Effective date: May 1, 2026 ·
Last updated: August 4, 2026 ·
Controller: VSERV Infosystems Inc.
1. Who this policy applies to
This policy applies to information VSERV Infosystems Inc. collects through our website (www.vservusa.com), our managed-service platforms, our customer support channels, our marketing and SMS communications, and our recruitment process. It does not cover information our customers process inside their own environments — that's governed by the Data Processing Agreement (DPA) we sign with each customer.
2. Information we collect
2.1 Information you give us
- Contact details (name, work email, phone number, company, job title, company address) submitted through our website forms or sales conversations. On our contact form the phone number is optional.
- Your SMS opt-in choice, if you tick the text-message consent box on our contact form — recorded together with the date, time and IP address of the submission as proof of consent.
- Industry information and project requirements you share when scoping an engagement.
- Account credentials and role information when you're set up as an authorised contact on a customer engagement.
- Support ticket content, including any data you choose to attach when raising an incident.
- Application data when you apply for a job or a partner programme with us.
2.2 Information collected automatically
- Standard web-server logs (IP address, browser, referrer, pages viewed, timestamps).
- First-party analytics on aggregated, pseudonymised page traffic.
- Session telemetry from our managed-service tooling — only on systems we are explicitly contracted to manage.
2.3 Information from third parties
- Publicly available company information enriched by B2B data providers, used to qualify inbound inquiries.
- References supplied during recruitment, with the applicant's permission.
3. How we use information
We use the information we collect to:
- Respond to your inquiries and provide the services you've engaged us for.
- Authenticate and authorise access to systems and platforms we operate.
- Monitor and improve the security, performance, and reliability of our services.
- Comply with legal, regulatory, and contractual obligations.
- Send relevant operational notifications and, where you've consented, marketing communications you can unsubscribe from at any time.
- Send appointment reminders and important service updates by text message, but only to numbers whose owner has explicitly opted in (see SMS consent).
- Improve the website experience — which posts are read, which pages convert.
We do not sell personal information. We do not share personal information with advertising networks. We do not use customer data to train AI models.
4. Legal basis (for processing under GDPR / UK GDPR)
Where the GDPR applies, we rely on the following legal bases:
- Contract: processing necessary to provide the services you've engaged us for.
- Legitimate interests: running our business, securing our systems, qualifying inbound sales conversations, and recruiting talent.
- Consent: for marketing emails and any optional analytics that goes beyond first-party measurement.
- Legal obligation: where we must retain or disclose information under applicable law.
5. Who we share information with
We share information only with:
- Sub-processors who help us deliver our services — cloud infrastructure, observability, communications, payroll. A current list is available on request and in our DPA.
- Customers whose data we process, in the manner specified by our agreement with them.
- Professional advisors (legal, audit, insurance) under contractual confidentiality.
- Authorities when legally compelled — and only the minimum necessary, with the customer notified unless prohibited by law.
6. How long we keep information
We keep personal information only as long as we need it for the purposes described in this policy, then we delete or anonymise it. Specifically:
- Sales-inquiry data: retained for up to 24 months from the last interaction, or until you ask us to delete it.
- Customer engagement records: retained for the duration of the contract plus 7 years for audit and tax purposes.
- Support ticket content: retained for 36 months from ticket closure.
- Job application data: retained for 12 months after the recruitment decision, unless you ask us to keep it longer for future roles.
- Marketing-subscription data: retained until you unsubscribe.
- SMS consent records: retained for the duration of the opt-in and for 4 years after opt-out, because messaging regulations require us to be able to evidence that consent was given.
7. Your rights
Depending on where you live, you have the following rights:
- Access — get a copy of the personal information we hold about you.
- Rectification — correct anything that's wrong.
- Erasure — ask us to delete information we no longer need.
- Restriction — limit how we use your information.
- Portability — receive your information in a structured, machine-readable format.
- Objection — tell us not to process your information on legitimate-interest grounds.
- Withdraw consent — at any time, for processing based on consent, including SMS consent.
To exercise any of these, email contactus@vservit.com. We respond within 30 days.
8. How we protect information
VSERV is independently audited against SOC 2 Type II and ISO/IEC 27001. We use encryption in transit and at rest, multi-factor authentication on every privileged account, least-privilege access controls, and quarterly tabletop incident-response exercises. Our full security posture is described in our Trust Center.
9. International transfers
VSERV operates globally. When personal information crosses borders, we use the European Commission's Standard Contractual Clauses (SCCs) and UK addendum where appropriate, plus supplementary technical and organisational measures aligned with EDPB guidance.
10. Cookies & analytics
This site uses the cookies strictly necessary for the page to function (navigation, mega-menu state), plus analytics that measure traffic in aggregate — page views, scroll depth, time on page. For that measurement we may use services such as Google Analytics, Google Tag Manager and Microsoft Clarity, which set their own cookies and receive the usage data described in section 2.2.
We do not use advertising cookies, we do not sell your data, and we never pass SMS opt-in or consent data to any analytics provider. You can disable cookies in your browser without losing access to the site, though some functionality may be affected.
11. SMS consent
We will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing you with the services of that campaign. We may share your Personal Data, including your SMS opt-in or consent status, with third parties that help us provide our messaging services, including but not limited to platform providers, phone companies, and any other vendors who assist us in the delivery of text messages.
All of the categories of sharing described in section 5 of this policy exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
Opting in to text messages is entirely optional. Our contact form can be submitted whether or not you tick the consent box, and consent is never a condition of receiving a quote, a service, or a response from us.
12. SMS opt-out process
You may choose to stop receiving text messages from VSERV Infosystems Inc. at any time.
- To opt out, simply reply STOP or UNSUBSCRIBE to any text message you receive from us.
- Once we receive your opt-out request, you will be immediately removed from our messaging list and will no longer receive SMS messages from us.
- For assistance, reply HELP or contact us at contactus@vservit.com.
Message frequency varies. Message and data rates may apply. Opting out of SMS does not remove you from email communications — to unsubscribe from those, use the link in any marketing email or write to us at the address below.
13. Children's privacy
VSERV's services are intended for businesses and organizations, not individuals under 16. We do not knowingly collect personal information from children under the age permitted by applicable law. If we discover that we have, we delete it immediately.
For any privacy-related question — including SMS consent and opt-out requests — contact us at contactus@vservit.com or by phone on 0120 420 4864. You can also reach us by post at VSERV Infosystems Inc., 818 Library Street, Suite 500, Reston, VA 20190, USA.
If you are in the European Economic Area and believe we have not handled your data correctly, you have the right to lodge a complaint with your local supervisory authority.