MBPS LLC
MBPS LLC (“MBPS,” “we,” “us,” “our”) is a managed IT and cybersecurity provider headquartered at 200 E Van Buren St, 4th Floor, Phoenix, AZ 85004, with an office at 6655 W Sahara Ave, Suite A216, Las Vegas, NV 89146.
This policy applies to MBPS.com and its subdomains, to our forms, chat, scheduling and phone channels, and to the information we collect when providing services.
It does not apply to third-party websites we link to, or to a client’s own privacy practices.
MBPS handles personal information in two distinct capacities, and your rights differ depending on which applies.
As a business, for our own purposes. When you visit our website, fill in a form, call us, chat with us, apply for a job or become a billing contact, MBPS decides why and how that information is used. In privacy law terms we are the controller or business. Sections 3 to 13 of this policy describe that.
As a service provider, on behalf of a client. When we monitor, secure, back up, support or migrate a client’s systems, we come into contact with data belonging to that client — including data about the client’s own employees, customers or patients. MBPS does not own that data, does not decide what it is used for, and does not use it for our own purposes. In privacy law terms we are the service provider or processor. Section 14 describes that.
If you are an employee, customer or patient of an MBPS client and you want to exercise rights over your data, your request should go to that organisation. We will support them in responding.
Contact and enquiry information. Name, business name, email address, phone number, job title, location, and whatever you write in a form, chat or email — for example when you request a quote, book a call, ask a question or subscribe to something.
Account and billing information. Where you become a client: authorized contacts, billing contacts, billing address, purchase orders and payment records. Card and bank details are handled by our payment processors; MBPS does not store full card numbers.
Recruitment information. Where you apply for a role: the contents of your application, CV and any information you choose to include.
Support information. Where you are a user we support: ticket contents, device identifiers, screenshots you send us, and notes from calls and remote sessions.
Call and session recordings. MBPS records inbound and outbound telephone calls and remote support sessions. We do this for quality assurance, training, dispute resolution, and to keep an accurate record of what was done on a system and when — which matters in a security investigation.
You are notified that recording is taking place at the start of the call or session. If you would prefer not to be recorded, tell the person you are speaking with and we will continue without a recording or arrange another way to help you. Recordings are treated as confidential, are accessible only to staff who need them, and are retained as described in Section 11.
When you use our website we and our analytics providers may collect: IP address, approximate location derived from it, device type, operating system, browser type and version, language, referring URL, the pages you view, links you click, time on page, and the dates and times of your visits. This is collected through cookies and similar technologies described in Section 6.
Our web forms and chat widget ask for your consent to be contacted by SMS or email. Here is what that means in practice.
• What you are agreeing to. By submitting a form or starting a chat and providing a mobile number, you agree that MBPS may send you text messages relating to your enquiry, your account or your support tickets, and — where you have opted in — occasional messages about our services.
• Frequency. Message frequency varies depending on your enquiry and your account activity.
• Cost. Message and data rates may apply. MBPS does not charge for messages; your carrier may.
• How to stop. Reply STOP to any message to opt out. Reply HELP for help, or contact us using Section 17.
• It is not a condition of purchase. You do not have to agree to marketing messages to become or remain a client. You may still receive transactional messages about services you have asked for.
• We do not sell your number. Mobile numbers and SMS consent are never sold, rented or shared with third parties for their own marketing.
We use cookies, pixels, local storage and similar technologies for the following purposes.
Strictly necessary. Keeping the site secure and functional, remembering your session, and protecting our forms from abuse. Google reCAPTCHA is used for that last purpose and is subject to Google’s own privacy terms.
Functional. Remembering choices you make, and running the GoHighLevel chat widget — which stores information in your browser so it knows whether it has already greeted you and can continue a conversation you have started.
Analytics. Understanding which pages are used and how people arrive, through Google Analytics 4 and Google Tag Manager.
Advertising. Measuring the performance of our advertising and, where enabled, showing our ads to people who have visited the site, through Google Ads. Where advertising or analytics cookies are used to build a profile across sites, that activity may be treated as “sharing” or a “sale” under some state laws — see Section 12.
