Privacy Policy

Last Updated: May 2026

At CanadaSecure (canadasecure.ca), we are committed to maintaining the accuracy, confidentiality, and security of your personal and business information. This Privacy Policy outlines how we collect, use, disclose, and safeguard the information you provide when using our website and cybersecurity assessment services, in strict compliance with the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Collection of Information

We collect only the minimal amount of information necessary to deliver our services, respond to inquiries, and verify your security posture. This includes:

• Contact Information: Name, business email address, corporate telephone number, and physical office location (Province/City).
• Business Details: Business name, domain URL, and details regarding your primary security concern or infrastructure.
• Automated Data: We utilize Plausible Analytics to monitor general website traffic trends. Plausible is a privacy-first analytics provider that does not use cookies, collect personal data, or track IP addresses.

2. Use of Information

The information collected is used solely for the following identified purposes:

• To schedule, coordinate, and deliver your requested cybersecurity baseline reviews and diagnostics.
• To contact you regarding your assessment findings and coordinate remediation engineering support.
• To issue and manage dated CanadaSecure Assessment Badges upon qualification.
• To prevent fraudulent or abusive form submissions using technical rate limits.

3. Data Retention and Deletion

We retain your personal and business contact details only as long as necessary to fulfill the identified purposes or as required by applicable regulations. Inactive lead inquiry data is permanently purged from our secure systems within twelve (12) months. Active clients' diagnostic files are retained securely in encrypted storage for the duration of the service contract to facilitate ongoing security reviews and follow-up posture checks. You may request the immediate deletion of your records at any time by contacting us directly.

4. Third-Party Processors

We never sell, trade, or rent your data. To operate our secure assessment and lead routing services, we transfer limited information to the following trusted, PIPEDA-compliant third-party processors:

• Mailgun Technologies Inc. — Used to process and securely route all contact form submissions and email communications.
• Vercel Inc. — Used as our primary hosting platform for serverless endpoints and web static assets, operating under strict HTTPS parameters.

5. Access and Correction (PIPEDA Rights)

Under PIPEDA, you possess the right to access and challenge the accuracy and completeness of the personal information we hold about you. If you wish to review, update, correct, or request the deletion of your personal details, please submit an explicit request to our designated Privacy team. We will respond to all requests within thirty (30) days as legally required.

6. Contact Information

For all privacy inquiries, challenges, or data subject access requests, please contact us at:
Email: privacy@canadasecure.ca