Privacy Policy
How R3 Consulting & Management (R3COMM) collects, uses, stores and protects personal data and customer information.
Last updated: October 20, 2026
Introduction
R3 Consulting & Management, doing business as R3COMM (“we”, “our” or “us”), is a Managed Service Provider (MSP) and Software-as-a-Service (SaaS) provider operated as a sole proprietorship in San Juan, Puerto Rico. We provide professional IT services including:
This policy describes how we collect, use, store and protect information through our website (r3comm.com), our client portal, and the services we deliver.
Scope & roles
This policy applies to:
For most services our customers are the data controllers and R3COMM acts as a data processor / service provider. We process customer data only under documented instructions and contractual agreements.
Information we collect
What we collect depends on how you interact with us. The categories below cover website visitors, customer contacts and the technical data involved in delivering managed services.
A. Business & account information
B. Managed service data
When delivering RMM, backup, Microsoft 365, security monitoring or voice services, we may process:
RMM & security monitoring
Backup services
Backup contents remain customer-owned. We do not access backed-up data unless explicitly authorized for recovery or troubleshooting.
Microsoft 365 management
We do not read customer emails or documents except when explicitly authorized for support or compliance tasks.
Voice / PBX services
Call content or recordings are processed only if enabled by the customer and retained per customer policy or regulation.
C. SaaS platform data
D. Website & technical data
How we use information
We process data strictly for:
We do not sell personal data and we do not use customer data for advertising.
Privileged access & support controls
As part of MSP service delivery, authorized staff may have privileged or administrative access to customer systems. Safeguards include:
Cookies & tracking
The public pages on r3comm.com set no cookies of their own and load no analytics, advertising or tracking scripts. Our website host keeps standard access logs (IP address, browser type, pages requested, timestamps) for security and troubleshooting, retained for a limited period.
The one exception is our contact and SMS form, which is protected by Google reCAPTCHA to block automated spam. When you load that page, Google may collect device and usage information and set cookies to tell people from bots. That use is covered by the Google Privacy Policy and Terms of Service. No other page on r3comm.com loads reCAPTCHA.
Our client portal (odoo.r3comm.com) uses session cookies that are strictly necessary to keep you signed in and to remember your language preference. It does not use advertising cookies.
SMS & WhatsApp messaging
If you opt in to text or WhatsApp messages from us, we keep your phone number and the message history needed to provide appointment confirmations, service and ticket notifications and support replies. Messages sent over WhatsApp are also processed by Meta Platforms under WhatsApp’s own terms. You can stop at any time by replying STOP; reply HELP for assistance. Full program terms are in our Mobile Messaging Terms & Conditions.
Text messages are optional. When you send a request through our contact form, we keep your name, mobile number, message and the date and time so we can reply. If you also tick the SMS box, we keep a record of your consent as proof required by wireless carriers: your name, mobile number, the date and time, your IP address, your browser type and the exact consent wording you agreed to. These records are stored in our website’s private database with restricted access and are not used for any other purpose.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.
Data sharing & subprocessors
We may use vetted third-party subprocessors, including:
All subprocessors are bound by confidentiality, data protection and security obligations. We do not sell or rent data to third parties. Mobile information and SMS opt-in data are never shared (see SMS & WhatsApp messaging).
Data security
We maintain administrative, technical and physical safeguards, including:
No system can be guaranteed 100% secure, but we follow industry best practices to mitigate risk.
Data retention
Retention depends on the service type, customer instructions, contractual obligations and legal or regulatory requirements. Data is securely deleted or returned upon service termination, per agreement.
Privacy rights
Puerto Rico & U.S. residents
You may request access to your personal information, correction of inaccurate data, and deletion where legally permissible.
EU residents (GDPR)
You may also request data portability, restriction of or objection to processing, withdrawal of consent, and you may lodge a complaint with a supervisory authority.
Send requests using the contact details below. We respond within ten business days.
Security incidents & breach notification
In the event of a confirmed security incident involving personal data, we follow applicable Puerto Rico and U.S. breach-notification laws, and MSP and SaaS customers are notified according to contractual and regulatory requirements.
Third-party links
Our website may reference third-party sites. We are not responsible for their privacy practices.
Children’s privacy
Our services are intended for business use only and are not directed to children under 13.
Policy updates
We may update this policy periodically. The date at the top shows the current version. Continued use of our services after an update constitutes acceptance.
Contact information
Questions or requests about this policy: