Privacy policy

Information we collect

The information we collect depends on how you interact with us and may include:

• Contact and identity information: name, business name, job title, email address, telephone number, billing address, shipping address, and authorized contacts.
• Transaction and account information: products and services requested or purchased, estimates, work orders, invoices, purchase history, returns, warranty information, tax-exemption information, account preferences, and communications.
• Payment information: payment method, billing details, payment status, transaction identifiers, and limited payment-card details such as card brand and last four digits. Full payment credentials are generally collected and processed by our payment processors rather than stored by us.
• Website and device information: IP address, browser and device type, identifiers, pages viewed, referring pages, shopping-cart activity, and interactions with our website, emails, and advertisements.
• Marketing preferences: newsletter or text-message enrollment, consent records, and unsubscribe choices.
• Retail and service information: device model, serial number, hardware and software configuration, warranty status, diagnostic results, repair history, reported symptoms, and the physical condition of a device.
• Device access information: device passcodes, account credentials, encryption recovery keys, or other access information that you choose to provide when reasonably necessary to perform requested work. Please do not send passwords, payment-card numbers, or other sensitive information through ordinary email or general website forms.
• Customer device and data-service content: files, settings, accounts, messages, photos, backups, or other content that may be visible or processed while we perform repair, migration, backup, recovery, malware removal, troubleshooting, or similar services. We do not collect this content for marketing purposes.
• Managed-services and business-client information: user and administrator contact information; device names and identifiers; network addresses; software, patch, inventory, backup, authentication, security, availability, and support-ticket information; system and event logs; and other information generated through contracted monitoring, management, cybersecurity, cloud, or help-desk services.
• Other information you provide: information included in a form, support request, review, telephone call, in-store conversation, or other communication with us.

Please avoid giving us information that is not needed for the service you request. If a device or account contains another person's information, you are responsible for having authority to provide the device or authorize our access.

How we collect information

We collect information directly from you; from a business or other person that authorizes us to assist you; from devices, systems, and accounts you ask us to service; automatically through our website, cookies, and similar technologies; and from service providers, manufacturers, payment processors, shipping carriers, fraud-prevention providers, and other partners involved in a transaction or service request.

How we use information

We may use personal information to:

• provide estimates, sell and deliver products, process payments, fulfill orders, and administer returns, warranties, and service requests;
• diagnose, repair, configure, secure, monitor, maintain, back up, migrate, or recover devices and data as requested or contracted;
• authenticate authorized users, communicate about tickets and service status, and manage customer and business relationships;
• operate, personalize, analyze, troubleshoot, and improve our website, store, products, and services;
• send transactional messages and, where permitted, marketing communications; honor consent, opt-out, and communication preferences;
• protect customers, devices, accounts, our business, and others; detect fraud, misuse, security incidents, and unlawful activity;
• maintain business, tax, accounting, warranty, and compliance records; enforce agreements; resolve disputes; and establish or defend legal claims; and
• comply with law, court orders, subpoenas, and lawful requests from public authorities.

Device repair, data transfer, recovery, and technical support

Technical work can require access to a device, account, storage medium, backup, or network. Our personnel may encounter personal or confidential information while performing the work you authorize. We use that access only as reasonably necessary to diagnose the issue, perform and verify the requested service, document the work, protect systems, and meet legal or contractual obligations.

We may create temporary working copies, backups, diagnostic files, or transfer images when needed for a requested service. We retain or delete those materials based on the nature of the work, our agreement with you, operational needs, and legal obligations. No repair, transfer, backup, or recovery process can guarantee that data will not be lost or that every file can be recovered. You should maintain a current backup before service whenever possible and remove information that is not needed for the requested work.

For Apple-authorized service, we may provide Apple and its authorized service systems with contact information, product and device identifiers, diagnostic information, warranty or coverage status, repair details, and parts or logistics information as necessary to verify coverage and complete service. Apple's handling of information is governed by its own privacy notices.

Managed IT and business services

For managed-services, remote-support, cybersecurity, backup, cloud, consulting, and other business engagements, we process information according to the customer's instructions, the applicable services agreement, and law. Depending on the service, our tools may automatically collect system status, device inventory, network, security, authentication, backup, software, and event information. Authorized technicians may remotely access systems to provide support or maintenance. Business customers are responsible for giving appropriate notices, obtaining required permissions, and configuring access for their users.

We apply access controls intended to limit customer-environment access to authorized personnel and service providers with a business need. Additional confidentiality, security, retention, breach-notification, and data-return or deletion terms may be set out in a managed-services agreement, statement of work, business associate agreement, or data-processing addendum where applicable.

Payments and payment security

We use third-party payment providers, including Stripe and payment services made available through Shopify, to process some online, telephone, invoice, and in-store payments. When you submit payment information through a processor-supported checkout, payment link, terminal, or card-entry process, the processor receives and handles the payment credentials. We generally receive confirmation, transaction identifiers, fraud or risk signals, and limited card information rather than the complete card number or security code.

Payment providers, banks, and card networks process information under their own terms and privacy notices. You can learn more from the Stripe Privacy Center and the Shopify Consumer Privacy Policy. Please never send payment-card information by email, text message, or a general contact form.

