Privacy & Device Management Policies



1. Client Privacy Statement

Introduction

IT‑Wise Solutions (“we,” “our,” or “us”) is committed to protecting the privacy, security,
and confidentiality of the information entrusted to us. This Privacy Statement explains how
we collect, use, store, and safeguard personal and business data when providing managed IT
services, cybersecurity solutions, consulting, and support.

Information We Collect

  • Client & Contact Information: Business name, address, contact details, employee names, email addresses, phone numbers, billing information.
  • Technical & System Information: Device identifiers, hardware details, system configurations, network information, security alerts, logs, and telemetry.
  • Support & Operational Data: Ticket history, communication records, audit logs, usage data from tools we manage.

How We Use Your Information

  • Deliver managed IT and cybersecurity services
  • Monitor systems for performance, reliability, and security
  • Respond to support requests and technical issues
  • Configure, maintain, and secure client environments
  • Provide billing, reporting, and account management
  • Improve service quality and operational efficiency

Data Sharing and Third‑Party Services

We may share information with trusted third‑party vendors only when necessary to provide
contracted services, including remote platforms, email security tools, cloud providers, backup
vendors, and payment processors. All partners must maintain appropriate security standards.

Data Security

  • Encryption of data in transit and at rest where applicable
  • Multi‑factor authentication
  • Network and endpoint security controls
  • Least‑privilege access restrictions
  • Continuous monitoring and alerting
  • Regular audits and configuration reviews

Data Retention

We retain information only as long as necessary to provide services, meet legal obligations,
or maintain accurate business records.

Your Rights and Choices

  • Request access to information we maintain
  • Request corrections or updates
  • Request clarification on data usage
  • Request removal of data when legally permissible

Changes to This Privacy Statement

We may update this Privacy Statement periodically to reflect changes in services, regulations,
or best practices.

Contact Information

IT‑Wise Solutions
PO Box 153, Wise VA, 24293
mgilliam@it-wisesolutions.com
276-533-1300




2. Employee Device Privacy Notice (Intune / Company‑Owned Devices)

Purpose

This notice explains what IT‑Wise Solutions can access when managing company‑owned or
company‑managed devices through Microsoft Intune and related security tools.

Expectation of Privacy on Company‑Owned Devices

Employees should have no expectation of privacy when using company‑owned devices.
These devices are managed to protect business data, ensure compliance, and maintain
operational security.

We may access, monitor, or wipe company‑owned devices at any time for legitimate business
purposes, including enforcing security policies, investigating incidents, recovering lost or
stolen equipment, or offboarding employees.

Personal use of company‑owned devices is discouraged. Any personal data stored on these
devices may be visible to IT‑Wise Solutions and may be deleted during routine management.

What We Can See

  • Device model, serial number, OS version
  • Device name and compliance status
  • Installed applications (name only)
  • Security status (encryption, antivirus, jailbreak/root detection)
  • Sign‑in logs to company services
  • Security alerts related to malware or risky apps
  • Device location (company‑owned devices only)

Management Actions

  • Enforce security policies (PIN, encryption, updates)
  • Remotely wipe company data
  • Fully wipe company‑owned devices if lost, stolen, or offboarded

What We Cannot See When BYOD with Work Profile or Containered Applications Configured

  • Personal emails, texts, or call history
  • Personal photos, videos, or files
  • Personal app data or usage
  • Web browsing history
  • Location of personal/BYOD devices
  • Personal passwords or authentication details
  • Content of personal messaging apps

BYOD (Bring Your Own Device)

If a personal device is enrolled, only a work profile or company data container is managed.
We can remove company data but cannot access or delete personal data.

Why We Collect Device Information

  • Protect company data
  • Ensure devices meet security requirements
  • Detect malware or compromised devices
  • Provide technical support
  • Comply with legal or contractual obligations

Data Protection

All device information is handled securely and used only for legitimate business purposes.
Access is restricted to authorized personnel.

Questions

Employees may contact IT‑Wise Solutions for clarification about device management or privacy
practices.