and when you signed up and confirmed. We use double opt-in: nothing is sent until you confirm from your inbox.
• Text message consent: if you check the text message box on our contact form, we record your mobile number, that you agreed, and when.

Please don’t send passwords, account numbers, health information or other sensitive details through our website forms. If we need them to help you, we’ll set up a secure way to share them.

Information collected automatically

• Device and connection data such as IP address, browser, device type and pages requested. Our hosting and security provider processes this to deliver the site and block abuse. We use the country it indicates to decide which privacy rules to apply; we don’t store your IP address with your form submissions. To stop spam, we briefly keep the IP address of anyone who submits a form or newsletter signup, for up to one hour, and then it’s deleted automatically.
• Analytics (only where allowed): pages visited, time on page, how you arrived, and approximate location, through Google Analytics.
• Advertising measurement (only where allowed): whether you arrived from one of our ads and whether you then contacted us, through Google Ads, Meta and LinkedIn. LinkedIn also shows us anonymous, grouped facts about visitors, such as industry and company size; never who you are.

How we use it

• To reply to you, schedule a check-up or meeting, and provide the services you ask about.
• To send our newsletter if you subscribed. Every issue has an unsubscribe link, or just reply and ask.
• To keep the website secure, prevent spam and fix problems.
• To understand which pages are useful and improve the site (analytics).
• To measure whether our ads work and show them to people likely to need us (advertising).
• To meet legal obligations and protect our rights.

We don’t sell your personal information for money, and we don’t use it to make automated decisions that have legal or similarly significant effects on you.

Who we share it with

We share information only with service providers that help us run the business, under contracts that limit how they can use it:

• Cloudflare: website hosting, security, bot protection and form spam checks.
• Microsoft: business email and calendar (Microsoft 365), where form submissions are delivered.
• RingCentral: our business phone and text messaging service.
• Google: Google Tag Manager, Google Analytics and Google Ads, where allowed.
• Meta: advertising measurement through the Meta Pixel, only where allowed.
• LinkedIn: advertising measurement and anonymous visitor insights through the LinkedIn Insight Tag, only where allowed.

Text messaging originator opt-in data and consent are excluded from all of the sharing described here; see SMS Policy.

We may also disclose information if the law requires it, to protect people or property, or as part of a sale or reorganization of our business, in which case this policy continues to apply.

Remote support tool. Our “Download remote support” link provides a remote-access tool from Syncro, a third-party provider. If you install and run it, Syncro processes information about your device and session under its own terms and privacy policy. We only connect when you start a session with us.

Other websites. Links to sites such as YouTube or Instagram take you to services with their own privacy policies.

SMS Policy

SMS consent is not shared with third parties.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third parties.

If you opt in, we may text you for customer care, appointments, account notifications and conversations about your request. Message frequency varies. Message and data rates may apply. Reply HELP for help or STOP to opt out at any time. See section VIII of our Terms.

Cookies and your choices

We use cookies and similar technologies as described in our Cookie Policy. You can change your choices anytime with Your privacy choices, which is also at the bottom of every page.

• In the EU, EEA, UK, Switzerland and everywhere outside the US, analytics and advertising cookies stay off unless you opt in.
• In the US, they’re on by default and you can opt out anytime.
• Global Privacy Control: if your browser sends a GPC signal, we treat it as a request to opt out of selling or sharing and turn advertising cookies off automatically.

How long we keep it

We keep inquiry and contact records as long as we need them to respond and follow up, and generally no longer than three years after our last contact with you. We keep job applications for up to two years so we can reach out when a fitting role opens, unless you ask us to delete yours sooner. We keep records longer only if you become a client or the law requires it. Analytics and advertising data is kept according to the retention settings described in our Cookie Policy.

How we protect it

We’re an IT and cybersecurity company, and we hold ourselves to the standards we set for clients: encrypted connections, multi-factor authentication, least-privilege access and reputable providers. No system is perfectly secure, but we work to protect your information and will notify you if the law requires it.

Your rights

Depending on where you live, you may have the right to:

• know what personal information we have about you and get a copy;
• correct information that’s wrong;
• delete your information;
• opt out of selling or sharing, and of targeted advertising;
• withdraw consent you gave, anytime, without affecting what happened before;
• object to or restrict certain uses, and receive your data in a portable format.

To make a request, email [email protected] or call (616) 314-5440. We’ll confirm your identity before acting, usually by matching information we already have. You can use an authorized agent, who will need your signed permission. We won’t treat you differently for using your rights. If we decline your request, we’ll explain why, and you can appeal by replying to our decision; we’ll respond to appeals in writing.

California residents

This section supplements the policy above under the California Consumer Privacy Act, as amended (CCPA). In the past 12 months we have collected these categories of personal information:

Meta and LinkedIn receive information only where advertising cookies are allowed.

We don’t sell personal information for money. Advertising cookies may count as “sharing” for cross-context behavioral advertising under California law. You can opt out with Your privacy choices or by turning on Global Privacy Control in your browser. We don’t knowingly sell or share the information of anyone under 16, and we don’t collect sensitive personal information as defined by the CCPA. We respond to verified requests within 45 days, or tell you if we need up to 45 more.

EU, EEA, UK and Swiss visitors

Arbora Managed IT LLC is the controller of your personal information for this website. Our legal bases are: consent for analytics and advertising cookies, our newsletter and text messages; steps at your request before a contract and our legitimate interests in replying to inquiries and running our business, when you contact us; our legitimate interest in keeping the site secure; and legal obligations where they apply.

We’re based in the United States, so your information is processed there. Our providers transfer data under recognized safeguards such as the EU-U.S. Data Privacy Framework and its UK and Swiss extensions, or the European Commission’s Standard Contractual Clauses. We respond to requests within one month, extendable by two months for complex requests. You also have the right to complain to your local data protection authority.

Children

Our website is for businesses and isn’t directed to children under 16. We don’t knowingly collect their information; if you think we have, contact us and we’ll delete it.

Changes to this policy

We’ll update this page when our practices change and revise the date at the top. If a change is significant, we’ll make it clear on the site.

Contact us

Arbora Managed IT LLC
1971 E Beltline Ave NE Ste 106, Grand Rapids, MI 49525
[email protected] · (616) 314-5440