Privacy Policy

Effective date: July 14, 2026

NorCal Tech Solutions, Inc. ("NorCal Tech Solutions," "we," "us") respects your privacy. This policy explains what information we collect on norcal-techs.com, how we use it, who processes it on our behalf, and the rights you have — including your rights as a California resident under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA).

Information we collect

Information you give us. When you submit a form (contact, free IT assessment, or other inquiry forms), we collect what you enter — typically your name, business name, email address, phone number, and message. Forms include a one-line privacy note and are used only to respond to your inquiry.

Information collected automatically.

Analytics. We use Google Analytics 4 (GA4) to understand how the site is used — pages viewed, approximate location derived from IP, device and browser type, and interaction events (such as form submissions and click-to-call taps). GA4 sets cookies for this purpose. We do not use analytics data to identify you personally.
Spam protection. Our forms are protected by Cloudflare Turnstile, an invisible, privacy-focused captcha. Turnstile evaluates browser signals (such as device and browser characteristics) to distinguish humans from bots without tracking you across sites; its processing is described in the Cloudflare Privacy Policy. If we ever substitute Google reCAPTCHA for this function, Google's collection of device and application data would apply instead, subject to the Google Privacy Policy, and we will update this page accordingly.
Server logs. Like nearly all websites, our servers log requests (IP address, URL, timestamp, user agent) for security, rate-limiting, and troubleshooting. Logs are rotated and retained only as long as operationally necessary.

How we use your information

To respond to your inquiries and schedule assessments or services you request.
To send you a confirmation of your form submission.
To operate, secure, and improve the website (analytics, spam prevention, rate limiting).
To comply with legal obligations.

We do not use your form submissions for unrelated marketing lists without your consent, and we do not send you a newsletter you didn't sign up for.

Who processes your data on our behalf

We use a small set of service providers ("processors") to run the site and respond to you:

Postmark (ActiveCampaign, Inc.) — transactional email delivery for form notifications and confirmations.
Twenty CRM (self-hosted) — our customer relationship management system, where inquiry details are stored so we can follow up. Because it is self-hosted, your CRM data stays on infrastructure we control.
Slack — internal notification to our team when a form is submitted (name, company, contact details, and message excerpt).
Cloudflare — Turnstile spam protection and content delivery/security for this website (see above).
Google — GA4 analytics (see above).
Freshdesk (Freshworks, Inc.) — our customer support portal, if you open a support ticket.

Each provider receives only the data needed for its function and is bound by its own privacy commitments and our agreements with it.

We do not sell or share your personal information

NorCal Tech Solutions does not sell your personal information, and does not "share" it for cross-context behavioral advertising as those terms are defined by the CCPA/CPRA. We have not done so in the preceding 12 months. We do not use or disclose sensitive personal information for purposes requiring a right to limit.

Your California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to:

Know/access — request the categories and specific pieces of personal information we hold about you.
Delete — request deletion of personal information we collected from you, subject to legal exceptions.
Correct — request correction of inaccurate personal information.
Opt out of sale/sharing — we do not sell or share personal information, so there is nothing to opt out of; this right is noted for completeness.
Non-discrimination — we will never treat you differently for exercising your rights.

To exercise any of these rights, contact us via the contact page or by mail at our Sacramento office. We will verify your request (typically by matching the email address on file) and respond within the timeframes the law requires. You may use an authorized agent; we may require proof of authorization.

Cookies

The site uses cookies only for GA4 analytics; Cloudflare Turnstile operates without tracking cookies. We do not use third-party advertising trackers. You can block or delete cookies in your browser settings; the site remains usable without them.

Data retention

Form submissions and related correspondence are retained for as long as needed to handle your inquiry and maintain our business records, then deleted. Analytics data is retained per our GA4 configuration. Server logs are rotated on a short cycle.

Security

We apply the same discipline to our own systems that we sell: encryption in transit (HTTPS everywhere), access controls, and monitoring. No system is perfectly secure, but protecting data is literally our business.

Children

This site is a business-to-business service and is not directed at children under 16. We do not knowingly collect personal information from children.

Changes to this policy

We'll post any changes here with an updated effective date. Material changes will be flagged prominently.

Contact us

Questions about this policy or your data? Reach us through the contact page or by mail at our Sacramento office (address on the contact page).