How R3 Consulting & Management (R3COMM) collects, uses, stores and protects personal data and customer information.
Last updated: October 4, 2026
R3 Consulting & Management, doing business as R3COMM ("we", "our" or "us"), is a Managed Service Provider (MSP) and Software-as-a-Service (SaaS) provider operated as a sole proprietorship in San Juan, Puerto Rico. We provide professional IT services including:
This policy describes how we collect, use, store and protect information through our website (r3comm.com), our client portal, and the services we deliver.
This policy applies to:
For most services our customers are the data controllers and R3COMM acts as a data processor / service provider. We process customer data only under documented instructions and contractual agreements.
What we collect depends on how you interact with us. The categories below cover website visitors, customer contacts and the technical data involved in delivering managed services.
When delivering RMM, backup, Microsoft 365, security monitoring or voice services, we may process:
We process data strictly for:
We do not sell personal data and we do not use customer data for advertising.
As part of MSP service delivery, authorized staff may have privileged or administrative access to customer systems. Safeguards include:
The public pages on r3comm.com set no cookies of their own and load no analytics, advertising or tracking scripts. Our web server keeps standard access logs (IP address, browser type, pages requested, timestamps) for security and troubleshooting, retained for a limited period.
The one exception is our contact and SMS form, which is protected by Google reCAPTCHA to block automated spam. When you load that page, Google may collect device and usage information and set cookies to tell people from bots. That use is covered by the Google Privacy Policy and Terms of Service. No other page on r3comm.com loads reCAPTCHA.
Our client portal (odoo.r3comm.com) uses session cookies that are strictly necessary to keep you signed in and to remember your language preference. It does not use advertising cookies.
If you opt in to text or WhatsApp messages from us, we keep your phone number and the message history needed to provide appointment confirmations, service and ticket notifications and support replies. Messages sent over WhatsApp are also processed by Meta Platforms under WhatsApp's own terms. You can stop at any time by replying STOP; reply HELP for assistance. Full program terms are in our Mobile Messaging Terms & Conditions.
Text messages are optional. When you send a request through our contact form, we keep your name, mobile number, message and the date and time so we can reply. If you also tick the SMS box, we keep a record of your consent as proof required by wireless carriers: your name, mobile number, the date and time, your IP address, your browser type and the exact consent wording you agreed to. These records are stored on our own server with restricted access and are not used for any other purpose.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.
We may use vetted third-party subprocessors, including:
All subprocessors are bound by confidentiality, data protection and security obligations. We do not sell or rent data to third parties. Mobile information and SMS opt-in data are never shared (see SMS & WhatsApp messaging).
We maintain administrative, technical and physical safeguards, including:
No system can be guaranteed 100% secure, but we follow industry best practices to mitigate risk.
Retention depends on the service type, customer instructions, contractual obligations and legal or regulatory requirements. Data is securely deleted or returned upon service termination, per agreement.
You may request access to your personal information, correction of inaccurate data, and deletion where legally permissible.
You may also request data portability, restriction of or objection to processing, withdrawal of consent, and you may lodge a complaint with a supervisory authority.
Send requests using the contact details below. We respond within ten business days.
In the event of a confirmed security incident involving personal data, we follow applicable Puerto Rico and U.S. breach-notification laws, and MSP and SaaS customers are notified according to contractual and regulatory requirements.
Our website may reference third-party sites. We are not responsible for their privacy practices.
Our services are intended for business use only and are not directed to children under 13.
We may update this policy periodically. The date at the top shows the current version. Continued use of our services after an update constitutes acceptance.
Questions or requests about this policy: