Privacy Policy

Who We Are

This privacy policy explains how PNW WEBCARE LLC (“PNW WebCare,” “we,” or “us”), a Washington limited liability company based in Spokane, Washington, collects, uses, shares, and protects personal information when you visit our website at pnwwebcare.com, use our client portal at portal.pnwwebcare.com, or contact us.

This policy does not cover websites we build or host for our clients. Those websites are governed by the privacy policies of the businesses that own them. Our client portal is described in its own section below.

Who our services are for. Our services are for businesses located in the United States, primarily in Washington and Idaho. We do not offer services to, or direct marketing at, businesses or individuals in the European Union, European Economic Area, United Kingdom, Switzerland, or Brazil. People in those regions can still reach this website. As a precaution, and not because we offer services there, we ask visitors we estimate to be in those regions for consent before any analytics run, as described in Cookies & Analytics below.

Information We Collect

Contact form submissions. When you submit our contact form, we collect your name, business name, email address, phone number (if provided), and project description. On pages with our contact form, Cloudflare Turnstile runs a bot check when the page loads, which sends your IP address and browser information to Cloudflare. When you submit the form, our server sends a spam-check token and your IP address to Cloudflare to confirm you are not a bot. Please do not include health information or other sensitive personal information in your message.

Analytics data. When analytics are active for your visit, Google Analytics (GA4) uses first-party cookies and a randomly generated identifier to collect pages viewed, time on site, traffic source, device and browser type, approximate location (city or region), and interactions such as scrolling, button, email link, and outbound link clicks, file downloads, sections of a page you view, and whether you start or submit a form (not what you type). We do not send your name, email address, form contents, or other information that directly identifies you to Google Analytics, and we do not use analytics data to identify you. Whether analytics are active depends on where you are and the choices you make, as explained in Cookies & Analytics below.

Technical information. Like most websites, our hosting, content delivery, and security providers automatically receive technical information when you visit, such as your IP address, browser type, the pages you request, and the time of each request. Our providers may keep this information in their own logs under their own policies. Logs we keep ourselves are used for security, troubleshooting, and reference, and are deleted within 90 days.

Local storage. On this website, we store your theme preference (light or dark mode) and your cookie choice in your browser’s local storage. If your browser sends a Global Privacy Control or Do Not Track signal, the choice we store is a decline. This information stays on your device and is not sent to us. On pages with our contact form, Cloudflare Turnstile may also store a small item in your browser for its bot check.

Payment information. We do not collect payment information through this website. Payments in our client portal, when enabled, are handled by a third-party payment processor, as described in Client Portal below.

How We Use Your Information

We use the information we collect for the following purposes:

• Responding to your inquiry and providing project quotes
• Communicating about services you have requested
• Providing client portal access and support to our clients
• Understanding how visitors use our website so we can improve it
• Maintaining the security and functionality of our website
• Meeting our legal, tax, and accounting obligations

We do not sell or rent your personal information, and we do not share it with third parties for their own marketing. We will not add you to a marketing email list unless you ask to join one, and any marketing email we send will include a way to unsubscribe.

Third-Party Service Providers

We use service providers to run our website and business. Some process information only on our behalf. Others, such as Google and Cloudflare, may also use limited technical information for their own purposes under their own privacy policies. We update this list as our providers change.

• Cloud hosting and infrastructure providers host this website, process contact form submissions, and deliver email.
• Content delivery and security providers deliver this website to you and protect it from attacks. They receive your IP address and browser information when you visit.
• Bot protection (Cloudflare Turnstile). On pages with our contact form, Turnstile runs a check in your browser to tell people from bots, which sends your IP address and browser information to Cloudflare. When you submit the form, a spam-check token and your IP address are also sent to Cloudflare for verification. Turnstile Privacy Addendum and Cloudflare Privacy Policy
• Website analytics (Google Analytics). Collects the analytics data described above when analytics are active for your visit. How Google uses information from sites that use its services and Google Privacy Policy
• A web font provider delivers the fonts used on this website. It receives your IP address and browser information when the fonts load.
• Our business email and internal team communication tools, where contact form messages are delivered and stored.
• A third-party payment processor handles payments in our client portal, when enabled.

We may also disclose information if required by law, to protect the rights, property, or safety of PNW WebCare, our clients, or others, or as part of a sale, merger, or reorganization of our business.

We do not sell your personal information, and we do not share it with third parties for their own marketing.

Client Portal

Our clients can sign in to a client portal at portal.pnwwebcare.com. Access is limited to our clients. If you use the portal:

• Your account information (name, email address, company, and phone number), your plan, invoice, and payment history, and the support tickets, messages, and files you upload are stored with our cloud hosting provider in the United States.
• Account and support emails, such as sign-in and ticket notifications, are sent through our cloud hosting provider.
• Sign-in tokens that keep you logged in, and your theme preference, are stored in your browser.
• Our systems keep technical logs of portal activity, such as errors and the time of each request, for security and troubleshooting.
• To protect your account, we record sign-in and security events, such as successful and failed sign-ins, password changes and resets, and repeated failed attempts, together with the IP address, approximate location, and device used.
• The portal loads fonts from a web font provider, which receives your IP address and browser information.
• When online payments are enabled, they are handled by a third-party payment processor. Our third-party payment processor may set cookies in the client portal for fraud prevention. We never see or store your full card number.

We keep portal information as described in Data Retention below.

Cookies & Analytics

Essential storage. This website uses your browser’s local storage to save your theme preference (light or dark mode) and your cookie choice. These are not cookies and do not track you across websites.