Your controls. Most browsers let you block or delete cookies; blocking strictly necessary cookies will break parts of the site. You can opt out of Google Analytics using Google’s browser add-on, and adjust ad personalisation in your Google account settings. Where your browser sends a Global Privacy Control signal, we treat it as a valid opt-out of sale and sharing.
• To respond to your enquiry, prepare a quote and carry out an environment review.
• To deliver, support, monitor, secure and invoice the services.
• To communicate with you about tickets, incidents, maintenance windows and account matters.
• To send marketing about our services where you have opted in or where permitted by law, always with a way to opt out.
• To improve the website, our services and our security posture.
• To detect, investigate and prevent fraud, abuse and security incidents.
• To recruit, and to evaluate applications.
• To meet legal, tax, accounting, insurance and regulatory obligations, and to establish or defend legal claims.
Automated decision-making. We do not make decisions producing legal or similarly significant effects about you based solely on automated processing.
Where such laws apply, we rely on: contract, to provide services you have asked for; legitimate interests, to run and secure our business, market to business contacts and improve our services, balanced against your rights; consent, for non-essential cookies and for marketing messages where consent is required, which you may withdraw at any time; and legal obligation, where the law requires us to keep or disclose information.
We do not sell personal information for money. We share it in these circumstances:
Service providers who work for us. Under contract, and only to perform services for MBPS. These include, depending on context: our website host and CDN; GoHighLevel / LeadConnector, which powers our forms, chat, scheduling and CRM; Google, for analytics, advertising and reCAPTCHA; Microsoft, for email and productivity; our accounting and payment processors; and the platforms named in Section 14 that we use to deliver services.
Professional advisers such as lawyers, auditors and insurers, where needed.
Legal and safety. Where we are required by law, subpoena or court order, or where disclosure is necessary to protect the rights, property or safety of MBPS, our clients or the public.
Business transfers. In connection with a merger, acquisition, financing or sale of assets, with notice as required by law.
With your direction. Where you ask us to share information with someone.
We maintain administrative, technical and physical safeguards designed to protect personal information, including role-based access control, least-privilege administrative access, multi-factor authentication on privileged accounts, encryption in transit and at rest where supported, endpoint protection and detection, patch management, logging and monitoring, staff security awareness training, and background checks where appropriate.
No system is perfectly secure. If we determine a breach has occurred affecting your personal information, we will notify you and any regulator as required by applicable law, without undue delay.
Where information is stored. MBPS operates in the United States and our systems and those of our providers are hosted primarily in the United States. If you access the site from elsewhere, you understand your information will be transferred to and processed in the United States, which may have different data protection rules from your country.
We keep personal information only as long as needed for the purpose it was collected, and then for as long as required by law or by our legitimate need to resolve disputes and enforce agreements. In practice:
• Enquiries that do not become clients — up to 24 months from last contact.
• Client account, contract and billing records — for the life of the relationship and generally seven (7) years afterwards, for tax and legal purposes.
• Support tickets and session notes — generally three (3) years after closure.
• Call and remote session recordings — generally 12 months, unless a recording is retained longer for a specific investigation, dispute or legal hold.
• Job applications — up to 12 months unless you ask us to keep them on file.
• Analytics data — per the retention setting configured in the analytics platform, generally 14 months.
Data we hold on behalf of clients is retained and deleted according to that client’s agreement — see Section 14.
Everyone. Whatever state you are in, you may ask us to confirm what personal information we hold about you, provide a copy of it, correct it if it is wrong, or delete it. You may also opt out of marketing at any time using the unsubscribe link in any email, by replying STOP to a text, or by contacting us.
California (CCPA/CPRA). If you are a California resident you have the right to know the categories and specific pieces of personal information we have collected, the sources, the business purpose and the categories of third parties we disclose to; to delete personal information; to correct inaccurate personal information; to opt out of the sale or sharing of personal information; to limit the use of sensitive personal information; and not to be discriminated against for exercising these rights.