We use HTTPS and processor-supported payment methods and maintain safeguards appropriate to the payment channels we use. Payment security is a shared responsibility among us, our processors, financial institutions, card networks, and customers; no method of transmission or storage is completely secure.

Cookies, analytics, and advertising

We and our providers, including Shopify, use cookies, pixels, local storage, and similar technologies to operate the site, keep a cart or session active, remember preferences, measure performance, prevent fraud, understand site use, and support marketing. Some technologies are necessary for the website to function; others may be controlled through the privacy choices made available on the site or in your browser.

We use Shopify enhanced features that combine information from your interactions with our store, other merchants, and Shopify to help provide personalization, analytics, fraud protection, marketing, and advertising services. For these enhanced features, Shopify may act as a controller of personal information. Shopify explains this processing and the choices available to you in its Consumer Privacy Policy and Privacy Portal.

How we disclose information

We may disclose personal information as reasonably necessary to:

• Commerce and payment providers, including Shopify, Stripe, banks, card networks, fraud-prevention providers, shipping carriers, and fulfillment partners;
• Technology and service providers that support hosting, email and text communications, customer support, data storage, backups, remote monitoring and management, cybersecurity, analytics, accounting, and other business functions;
• Manufacturers and service partners, including Apple, when needed for diagnostics, warranty validation, repair authorization, parts, product registration, or the service you request;
• Professional advisers, such as accountants, insurers, auditors, and legal counsel;
• Your organization or authorized contacts when services are provided for a business, school, nonprofit, government body, household, or other account with multiple authorized users;
• Government authorities and other parties when required by law or reasonably necessary to protect rights, safety, property, systems, customers, or the public; and
• A successor or transaction participant in connection with a merger, financing, reorganization, sale of assets, acquisition, or similar business transaction, subject to appropriate protections.

We may also disclose information at your direction or with your consent. We do not disclose customer device contents to third parties for their independent marketing.

Sale, sharing, and targeted advertising

We do not sell personal information for money. Certain privacy laws may define some transfers involving advertising cookies or cross-context behavioral advertising as a "sale," "sharing," or "targeted advertising." Depending on where you live, you may have the right to opt out of those activities.

You can submit an opt-out through Your Privacy Choices. Where required, we also treat a recognized Global Privacy Control signal as an opt-out request for the browser or device sending the signal. Other browser "Do Not Track" signals may not be recognized.

Marketing communications

You can unsubscribe from promotional email using the link in the message. You can opt out of promotional text messages by following the instructions in the message, including replying STOP where supported. We may still send non-promotional communications about orders, repairs, security, account administration, or an ongoing business relationship.

Data retention

We retain information for as long as reasonably necessary for the purposes described in this Policy, including to provide services, maintain service and warranty history, administer contracts and accounts, comply with tax, accounting, security, and legal requirements, resolve disputes, and enforce agreements. Retention depends on the information, the service, the sensitivity of the data, contractual requirements, and legal obligations. When information is no longer reasonably needed, we may delete, de-identify, or securely dispose of it.

Security

We use administrative, technical, and physical safeguards designed to protect personal information, taking into account the nature of the information and our operations. These safeguards may include access controls, authentication, encryption where appropriate, secure payment providers, staff procedures, vendor oversight, backups, monitoring, and secure disposal practices. No safeguard can guarantee absolute security. Please use secure channels for sensitive information and contact us promptly if you believe information or an account has been compromised.

Your rights and choices

Depending on where you live and subject to applicable exceptions, you may have rights to request access to, correction of, deletion of, or a portable copy of personal information; to restrict or object to certain processing; to withdraw consent; or to opt out of sale, sharing, or targeted advertising. You may also appeal a decision we make about a request where applicable.

To submit a request, email sales@yescomputers.com, call +1 413-585-0007, or write to us at 196 Pleasant St, Northampton MA 01060, United States. Describe your request and the relationship or transaction involved. We may need to verify your identity and authority before acting. An authorized agent may submit a request where permitted by law, but we may require proof of authorization and identity. We will not discriminate against you for exercising an applicable privacy right.

For information Shopify processes for its own purposes, you may also use the Shopify Privacy Portal.

Children's privacy

Our website and services are not directed to children under 13, and we do not knowingly collect personal information online from a child under 13 without appropriate authorization. A parent or guardian who believes a child has provided personal information may contact us to request review or deletion. Service performed on a family device may incidentally involve a child's information; the customer authorizing service is responsible for having authority to provide the device and authorize the work.

International processing

Some providers may process information in the United States or other countries. Privacy and data-protection laws in those places may differ from those where you live. Where required, we and our providers use recognized safeguards for international transfers.

Third-party sites and services

Our website may link to third-party sites, applications, financing providers, manufacturers, or services. Their privacy practices are governed by their own notices, and we are not responsible for services we do not control.

Changes to this Policy

We may update this Policy to reflect changes in our practices, services, technology, or legal obligations. We will post the revised version here, update the "Last updated" date, and provide any additional notice required by law.

Contact us

For privacy questions, requests, or complaints, contact:

Yes Computers
196 Pleasant St, Northampton MA 01060, United States
Email: sales@yescomputers.com
Phone: +1 413-585-0007

If you are a managed-services customer, you may also contact your account representative or use the support contact specified in your services agreement.