Privacy Policy

Effective Date: August 7, 2023
Last Updated: March 7, 2025

STEM Smart IT Inc. (“we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with our team.

This policy applies to all personal information collected or processed by STEM Smart IT Inc., including from clients, prospects, website visitors, and service users.

1. Information We Collect

We may collect the following categories of information:

a. Personal Information

Name, job title, company name
Email address, phone number
Mailing or billing address

b. Business and Technical Information

Login credentials (for service accounts, if applicable)
IP address, browser type, access times, and usage logs
Device information, system configurations, and log data (for managed IT services)

c. Sensitive Information

For regulated industries (e.g., biotech, life sciences), we may process GxP-related documentation, audit records, or validated system logs as required for services such as Quality Assurance or CSV (Computer Systems Validation).

We do not intentionally collect personal data from children under the age of 13.

2. How We Use Your Information

We use collected information to:

Provide, manage, and support our IT and cybersecurity services
Respond to inquiries and provide customer support
Manage contracts, billing, and service delivery
Monitor system usage and ensure service quality and security
Comply with regulatory, legal, or contractual obligations

3. Legal Bases for Processing (GDPR)

If you are located in the EU or UK, we process your personal data under the following legal bases:

Performance of a contract
Compliance with legal obligations
Legitimate business interests (e.g., improving services)
Consent, where required

4. Sharing and Disclosure

We do not sell personal information.

We may share your information with:

Authorized employees and service providers who assist in our operations (e.g., cloud storage, help desk platforms)
Regulatory or legal authorities if required by law
Subcontractors under signed confidentiality and data protection agreements

All third-party vendors are vetted to ensure compliance with applicable privacy and security standards.

5. Data Retention

We retain your data only as long as necessary to fulfill the purposes outlined in this policy, including for legal or compliance reasons. Afterward, data is securely deleted or anonymized.

6. Data Security

We implement administrative, physical, and technical safeguards to protect your information, including:

Multi-factor authentication
Encryption of data in transit and at rest
Access controls and regular audits
Secure data backup and recovery protocols

7. International Data Transfers

We may process or store data in the United States or other jurisdictions. For international clients, we implement safeguards (e.g., Standard Contractual Clauses) as required under applicable laws like GDPR.

8. Your Rights

Depending on your location, you may have the following rights:

Access to your personal data
Request correction or deletion
Object to or restrict processing
Withdraw consent at any time
File a complaint with a data protection authority

To exercise these rights, please contact us at [email protected]

9. Cookies and Website Tracking

Our website may use cookies or similar technologies to improve your browsing experience and analyze traffic. You can set your browser to refuse cookies or alert you when cookies are being sent.

10. Policy Updates

We may update this Privacy Policy from time to time. Updates will be posted to this page with a new effective date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact:

STEM Smart IT Inc.
Woodbridge, NJ 07095
📧 Email: [email protected]