PRIVACY & DATA

What I collect,
and what I do
with it.

XD3R LAB LLC operates xd3rlab.com and provides IT services to small businesses and home users across Northern New Jersey and New York City. Ten numbered clauses, a date, and a revision history — so you can find the part you need and tell whether it has changed.

0

Information sold or rented

0

Marketing or bulk texts

1

Person who handles it

7

Years records are kept

This document is short because the practice is small. There is no ad network behind this site and no data to resell — only what you send me, the systems I need to do the work, and the records I am required to keep.

COLLECTION

What comes in

  1. 01

    Who I am

    XD3R LAB LLC is a managed IT services provider based in New Jersey. It is a single-owner business: contracted IT support, network installation and management, cloud administration, cybersecurity, data backup, and hardware procurement, for small business clients and home users across Northern New Jersey and New York City.

    The person responsible for your information is Alexander Santiago. You can reach me at help@xd3rlab.com or 844.503.4700.

  2. 02

    What I collect

    What you give me directly

    When you submit the contact form, email me, call me, or text me, I collect what you choose to give me — typically your name, business name, email address, phone number, and the details of your enquiry.

    What I handle while doing the work

    For clients under an active service agreement, I necessarily handle information relating to your systems and accounts in the course of providing support. That is governed by your service agreement with me, not by this website policy.

    What is collected automatically

    The website host records standard technical data such as IP address, browser type, referring page, and pages visited. It is used for security and to understand general site usage.

    I do not sell personal information, and I do not use your information for behavioural advertising.

  3. 03

    How I use it

    I use the information I collect to:

    1. respond to enquiries and provide the services you have requested
    2. schedule, deliver, and support IT work under an active service agreement
    3. send service-related communications such as ticket updates and appointment confirmations
    4. issue invoices and maintain business and tax records
    5. maintain the security and integrity of my systems and my clients' systems
    6. comply with legal and regulatory obligations

MESSAGING

How I use your number

  1. 04

    SMS and text messaging

    XD3R LAB uses SMS for one-to-one conversational support with existing clients only.

    Messages consist of replies to your questions, support ticket status updates, appointment and arrival confirmations, and service outage or maintenance notices.

    I do not send marketing, promotional, or automated bulk messages. I do not send text messages to numbers obtained from purchased lists, rented lists, or any third-party source.

    How you opt-in

    XD3R LAB collects SMS consent verbally, in person or by phone. You provide your phone number and are asked whether you would like to receive customer support SMS messages. At that point you are informed that message and data rates may apply, that message frequency varies, and that you may reply HELP for support or STOP to opt out.

    A phone number given through the website contact form is not enrolled in SMS; consent is collected verbally, separately.

    Sharing of mobile data

    No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing with subcontractors in support services, such as customer service providers, is permitted. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

HANDLING

Where it goes, and how long it stays

  1. 05

    Who else sees it

    I use a small number of established third-party providers to operate the business. Each processes information only as needed to deliver its service to me:

    Website hosting and delivery
    Serving xd3rlab.com
    Transactional email
    Delivering contact form submissions and service email
    Business email and productivity
    Correspondence and document storage
    Help desk and ticketing
    Managing support requests
    Accounting and invoicing
    Billing and financial records
    Telephony and messaging
    Voice calls and SMS on my business number

    I may also disclose information where required by law, to enforce my agreements, or to protect the rights, property, or safety of XD3R LAB, my clients, or others.

    I do not sell, rent, or trade personal information to third parties.

  2. 06

    How long I keep it

    I retain enquiry and client information for as long as it is needed to provide services and to meet my legal, accounting, and tax obligations. Records associated with completed engagements are typically retained for seven years.

    You may request earlier deletion of information that I am not required to keep.

  3. 07

    How it is protected

    I apply reasonable administrative and technical safeguards to protect the information I hold, including access controls, multi-factor authentication, encrypted storage and transport, and regular review of account access.

    No method of transmission or storage is completely secure, and I cannot guarantee absolute security.

YOUR CONTROL

What you can ask me to do

  1. 08

    Access, correction and opt-out

    You may:

    1. ask what information I hold about you
    2. request correction of anything inaccurate
    3. request deletion of anything I am not legally required to retain
    4. opt out of text messages by replying STOP
    5. opt out of non-essential email at any time

    Send any such request to help@xd3rlab.com and I will respond within a reasonable period.

  2. 09

    Children's privacy

    My services are directed to businesses and to adult home users. I do not knowingly collect personal information from anyone under the age of 16.

    If you believe a child has provided me with information, contact me and I will delete it.

  3. 10

    Changes to this policy

    I may update this policy from time to time. When I do, I will revise the last updated date in the document block above and record the change in the revision history below.

    Material changes affecting how I handle your information will be communicated to active clients directly.

REVISIONS

What changed, and when

The revision in the document block at the top of this page always matches the top row here. Anything below that row is superseded on the date shown beside it.

Revision history for this privacy policy: revision number, date, and what changed.
RevDateChange
1.214 Aug 2026Clause 04 restates the types of message sent, and confirms that a number given on the website contact form is not enrolled in SMS.
1.114 Aug 2026Clause 04 restated: SMS consent is collected verbally, in person or by phone, and messaging is limited to existing clients.
1.013 Aug 2026First publication.

PRIVACY REQUESTS

If you want to know what I hold about you, ask. I will tell you.