Analytics cookies. We use Google Analytics (GA4) to understand how visitors interact with our site. GA4 uses first-party cookies to collect pseudonymous data about page visits, traffic sources, and site interactions. We do not use Google Signals or advertising personalization features, and we do not use our analytics data for advertising.

If we estimate you are in Europe or Brazil. When you first visit, a banner asks whether you accept analytics cookies, and analytics load only if you accept. We estimate your region only from your browser’s time zone setting. We do not use your IP address for this. We show the banner if your time zone is in Europe (including the EU/EEA, UK, and Switzerland), in an EU or EEA territory outside mainland Europe (such as Cyprus, the Canary Islands, or French overseas regions), or in Brazil, or if your browser reports no clear time zone or a generic one such as UTC. This estimate is a best effort and may be wrong, for example if you use a VPN or your device’s time zone does not match your location.

Everyone else, including the United States. Analytics load by default when you visit. You can opt out at any time using the “Cookie Settings” link in the site footer.

Wherever you are, you can decline analytics at any time using the “Cookie Settings” link in the footer. If your browser sends a Global Privacy Control or Do Not Track signal before you make a choice, we decline analytics for you automatically.

Third-party tracking. We do not use advertising pixels, and we have turned off Google Signals and advertising features in Google Analytics. When you visit our site, Google (through Google Analytics, when analytics are active) and Cloudflare (through Turnstile, on pages with our contact form) receive technical information such as your IP address and browser details. Our content delivery, security, and font providers also receive this kind of information when they deliver the site to you, and in the client portal, when online payments are enabled, our payment processor may collect device and browsing information for fraud prevention. These companies may be able to associate that information with your activity on other websites under their own privacy policies.

If you decline or opt out. Analytics stop for your visit, existing Google Analytics cookies are removed, and no further analytics data is collected. The website works normally without analytics cookies. On this website, the only information we store on your device is your theme preference and cookie choice. Our hosting, content delivery, security, and font providers, and Cloudflare Turnstile on pages with our contact form, still receive basic technical information, such as your IP address and browser type, so the site can work and stay secure.

Changing your preference. You can change your cookie preference at any time using the “Cookie Settings” link in the site footer. Your saved choice always takes priority over the default for your region.

Do Not Track & Global Privacy Control. We honor browser “Do Not Track” (DNT) and Global Privacy Control (GPC) signals automatically, wherever you are. If your browser sends either signal and you have not previously made a cookie choice, we decline analytics cookies on your behalf and remove any existing Google Analytics cookies. No banner will be shown, and no analytics data will be collected. If you later wish to accept analytics, you can use the “Cookie Settings” link in the footer to change your preference. If you previously accepted analytics, your saved choice stays in effect until you change it using the “Cookie Settings” link.

Data Storage & Security

Information you submit is sent over an encrypted (HTTPS) connection and processed by our service providers, primarily in the United States. Contact form messages are delivered to our business email and team communication tools.

We use reasonable administrative, technical, and physical safeguards designed to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Data Retention

We keep personal information only as long as we need it for the purposes described in this policy:

• Inquiries. If you contact us and do not become a client, we keep your inquiry for up to 24 months after our last communication.
• Client records. If you become a client, we keep your information for the length of our business relationship and delete it within 12 months after the relationship ends, except billing, tax, and accounting records, which we keep for up to 7 years to meet tax and accounting requirements.
• Server and access logs. Logs we keep ourselves, including client portal logs and portal sign-in and security events, are deleted within 90 days. Our service providers may keep their own logs under their own policies.
• Analytics. Google Analytics keeps user-level and event-level data for 14 months and then deletes it. Aggregated reports that do not identify individual visitors may be kept longer.

When we delete information, copies may remain in our backups for up to 35 days before they are removed. We may keep information longer if needed to resolve a dispute, enforce our agreements, or comply with a legal obligation.

You may ask us to delete your personal information sooner (see Your Choices and Requests below).

Your Choices and Requests

Based on our size and activities, we believe no comprehensive state consumer privacy law currently requires us to offer the rights below. Even so, we voluntarily honor reasonable requests from anyone to:

• Access. Get a copy of the personal information we hold about you.
• Correct. Correct inaccurate or incomplete information.
• Delete. Delete your personal information.
• Opt out of analytics. Decline or turn off analytics cookies at any time using the “Cookie Settings” link in the footer.

To make a request, use our contact form or email support@pnwwebcare.com. We may need to confirm your identity before acting on a request. We may keep information we are required or permitted to keep by law, such as billing and tax records or information needed to resolve a dispute. We aim to respond within 30 days.

California residents. We are not currently a “business” subject to the California Consumer Privacy Act (CCPA). We do not sell personal information and do not share it for cross-context behavioral advertising, as those terms are defined in the CCPA. We do not disclose personal information to third parties for their own direct marketing purposes. California residents may make the requests described above.

Data Breach Notification

If a security breach affects your personal information in a way that requires notice under applicable law, we will notify you and any required government authorities as that law requires. For Washington residents, this includes Washington’s data breach law (RCW 19.255.010), which generally requires notice within 30 days after a breach is discovered.

Children’s Privacy

Our website is intended for businesses and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has submitted information through our contact form, please contact us and we will delete it promptly.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated “Last updated” date. If we make significant changes to how we handle your personal information, we will make reasonable efforts to notify you (for example, by displaying a notice on our website).

Contact Us

If you have questions about this privacy policy or how we handle your information, contact PNW WEBCARE LLC through our contact form or email support@pnwwebcare.com.