Privacy Policy

Effective date: January 2, 2026  ·  Last updated: January 2, 2026

1. Who this policy covers

This Privacy Policy explains how Summit Services Corporation (“Summit USA,” “we,” “us,” or “our”) handles information collected through www.summitusa.com, its subdomains and microsites (including the GlobeWire and ACH Processing pages), our forms, our email and phone communications, and our text messaging program.

It does not cover information we process on behalf of a client under a signed services agreement — see Section 7 for how that data is treated.

By using this website or opting in to receive messages from us, you agree to the practices described here. If you do not agree, please do not use the site or submit information through it.

2. Information we collect

Information you give us directly

When you fill out a contact form, request a demo, subscribe to updates, or call or email us, we may collect:

• Your name, job title, and company name
• Your business email address
• Your phone number, including mobile numbers you provide for calls or text messages
• The service or platform you’re interested in
• Whatever you choose to tell us in the message field
• Your consent preferences — including whether you opted in to text messages, and when

Information collected automatically

Like most websites, ours records limited technical information when you visit:

• IP address (including any X-Forwarded-For value passed by a proxy), which we log with form submissions to detect and block abuse
• Browser type, device type, operating system, and screen size
• Pages viewed, referring page, and time of visit
• Cookies and similar technologies as described in Section 6

Information from spam and fraud prevention tools

Our forms are protected by Google reCAPTCHA v3 and by hidden “honeypot” fields. reCAPTCHA collects hardware and software information and behavioral data from your device and sends it to Google for analysis. Your use of reCAPTCHA is subject to the Google Privacy Policy and Terms of Service.

3. SMS & text messaging consent

We may send text (SMS/MMS) messages to mobile numbers — but only to people who have asked us to.

What we do with mobile information

Mobile numbers you give us are used to send the categories of messages described in the SMS Terms in our Terms & Conditions — consultation and appointment confirmations, support and ticket updates, scheduled maintenance and outage notices, security and account alerts, and replies to messages you send us. We also retain a record of your opt-in (the date, time, method, and the consent language shown to you) because carriers and regulators may require us to prove that consent existed.

Mobile opt-in data is never shared or sold

Message rates and frequency

Message and data rates may apply. Message frequency varies. Reply HELP to any message for assistance, or contact us at info@summitusa.com or 1-206-841-0601 x101. Carriers are not liable for delayed or undelivered messages. Full program terms are in our Terms & Conditions.

4. How we use information

We use the information described above to:

• Respond to your inquiry, schedule a consultation, and follow up on it
• Provide, support, secure, and bill for the services you’ve engaged us for
• Send service, security, maintenance, and account notices — by email, phone, or (if you opted in) SMS
• Send occasional business updates or educational material, where permitted and where you can unsubscribe at any time
• Detect, investigate, and prevent spam, fraud, and abuse of our site and systems
• Understand which pages are useful so we can improve the site
• Meet our legal, regulatory, contractual, and recordkeeping obligations

We do not sell personal information, and we do not use it to build advertising profiles or share it with advertising networks for cross-context behavioral advertising.

5. How we share information

We share personal information only in these situations — and in every case, subject to the mobile opt-in carve-out in Section 3:

• Service providers. Vendors who host our site and infrastructure, deliver our email and text messages, or provide security and analytics tooling — bound by contract to use the data only to perform those services for us.
• Our own team. Employees and contractors who need the information to respond to you or deliver services, under confidentiality obligations.
• Processing and compliance partners. For our payments and money-services platforms, a limited set of information may be shared with our ACH processing partner or our independent regulatory review partner strictly to deliver a service you’ve requested.
• Legal and safety. When required by law, subpoena, regulator, or court order; or when necessary to protect the rights, property, or safety of Summit USA, our clients, or the public.
• Business transfers. If we’re involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction. We’ll notify you before your information becomes subject to a materially different privacy policy.

6. Cookies & analytics

We use a small number of cookies and similar technologies:

• Strictly necessary — a session cookie that keeps your session consistent while you move between pages and submit forms. The site can’t function properly without it.
• Security — Google reCAPTCHA sets cookies to distinguish humans from bots on our forms.
• Analytics — where enabled, aggregate measurement of page views and referral sources. We configure analytics to avoid collecting more than we need.

Most browsers let you refuse or delete cookies in their settings. Blocking strictly necessary cookies may break parts of the site. Our site does not currently respond to browser “Do Not Track” signals, because there is still no common standard for how to interpret them.

7. Client data we handle as a service provider

As an IT services provider, we routinely have access to systems and data belonging to our clients — which can include their customers’ personal information, protected health information (PHI), and financial data. When we handle that data, we act as a service provider / business associate on the client’s instructions, not as the owner of the data.

• That processing is governed by the client’s services agreement and, where applicable, a HIPAA Business Associate Agreement — not by this Privacy Policy.
• We access client data only as needed to deliver, secure, support, or troubleshoot the services we’ve been engaged to provide.
• If you are an end customer of one of our clients and want to know how your information is used, contact that organization directly. We’ll refer such requests to them.

8. How long we keep information

We keep personal information only as long as we have a reason to. Inquiry and form submissions are retained while we’re in contact and for a reasonable follow-up period afterward. Client records are retained for the life of the engagement and for as long as our legal, tax, and contractual obligations require. Records of SMS opt-in and opt-out are retained for as long as we operate the messaging program and for a period afterward, because we may be required to demonstrate that consent existed. Server and security logs are kept on a short rolling basis.

9. How we protect information

Our systems and the client environments we manage are hosted in SOC 2 compliant TierPoint data centers. We apply the same security practices we sell: access controls and least-privilege permissions, multi-factor authentication, encryption in transit, network segmentation, monitoring, patching, and backups.

That said, no method of transmission or storage is perfectly secure, and we can’t guarantee absolute security. Please don’t send passwords, account numbers, PHI, or other sensitive data through our public web forms or by unencrypted email — call us and we’ll set up a secure channel.

10. Your choices & rights

• Text messages. Reply STOP to any message to opt out. You’ll get one confirmation message, and then we’ll stop. Reply START to opt back in.
• Email. Use the unsubscribe link in any non-transactional email, or email us and we’ll remove you.
• Access, correction, and deletion. Ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. We’ll respond within the time frame the law allows, and we’ll tell you if a legal or contractual obligation requires us to keep something.
• State privacy rights. Depending on where you live — including under the Washington My Health My Data Act, and comparable laws in California, Colorado, Virginia, and elsewhere — you may have additional rights, such as the right to opt out of the sale or sharing of personal information or targeted advertising. We do not sell or share personal information for those purposes. We will not discriminate against you for exercising any privacy right.

To exercise any of these, email info@summitusa.com. We may need to verify your identity before we act on a request.

11. Children’s privacy

This is a business-to-business website. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has given us information, contact us and we’ll delete it.

12. Changes to this policy

We may update this policy as our services, our tooling, or the law changes. When we do, we’ll revise the effective date at the top of this page. Material changes — particularly any change to how we handle mobile numbers or SMS consent — will be posted here before they take effect. Continuing to use the site after an update means you accept the revised policy.

13. How to reach us

Questions about this policy, or about the information we hold on you:

See also our Terms & Conditions, which include the full terms of our SMS messaging program.