Last updated: October 13, 2026
Mash IT LLC ("Mash IT," "we," "us," or "our") respects your privacy. This Privacy Statement explains what personal information we collect when you visit mashit.net (the "Site"), contact us, or do business with us; how we use and share it; and the choices and rights you have.
Scope
This Privacy Statement covers information we collect for our own business: through the Site, our forms, phone calls, email, and our dealings with clients and prospective clients.
It does not cover data we access or handle on behalf of our clients while providing managed IT, cybersecurity, cloud, or compliance services, such as files, email, devices, or user accounts in a client's systems. We handle that data as a service provider, only on our client's instructions and as described in our written agreement with that client. If you are an employee, patient, or customer of one of our clients, please contact that organization with questions about how it handles your information.
Information we collect
Information you give us. When you fill out our contact or IT assessment form, call or email us, or become a client, we collect what you provide. On the forms that's your name, business email address, phone number, company name, the IT service you're interested in, approximate company size, and your message. If you become a client, we also collect billing contact details and the information we need to deliver our services. Please don't send patient, legal, or other privileged information through our forms.
Information collected automatically. When you use the Site, we and our service providers automatically collect some technical information, such as your IP address, approximate location derived from it, browser and device type, pages viewed, the page that referred you, and the date and time of your visit. We use cookies and similar technologies for this, as described in Cookies and similar technologies below.
Session recordings. We use Microsoft Clarity to understand how visitors use our pages. Clarity records interactions such as mouse movements, clicks, scrolling, and the pages you visit, and turns them into replays and heatmaps so we can find what's confusing or broken. It masks what you type into our forms, so your form entries are not recorded. Clarity runs only while the Analytics setting on our Your Privacy Choices page is on.
Advertising and lead-source information. If you arrive at the Site from an online ad or a tracked link, we may record the ad click identifier (for example, a Google Ads or Microsoft Advertising click ID) and campaign details (such as UTM parameters), along with the first page you landed on and the website that sent you, and attach them to any form you submit. This tells us which ads and campaigns bring us inquiries. This information is stored in your browser for up to 90 days, and only while the matching setting on our Your Privacy Choices page is on.
Blog comments. If you comment on a blog post, we collect your name, email address, and comment. Your name and comment are shown on the Site once we approve the comment; your email address is never shown. To fight spam, we also store your browser's user agent and a one-way scrambled (hashed) version of your IP address with the comment.
Site search. When you search the Site, we use what you type to find matching pages. The search text appears in the page address, so analytics tools that record pages viewed may receive it too. Please don't type personal or sensitive information into the search box.
Spam protection. Our forms and comment form are checked by Cloudflare Turnstile, which looks at technical signals from your browser to tell people from bots.
Payment information. If you pay us, your payment is handled by our payment processor. We do not store full payment card numbers on our systems.
How we use your information
We use personal information to:
- Respond to your inquiries and provide the services you ask for;
- Communicate with you about your account, projects, invoices, and support requests;
- Review and publish blog comments you submit;
- Understand how the Site is used and improve it and our services;
- Measure the performance of our advertising, including which ads lead to inquiries and new clients;
- Protect the Site, our business, and our clients, including detecting and preventing spam, fraud, and security incidents; and
- Comply with legal obligations and enforce our agreements.
How we share your information
We share personal information only as described here:
- Service providers. Companies that help us run our business, such as website hosting, security, spam protection, email delivery, and tag management (Cloudflare), customer support and ticketing, accounting and payment processing, and analytics. They may use personal information only to perform services for us.
- Analytics and advertising partners. Google (Google Analytics and Google Ads) and Microsoft (Microsoft Clarity and Microsoft Advertising) receive information about Site visits, form submissions, and taps on our phone number so we can understand how the Site is used and measure our marketing. They never receive the contents of your form. See Advertising, "sale," and "sharing" below.
- Legal and safety. When we believe in good faith that disclosure is required by law, subpoena, or other legal process, or is needed to protect the rights, property, or safety of Mash IT, our clients, or others.
- Business transfers. In connection with a merger, acquisition, financing, or sale of all or part of our business, subject to this Privacy Statement.
- With your consent or at your direction.
