Privacy Policy

Document: Privacy Policy
Issued by: Geek Of States LLC (1800GEEK®)
Effective: October 4, 2026
Applies to: Website visitors · enquiries · clients

At a glance

We have two roles: we decide how website and enquiry information is used, but for client systems we manage we act only on our client's instructions.
Enquiry form details go to our inbox and CRM and are used to respond to that enquiry — never sold, never added to marketing lists.
Analytics and ad measurement are on by default in the USA and Canada. One click on Opt out turns them off.
The Google Ads conversion we record when you submit a form contains no form contents — not your name, phone, email or message.
To access, correct or delete your information, email support@1800geek.com with “Privacy request” in the subject.

1. Who we are and what this covers

This policy is issued by Geek Of States LLC, which operates the 1800GEEK® managed IT services brand. It covers our website, 1800geek.com; enquiries by phone, email and web form; and the managed IT services we provide to business clients.

Our services are for businesses. The people whose information we handle are usually employees and representatives of our clients and prospective clients, and visitors to our website.

2. Our two roles

When we decide how information is used — for example website analytics, enquiries, and our relationship with your business (contacts, contracts, invoices, support tickets) — we are responsible for that information under this policy.

When we work inside a client's systems — mailboxes, files, user directories, devices and logs ("Client Data") — we act as a service provider on our client's behalf. We process Client Data only to deliver the services in that client's agreement, and only on its instructions. The client decides what Client Data it holds and is responsible for its own privacy notices to its staff and customers.

If you work for one of our clients and have a question about data held in your company's systems, your employer is the right first contact. We will help them answer you.

3. What we collect and why

Source	Information	Why we use it
Callback and contact forms	Name, phone, email, what you tell us about your request, the area you need help with, your preferred contact method, and the page you submitted from	To respond to your enquiry
Ad and campaign attribution	If you arrive from an ad or a tagged link: ad click identifiers (gclid, gbraid, wbraid), campaign tags (utm_source, utm_medium, utm_campaign, utm_term, utm_content), landing page and referrer	To learn which campaigns lead to enquiries. Stored in your browser for up to 90 days and attached to a form only if you submit one
Website analytics	Pages viewed, device and browser type, approximate location (city or region), and how you reached the site, through Google Analytics 4	To understand and improve the website
Online payments	Amount, email, billing name and address, notes, the time you agreed to the payment authorization and our policies, your IP address and browser/device details at each step, and the result returned by our payment processor (approval or decline codes, address and security-code check results, card type and last four digits — never the full card number)	To process your payment, issue your invoice and receipt, prevent fraud, and respond to payment disputes and chargebacks
Security and server logs	IP address, browser user-agent and request times; a one-way hash of your IP address is held briefly to limit form submissions to six per ten minutes	To keep the website secure and stop abuse
Client relationship	Business contact details, roles, contracts, invoices, support tickets, and notes of calls and emails	To deliver, support and bill our services
Client systems (as service provider)	Device inventory and health data, user directories, security and system logs, and — only where a requested task requires it — mailbox or file content	To perform the services in the client's agreement

We do not ask for, and you should never send us, payment card numbers, banking passwords or government ID numbers through our website forms.

4. How we use information

To respond to enquiries and arrange discovery calls and assessments.
To deliver, secure, support and bill our managed IT services.
To measure which pages and campaigns are useful, so we spend less on the ones that are not.
To protect our website, our clients and ourselves from fraud and abuse.
To meet our legal, tax and accounting obligations.

We do not sell personal information. We do not use enquiry details to build marketing lists, and we do not share them with advertisers. When you submit a form, our website tells Google Ads that a conversion happened, so we can measure our ads. That signal contains no form contents.

5. Cookies, browser storage and your choices

Because our market is the United States and Canada, analytics and advertising measurement are on by default, using Google Consent Mode. A notice on your first visit offers an Opt out button. If you opt out, analytics and advertising storage are switched off. Google tags may still send limited signals without cookies or identifiers, as described in Google's Consent Mode documentation.

