Trust & Security at SBITS
This page is maintained by SBITS to answer common security and privacy questions about how we run our business and this website. It is not an independent certification or audit report.
Shared responsibility
Security is a partnership. SBITS is responsible for how we operate our own business systems and deliver our services. Clients remain responsible for the day-to-day security practices inside their own organisations — strong passwords, careful handling of credentials, and following the guidance we provide. Third-party platforms (such as Microsoft 365, Google Workspace and internet providers) are responsible for the security of their own services.
Access & authentication
Access to client systems is limited to SBITS technicians who need it to deliver the services you have engaged us for. We use multi-factor authentication on the accounts we control wherever the underlying platform supports it, and we recommend the same for all client accounts.
Data we collect on this website
This website is a brochure site. We collect the information you choose to send us through the contact and consultation forms (such as your name, email address, phone number and the details of your enquiry) so we can respond to you. We do not sell your information.
Backups & data protection
Backup services are optional add-ons described on our Services page. Where a client has not purchased backup services from SBITS, the client remains responsible for maintaining their own backups. Restore support is provided only for data covered under an active backup plan. Full details are in our Terms & Conditions.
Subprocessors & integrations
To run our business we use mainstream business tools (for example email, calendar, ticketing and accounting software). These providers act as subprocessors for the information you share with us. If you need a current list for a procurement or due-diligence process, please contact us.
Reporting a security concern
If you believe you have found a security issue affecting SBITS or one of our clients, please email Info@smallbizitsolutions.co.nz with details so we can investigate. Please do not include sensitive credentials in your first message.
Privacy requests
If you would like to know what personal information we hold about you, or you would like us to update or delete it, contact us at Info@smallbizitsolutions.co.nz. We will respond within a reasonable time frame.
This page describes our current practices and may be updated from time to time. It does not replace the commitments set out in our Terms & Conditions.