N&H Revenue Systems
Last Updated: October 29, 2026
1. Our Commitment to Data Security
At N&H Revenue Systems (“N&H,” “we,” “our,” or “us”), we understand that businesses trust us to work with information that may be commercially sensitive.
Our approach to data security focuses on protecting confidentiality, limiting unnecessary access, and implementing appropriate safeguards throughout the design, implementation, and operation of revenue and operational systems.
Security considerations are incorporated into our work with CRM platforms, automation workflows, AI tools, integrations, and business processes.
2. Data We May Handle
Depending on the services requested and the permissions granted, information handled during an engagement may include:
- Business contact and customer relationship information.
- Lead records, prospect details, and sales pipeline data.
- Customer inquiries, appointment information, and communication records.
- CRM configurations, workflow settings, and integration data.
- Business process documentation and operational information.
- Performance metrics, reporting data, and conversion analytics.
- Technical information required to configure or troubleshoot systems.
The information processed depends on the project scope and the systems involved.
3. Security Principles
We aim to apply the following principles when designing and implementing business systems.
Access Control
Access to systems and information should be limited to authorized individuals who need it for the relevant task.
Where supported, we encourage role-based permissions, multi-factor authentication, and the use of individual accounts rather than shared credentials.
Data Minimization
We aim to access and process only the information reasonably necessary to perform the agreed work.
Clients should avoid providing unnecessary personal, confidential, or sensitive information.
Secure Data Handling
We encourage the use of secure transfer methods, reputable service providers, appropriate account permissions, and secure configuration practices.
Available safeguards depend on the platforms, hosting arrangements, and project requirements.
System Configuration
We consider security when configuring CRM systems, automation workflows, integrations, and AI-enabled processes. This may include reviewing permissions, limiting unnecessary data transfers, and establishing appropriate approval steps.
Ongoing Maintenance
Where included in the agreed scope, we may assist with troubleshooting, configuration reviews, workflow updates, and improvements to system security.
4. Client Responsibilities
Security is a shared responsibility between N&H, our clients, and the providers operating the underlying technology.
Clients are responsible for:
- Maintaining control of their accounts and authorized users.
- Using strong, unique passwords and multi-factor authentication where available.
- Providing access only to authorized personnel.
- Ensuring they have the legal authority and necessary permissions to share data with us.
- Maintaining appropriate backups and business continuity procedures.
- Reviewing user permissions and removing access when it is no longer required.
- Maintaining valid software licenses and subscriptions.
- Notifying us promptly of suspected unauthorized access involving systems we manage under an active engagement.
Clients should not send passwords, authentication codes, or highly sensitive information through ordinary website contact forms or unsecured email.
5. Third-Party Platforms and Integrations
Our solutions may rely on third-party services, including CRM software, hosting providers, AI platforms, email systems, analytics tools, and automation services.
These providers may process or store information according to their own terms, privacy policies, and security practices.
We aim to consider relevant security and privacy factors when selecting or configuring services within our control. However, we cannot guarantee the security, availability, or performance of systems operated independently by third parties.
Specific providers and data-processing arrangements may be discussed during a client engagement.
6. AI and Automated Systems
AI and automation can improve operational efficiency, but they introduce considerations relating to data access, accuracy, permissions, and unintended actions.
Where applicable to a project, we aim to:
- Use tools appropriate to the agreed business purpose.
- Limit information shared with AI systems to what is reasonably necessary.
- Consider the data-handling terms of relevant AI providers.
- Establish human review or approval for important actions where appropriate.
- Test workflows and integrations before deployment.
- Review automation permissions and potential failure points within the agreed scope.
AI-generated content and automated decisions may contain errors. Clients remain responsible for reviewing outputs and ensuring their use of AI complies with applicable laws and their own obligations.
We do not represent that every AI platform or integration is suitable for every type of confidential or regulated information.
7. Data Storage and Retention
Information may be stored within the systems required to deliver our services, including client-controlled platforms and authorized third-party services.
Retention depends on the nature of the information, the relevant provider, contractual requirements, and applicable law.
Where agreed in writing, we will follow the applicable project requirements for data retention, return, or deletion. Clients remain responsible for reviewing retention settings within accounts they control.
We do not promise that all copies, backups, logs, or records can be deleted immediately from every third-party system.
8. Security Incidents
Although we take reasonable care when handling information, no digital system can be guaranteed to be completely secure.
If we become aware of a security incident affecting information handled by us in connection with an engagement, we will assess the matter and take reasonable steps within our control to investigate, contain, and address it.
Where required by applicable law or a relevant written agreement, we will provide appropriate notifications and cooperation.
Clients should promptly report suspected security issues involving systems or workflows we have implemented so that the matter can be assessed.
9. Confidentiality
We recognize that business operations, sales information, customer records, and internal processes may be confidential.
Information provided during a project will be handled in accordance with applicable contractual confidentiality obligations and our Privacy Policy.
Where a project requires additional protections, the parties may establish a separate confidentiality agreement or data processing agreement before exchanging sensitive information.
10. Compliance and Security Limitations
Security and data protection requirements vary by industry, location, and type of information.
Our services do not automatically make a client’s business or technology environment compliant with a particular law, regulation, or certification standard.
Clients are responsible for identifying their regulatory obligations and obtaining appropriate legal, compliance, or security advice when necessary.
Any specific security controls, certifications, service levels, or compliance commitments must be expressly confirmed rather than assumed.
11. Responsible Disclosure
If you believe you have identified a security vulnerability affecting our website or a system operated by N&H, please contact us at the email address below.
Please provide enough information to help us understand the issue without accessing, modifying, or disclosing another person’s data.
We will review reports and take appropriate action based on the nature and severity of the issue.
12. Updates to This Policy
We may update this Data & Security policy to reflect changes in our services, technology, operational practices, or legal requirements.
The latest version will be published on this page with an updated “Last Updated” date.
13. Contact Us
For questions about data handling, security practices, or reporting a potential security concern, contact:
N&H Revenue Systems
Email: contact@nhrevenuesystems.com
We welcome security-related inquiries from clients and prospective business partners.