MBPS does not sell personal information for money, and does not knowingly sell or share the personal information of anyone under 16. We may “share” identifiers and internet activity with advertising partners for cross-context behavioural advertising as described in Section 6. To opt out, use the Do Not Sell or Share My Personal Information instructions below, or send a Global Privacy Control signal from your browser.
Texas, Colorado, Virginia, Connecticut, Utah, Oregon, Montana and other states with comprehensive privacy laws. You have broadly equivalent rights of access, correction, deletion, portability, and opt-out of targeted advertising, sale and certain profiling. Where the applicable law provides an appeal process, you may appeal a decision by replying to our response; we will inform you of the outcome and how to contact your state Attorney General if you remain dissatisfied.
Nevada. Nevada residents may direct us not to sell certain covered information. MBPS does not engage in such sales, but you may still submit a request.
EU / UK. Where those laws apply, you additionally have rights to restrict or object to processing, to data portability, to withdraw consent, and to lodge a complaint with your supervisory authority.
How to make a request. Email team@MBPS.com with the subject line “Privacy Request,” or call (888) 656-MBPS. We will verify your identity before acting — usually by confirming information we already hold — and respond within the time the applicable law allows, generally 45 days, with an extension where permitted. An authorized agent may submit a request on your behalf with written permission we can verify. There is no charge unless a request is excessive or repetitive.
MBPS does not sell your personal information for money. We do use analytics and advertising cookies that some state laws treat as “sharing” for cross-context behavioural advertising.
To opt out, do any of the following:
• Enable a Global Privacy Control signal in your browser or extension — we honour it automatically.
• Email team@MBPS.com with the subject line “Do Not Sell or Share.”
• Call (888) 656-MBPS.
We will not discriminate against you for opting out.
Our website and services are intended for businesses and for adults. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.
Delivering managed IT and security services means our tools have access to client systems, and therefore to data those systems hold. This section explains how that is governed.
The client owns it. MBPS does not own client data, does not sell it, does not use it to train models, and does not use it for our own marketing or analytics. We access it only to deliver, support and secure the services, to meet a legal obligation, or on the client’s instruction.
Platforms involved. Depending on which services a client has purchased, client data may be processed by: NinjaOne (remote monitoring and management), SentinelOne (endpoint detection and response), Barracuda Networks (email security, backup and data protection), Microsoft (Microsoft 365 and Azure), and the cloud, telephony and backup providers named in that client’s agreement. Each is bound by contract and remains our responsibility.
Regulated data. Where a client is a HIPAA covered entity, or is subject to another framework requiring a written data agreement, we enter into a Business Associate Agreement or equivalent before processing regulated data. That agreement governs for the data it covers.
Retention and return. Client data is retained and returned or deleted according to that client’s agreement. Our standard position is set out in our Terms of Service: a 30-day retrieval window after termination, then deletion within 60 days.
Incidents. If we confirm a security incident affecting client data in our custody, we notify the client without undue delay and within 72 hours, and support their own notification obligations.
Individual requests. If you are an employee, customer or patient of an MBPS client, send your privacy request to that organisation. If you send it to us, we will forward it and assist them in responding.
Our site links to third-party services including Google Maps, Google Business Profile review pages, our members portal and our social media profiles, and embeds forms, chat and scheduling from GoHighLevel. Those providers may collect information about you under their own policies, which we do not control. We encourage you to read them.
We may update this policy as our practices or the law change. The version number and effective date at the top of this page will change with it. Where a change materially affects how we use information already collected about you, we will provide notice by email or a prominent notice on the site before it takes effect.
Questions, requests or complaints about privacy:
MBPS LLC — Privacy
200 E Van Buren St, 4th Floor, Phoenix, AZ 85004
6655 W Sahara Ave, Suite A216, Las Vegas, NV 89146
team@MBPS.com · (888) 656-MBPS
See also our Terms of Service.
Talk to the MBPS team about what your business actually needs.