Last updated: 10/30/2026

1. Introduction & Scope

Welcome to SecondDesk Services ("Company," "we," "our," or "us"). We are deeply committed to safeguarding your privacy and ensuring the highest standards of data protection. This Comprehensive Privacy Policy outlines in strict detail how we collect, process, store, and protect your personal and business data when you utilize our digital infrastructure, CRM tools, managed services, and associated platforms (collectively, the "Services"). By accessing or utilizing our Services, you explicitly consent to the data practices described herein.

2. Comprehensive Data Collection

To provide our enterprise-grade services, we may collect, use, store, and transfer various categories of data, strictly governed by applicable data protection regulations:

Identity & Business Data: Legal name, business entity details, job titles, and authorized representative information.
Contact Data: Verified email addresses, billing addresses, operational locations, and primary/secondary telephone numbers.
Technical & Telemetry Data: IP addresses, cryptographic login tokens, browser fingerprinting, time zone settings, geolocation data, operating system environments, and granular interaction metrics across our platforms.
Financial & Transactional Data: Encrypted payment routing information, historical transaction records, subscription tiers, and billing cycles (processed via PCI-DSS compliant third-party gateways).
Communications & CRM Data: Lead information, client interaction logs, automated SMS/email campaign data, call recordings (where legally permissible and explicitly consented), and communication metadata generated through our systems.

3. Strict Utilization of Personal Data

We process your data exclusively under lawful bases. We mandate the use of your information under the following strict circumstances:

Contractual Necessity: To execute the Service Level Agreements (SLAs), provision your dashboard, and deliver the specific managed services and CRM capabilities you have subscribed to.
Legitimate Business Interests: For comprehensive network security, fraud prevention, service optimization, and predictive analytics to enhance platform stability without overriding your fundamental rights.
Legal Compliance: To adhere to binding regulatory requirements, tax obligations, and lawful intercepts or subpoenas from recognized judicial authorities.

4. Third-Party Disclosures & Sub-Processors

We do not sell your data. We may share your information strictly with vetted third-party sub-processors (e.g., cloud hosting providers, telecommunication gateways for SMS/Voice, and payment processors) bound by stringent Data Processing Agreements (DPAs) that mandate security standards equal to or exceeding our own. No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

5. Enterprise-Grade Data Security

We implement robust, industry-standard cryptographic protocols, including AES-256 encryption at rest and TLS 1.3 in transit. We enforce strict Role-Based Access Control (RBAC), multi-factor authentication (MFA) for all internal administrative access, and continuous intrusion detection systems to prevent unauthorized access, alteration, or exfiltration of your data.

6. Data Retention & Your Legal Rights

We retain your data only for the duration necessary to fulfill the purposes outlined, or as mandated by statutory retention periods. Under applicable laws (such as GDPR or CCPA, where applicable), you possess the right to request access, rectification, erasure, or portability of your data, and the right to object to specific processing activities.

7. Contact & Data Protection Officer

For formal privacy inquiries, data subject access requests, or to contact our designated Privacy Team, please submit your request through your client portal, email us at support@seconddesk.com, or call us at 469-966-2797.