Privacy Policy

1. Introduction

Facet Interactive LLC ("Company," "we," "us," or "our") operates facetmsp.com (the "Site") and provides IT managed services under the Facet MSP brand, a division of Facet Interactive LLC.

This Privacy Policy governs personal information collected through the Site and in connection with our managed IT services. It supplements — and should be read together with — the Facet Interactive LLC Corporate Privacy Policy, which sets out our organization-wide privacy framework including our cookie practices, international data transfer notice, California privacy rights, and general information-sharing policies. Where this policy and the Corporate Privacy Policy overlap, this policy controls for Facet MSP activities.

2. Information We Collect

Information you provide directly

• Booking requests: When you schedule a call through Calendly, Calendly collects your name, email address, and any details you provide. We receive this information to fulfill your appointment.
• Email and phone contact: If you contact us at [email protected] or by phone, we retain that correspondence.
• Contact and inquiry forms: Any information you submit through Site forms (name, company, email, message).

Information collected automatically

• Log files: Our servers and hosting infrastructure automatically record IP addresses, browser type, operating system, referring URLs, pages visited, and timestamps. This data is used for security monitoring, fraud detection, and traffic analysis.
• Usage data: We use Google Analytics (via Google Tag Manager) to collect anonymized information about how visitors use the Site, including pages visited, time on page, referral source, and general geographic region.
• Cookies: Google Analytics sets first-party cookies to distinguish returning visitors. Calendly may set cookies when you interact with the booking widget. See the Corporate Privacy Policy for our full cookie category disclosure. You can disable cookies in your browser settings, though some Site features may not function correctly.
• UTM parameters: We read UTM query parameters (e.g., utm_source) to understand which advertising channels drive traffic. This data is stored in session storage only and is not transmitted to our servers.

Information collected through managed IT services

When you become a Facet MSP client, we access and process information about your organization's technology environment as a necessary part of service delivery. This includes:

• Network and infrastructure data: IP addresses, device inventories, network topology, firewall and switch configurations, and system performance telemetry collected via remote monitoring and management (RMM) tools.
• Endpoint data: Hardware and software inventory, patch status, security posture, and event logs on managed workstations and servers.
• User account data: Active Directory / Microsoft 365 user lists, license assignments, and access rights reviewed and managed on your behalf.
• Ticketing and support data: Names, email addresses, and issue descriptions submitted through our help desk system by your employees.
• Backup data: Copies of files, databases, and system images stored in backup and disaster recovery platforms on your behalf.

In the context of managed services, we act as a data processor on behalf of your organization (the data controller). The collection, use, and retention of this information is governed by your service agreement with Facet MSP, not this Privacy Policy. Clients in regulated industries (e.g., HIPAA-covered healthcare organizations) may execute a Business Associate Agreement (BAA) or Data Processing Agreement (DPA) with us — please contact us to arrange this.

3. How We Use Your Information

We use information collected through the Site to:

• Schedule and conduct IT assessments and consultations you request.
• Respond to inquiries sent via email or phone.
• Send service confirmations, appointment reminders, and follow-up communications related to your inquiry.
• Send promotional emails about Facet MSP services where you have not opted out. Every marketing email includes an unsubscribe link.
• Analyze website traffic and user behavior to improve the Site and our marketing.
• Measure the effectiveness of our advertising campaigns (Google Ads, X/Twitter).
• Detect fraud and protect the security of our systems.
• Comply with applicable legal obligations.

We do not sell, rent, or trade your personal information to third parties.

4. Email Communications and Tracking

If you book a call or contact us, we may send you service-related and promotional emails. Our email platform may use clear GIFs (web beacons) embedded in emails to track whether messages were opened and which links were clicked. This data is used solely to measure communication effectiveness and improve our outreach.

You can opt out of marketing emails at any time by clicking the unsubscribe link in any email we send, or by contacting us at [email protected]. Transactional messages related to a confirmed appointment or active service engagement are not subject to opt-out.

5. Third-Party Services and Subprocessors

Site integrations

The Site integrates with the following third-party services that have their own privacy practices:

• Google Analytics / Google Tag Manager — Anonymized analytics. See Google's Privacy Policy. Opt out via the Google Analytics Opt-out Add-on.
• Calendly — Processes booking information when you schedule a call. See Calendly's Privacy Policy.
• Clutch — Displays verified client reviews via an embedded widget. See Clutch's Privacy Policy.
• Google Fonts — Loads typefaces from Google's servers. See Google's Privacy Policy.

MSP service subprocessors

To deliver managed IT services, we use professional-grade platforms that may process client environment data on our behalf. Categories of subprocessors include:

• Remote Monitoring & Management (RMM): Monitors and manages endpoints and infrastructure.
• Professional Services Automation (PSA): Tracks support tickets, billing, and project management.
• Backup & Disaster Recovery (BDR): Stores encrypted backups of client data.
• Endpoint Detection & Response (EDR) / Security platforms: Monitors endpoints for threats.
• Microsoft 365: Cloud productivity and identity management for client environments.

All subprocessors are bound by confidentiality obligations and data processing terms consistent with our service agreements. A current list of active subprocessors is available upon written request.

6. Information Sharing

We may share your personal information only in the following circumstances:

• With your consent: When you have explicitly authorized us to do so.
• Service providers: With subprocessors and vendors who assist us in operating the Site or delivering services, under confidentiality agreements.
• Legal compliance: When required by applicable law, regulation, legal process, or enforceable governmental request.
• Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the successor entity, subject to the same privacy protections.

We do not sell or share your personal information with advertisers or data brokers.

7. Data Retention

We retain email and phone correspondence for as long as necessary to fulfill the purpose for which it was collected or as required by law. Analytics data is retained per Google Analytics' default settings (26 months). Calendly retains booking data per its own policy.

Client environment data collected during managed service delivery is retained for the duration of the service engagement and for a reasonable period thereafter, as specified in your service agreement, to support handover, continuity, and legal compliance obligations.

8. Your Rights

Depending on your location, you may have the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate personal information.
• Request deletion of your personal information (subject to legal retention requirements).
• Opt out of marketing communications.
• Opt out of analytics tracking (see Section 5).

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Civil Code Section 1798.83:

• Right to know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, as well as the categories of sources, purposes, and third parties with whom we share it.
• Right to delete: You may request deletion of personal information we have collected, subject to certain exceptions.
• Right to opt out of sale: We do not sell personal information. No opt-out is required.
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.
• Shine the Light: California residents may request, once per year, information about personal information shared with third parties for their direct marketing purposes. We do not share personal information with third parties for direct marketing without consent.

To submit a California privacy request, contact us at [email protected] or by phone at (323) 510-1984.

10. International Users

Facet MSP operates in the United States. If you are located outside the United States, please be aware that information you provide will be transferred to and processed in the United States, where privacy laws may differ from those in your country. By using the Site or engaging our services, you consent to this transfer.

11. Children's Privacy

The Site is intended for business decision-makers and is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, contact us and we will delete it promptly.

12. Security

The Site is served over HTTPS. Access to personal information is restricted to employees, contractors, and authorized subprocessors who need it to operate or improve our services. We use industry-standard security measures; however, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. Your continued use of the Site after any change constitutes your acceptance of the updated policy.

14. Contact Us

For questions about this Privacy Policy, to exercise your rights, or to request a Business Associate Agreement or Data Processing Agreement, please contact:

For our organization-wide privacy practices, see the Facet Interactive LLC Corporate Privacy Policy.