Advertising, "sale," and "sharing"
We do not sell personal information for money. However, some state privacy laws define "sale," "sharing," and "targeted advertising" broadly enough to include letting advertising platforms collect information about your use of our Site through cookies and similar technologies, or sending them information to measure whether our ads led to an inquiry. Under those definitions, we may "sell" or "share" the following categories of information with advertising and analytics partners such as Google and Microsoft:
- Online identifiers, such as cookie IDs, ad click IDs, and IP address;
- Internet activity, such as pages viewed, whether you submitted a form, and whether you tapped our phone number; and
- For inquiries that came from our ads, an ad click ID, and possibly your email address in hashed (scrambled) form, so the platform can match the inquiry to an ad click.
How to opt out. Visit Your Privacy Choices and turn off Advertising. We also treat a Global Privacy Control (GPC) signal from your browser as a valid request to opt out, and apply it automatically. Opt-outs made through the Site are tied to your browser and device, so you may need to repeat them on other browsers or devices, or after clearing cookies. You can also opt out by contacting us using the details below.
We do not knowingly sell or share the personal information of anyone under 16.
Cookies and similar technologies
We use three kinds of cookies and similar technologies: essential ones the Site needs to work, analytics ones that help us understand how the Site is used, and advertising ones that help us measure our ads. Analytics tools (Google Analytics and Microsoft Clarity) and advertising tools (Google Ads and Microsoft Advertising) are loaded through Cloudflare Zaraz and are on by default. You can turn them off at any time on our Your Privacy Choices page, which explains each kind in more detail.
Browsers' "Do Not Track" setting has no agreed standard, so we do not respond to it. We do honor Global Privacy Control as described above.
How long we keep information
We keep personal information for as long as we need it for the purposes in this Privacy Statement: to respond to you, to provide and support our services, to keep business, tax, and accounting records, to resolve disputes, and to meet legal obligations. How long depends on the type of information and our relationship with you. For example, inquiries that don't lead to a working relationship are kept for a shorter time than client records. When we no longer need information, we delete it or de-identify it. Lead-source information stored in your browser expires after 90 days. Blog comments are kept while they're published on the Site, and comments we don't approve are deleted.
How we protect information
Security is our business, and we use administrative, technical, and physical safeguards suited to the sensitivity of the information we hold, including encryption in transit, access controls, and multi-factor authentication on the systems we use. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Your privacy rights
Depending on the state where you live, including Kentucky, you may have some or all of the following rights, subject to legal exceptions:
- Know and access: confirm whether we process your personal information and get a copy of it;
- Correct: ask us to correct inaccurate personal information;
- Delete: ask us to delete personal information we collected from or about you;
- Portability: receive your personal information in a portable format; and
- Opt out: opt out of the "sale" or "sharing" of personal information and of targeted advertising, as described above. We do not use personal information for profiling that produces legal or similarly significant effects.
We honor these requests from any U.S. resident, whether or not your state's law requires it.
How to make a request. Contact us through our contact form or by phone at (859) 474-7774 and tell us which right you want to use. To protect your information, we will verify your request by matching the details you give us to information we already hold, and we may ask for more information if needed. We will respond within 45 days, and if we need more time, we will tell you why and extend by up to another 45 days as the law allows.
Authorized agents. You may use an authorized agent to make a request for you. We may ask the agent for proof of your written permission and may ask you to verify your identity directly with us.
Appeals. If we decline your request, you may appeal by contacting us with "Privacy Appeal" in your message. We will respond to your appeal in writing within 60 days. If you are not satisfied with the outcome, you may contact your state attorney general.
No discrimination. We will not deny you services, charge you a different price, or provide a different level of service because you used your privacy rights.
Children's privacy
The Site and our services are meant for businesses and adults. They are not directed to children, and we do not knowingly collect personal information from children under 16. If you believe a child has given us personal information, contact us and we will delete it.
Visitors outside the United States
The Site is meant for visitors in the United States, and we process information in the United States.
Links to other sites
The Site links to websites we do not operate, including our client portal and remote support tools. Their privacy practices are governed by their own policies, not this Privacy Statement.
Changes to this Privacy Statement
We may update this Privacy Statement from time to time. When we do, we will change the "Last updated" date above. If we make material changes to how we use or share personal information, we will give notice on the Site before the change takes effect.
Contact us
If you have questions about this Privacy Statement or our privacy practices, or want to use your rights, contact us:
Mash IT LLC, 2331 Fortune Dr, Ste 130, Lexington, KY 40509
Phone: (859) 474-7774
Online: contact form