Name	Set by	Purpose
`geek_consent_v1`	1800GEEK (browser storage)	Remembers your opt-out choice so it applies before any tag fires on later visits
`geek_attr_v1`	1800GEEK (browser storage)	Holds campaign attribution for up to 90 days (see table above)
`_ga`, `_ga_*`	Google Analytics	Distinguishes visits for website statistics
`_gcl_*`	Google Ads	Measures whether an ad visit led to an enquiry

Our pages also load fonts from Google Fonts, which means your browser connects to Google's servers. You can block or delete cookies and site data in your browser settings at any time.

We use a small number of service providers to run our business. They process information only to provide their service to us:

Provider	What they do for us
Resend	Delivers enquiry notifications from our website to our inbox
Our CRM system	Stores enquiries and client-relationship records so we can follow up and manage accounts
Namecheap	Hosts our website
Google	Analytics, advertising measurement and web fonts. On our secure payment page, Google Maps also suggests addresses: what you type in the street-address field is sent to Google to find matching addresses. Card details are never sent to Google.
Our card payment processor	Processes card payments. We do not store full card numbers

When we administer a client's Microsoft 365 or other cloud services, Client Data stays in that client's own vendor accounts, under the vendor's terms with the client. We may also disclose information where the law requires it, to protect rights and safety, or to a successor if our business is reorganised or sold, subject to this policy.

7. How we protect Client Data

Access is given per engineer, limited to what each task needs, and reviewed regularly.
Every tool we use to reach client systems is protected by multi-factor authentication.
Administrative credentials are kept in an encrypted vault, never in email or chat.
Administrative work on client systems is recorded.
We open mailboxes or files only when a requested task requires it, and we do not keep copies longer than that task needs.
If we become aware of a security incident affecting Client Data, we notify the client's authorised contact without undue delay and help with any notifications the client must make.

8. Where information is processed

We are based in the United States, and our service providers mainly process information in the United States. If you are in Canada, information about you may be stored and processed in the United States and may be accessible to authorities there under U.S. law. Client Data generally stays in the region the client chose for its own cloud services.

9. How long we keep information

We keep enquiry and client-relationship records for as long as we need them to respond, to deliver and support services, and to meet tax, accounting and legal obligations. After that, we delete or anonymise them. Client Data is kept, returned or deleted as the client's agreement and instructions provide.

10. Your rights

Depending on where you are, for example under Canada's PIPEDA, Québec's privacy law or applicable U.S. state privacy laws, you may have the right to access, correct or delete your personal information, to withdraw consent, and to opt out of targeted advertising.

To make a request, email support@1800geek.com with “Privacy request” in the subject, or call 1-888-915-4335. We will verify your identity before acting and respond within the time the applicable law allows. If your request concerns Client Data held in your employer's systems, we will pass it to the client and help them respond.

If you are in Canada and are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada.

11. How our website protects you

The site is served only over HTTPS with HSTS, and uses a Content Security Policy that limits which external services can run on our pages. Form submissions are processed on our own server: no email or API credentials are ever exposed to your browser, and a hidden spam trap and rate limit filter automated abuse.

12. Children

Our website and services are for businesses and are not directed at children. We do not knowingly collect information from anyone under 16.

13. Changes to this policy

We will update this policy when our practices change and show the new effective date at the top. We will email clients about material changes.

14. Contact

Geek Of States LLC — Attn: Privacy (mailing address on our Contact page) · support@1800geek.com · 1-888-915-4335.

Independent provider

1800GEEK® is a registered trademark of Geek Of States LLC (USPTO Reg. No. 7,582,257). Geek Of States LLC is an independent managed IT services provider and a Microsoft Partner (Microsoft AI Cloud Partner Program, Partner ID 6545613), listed in Microsoft’s partner directory. It is not Microsoft or Microsoft Support, and its services are not endorsed by Microsoft Corporation or any other vendor named on this site. Third-party trademarks belong to their owners and are used only for identification.