Privacy Policy

The data controller is 123 OUTSOURCED, LLC, 17350 State Hwy 249, Suite 220 #24587, Houston, TX 77064, USA. EU/UK representative requests can be sent to privacy@123outsourced.com.

• Account data: name, email, company, role, billing address.
• Communications: messages you send us via email, chat, or our portal.
• Operational data: information shared so we can perform services on your behalf (orders, customer tickets, supplier data, etc.).
• Usage data: IP address, browser, device, pages viewed, timestamps.
• Cookies: see our Cookie Policy.

• Performance of contract — to deliver agreed services.
• Legitimate interests — to improve, secure, and market our services proportionately.
• Legal obligation — tax, accounting, anti-fraud, KYB.
• Consent — for non-essential cookies and direct marketing where required.

We engage carefully vetted sub-processors to operate our infrastructure. A current list is available on request and includes: Cloudflare (hosting), Supabase (database), Stripe (payments), Postmark (transactional email), and Sentry (error monitoring). Each is bound by a Data Processing Agreement and offers GDPR-compliant safeguards including Standard Contractual Clauses where applicable.

We are based in the United States and process data in the US. Where data of EU/UK residents is transferred to the US, we rely on Standard Contractual Clauses and the EU-US Data Privacy Framework where the importer is certified.

We keep personal data only as long as necessary for the purposes for which it was collected, plus the period required by tax and accounting law (typically up to 7 years for financial records). Operational client data is deleted within 90 days of contract termination unless retention is required by law.

Subject to applicable law, you have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing. California residents have additional CCPA/CPRA rights. To exercise any right, email privacy@123outsourced.com or use the tracked form below. We respond within 30 days.

We protect data with encryption in transit (TLS 1.2+) and at rest, role-based access controls, mandatory MFA on internal systems, audit logging, vendor reviews, and an incident-response policy. We notify affected clients without undue delay if a breach occurs.

Our services are not directed at individuals under 16. We do not knowingly collect data from children.

If you believe we have not handled your data correctly, you may complain to your local supervisory authority. EU residents: your national Data Protection Authority. UK residents: the Information Commissioner's Office (ICO).

Privacy enquiries: privacy@123outsourced.com.