Privacy Policy

Cybertivité respects your privacy. This policy explains what personal information we collect through this website, why we collect it, and the choices and rights you have. It is written to comply with Quebec’s Loi sur la protection des renseignements personnels dans le secteur privé (Law 25) and Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Who We Are

Cybertivité is a cybersecurity and organizational resilience advisory firm based in Montréal, Québec. The person in charge of the protection of personal information (our Privacy Officer) is Serge El-Hage, who can be reached at privacy@cybertvt.ca.

2. What We Collect

We only collect the information you choose to send us:

• Proposal requests and contact forms: your name, work email, company, role, the services you are interested in, your desired timeline and your message.
• Emails and phone calls: the information you share when you contact us directly.

Our website host also keeps standard technical logs (such as IP address, browser type and the date and time of visits) to operate and secure the site. We do not use these logs to identify you or to build a profile of your activity.

3. Why We Use It

• To answer your request and prepare a proposal.
• To manage our relationship with you if you become a client.
• To meet our legal, tax and accounting obligations.

We do not send marketing emails, and we never sell or rent your personal information. We may disclose information only when required by law, for example in response to a court order.

We use trusted service providers to host this website and our email, some of which may store information outside Quebec.

4. Consent

By sending us a request, you consent to us using your information for the purposes above. You can withdraw your consent at any time by writing to privacy@cybertvt.ca.

5. How Long We Keep It

• Requests that do not lead to an engagement are deleted after 24 months.
• Client records are kept for as long as the relationship lasts and as required by tax and accounting laws.

When information is no longer needed, it is securely deleted or anonymized.

6. Cookies and Browser Storage

This website does not use advertising or tracking cookies. We use Cloudflare’s cookie-free web analytics to count page visits; it does not identify you.

When you add services to a proposal request, your selection is saved in your browser’s local storage so it stays in place as you move between pages. This information stays on your device, is not sent to us until you submit your request, and is cleared when you submit it or after 30 days.

7. How We Protect It

We protect personal information with administrative, technical and physical safeguards appropriate to its sensitivity, including access restricted to those who need it, multi-factor authentication on our accounts, and encryption in transit. No method of transmission over the internet is completely secure, but we work to keep your information safe.

8. Information Shared During Client Engagements

Information we receive while delivering services, such as system details, internal documents or incident records, is not covered by this website policy. It is governed by the confidentiality and data protection terms of each engagement agreement.

9. Your Rights

You can ask us to:

• access the personal information we hold about you;
• correct information that is inaccurate or incomplete;
• withdraw your consent or delete your information, where applicable;
• stop disseminating your information or de-index any link to it, where applicable;
• receive your information in a structured, commonly used technological format.

Send your request to privacy@cybertvt.ca. We will respond within 30 days.

10. Questions and Complaints

If you have a concern about how we handle your information, please contact our Privacy Officer first at privacy@cybertvt.ca. If you are not satisfied with our response, you may file a complaint with the Commission d’accès à l’information du Québec or the Office of the Privacy Commissioner of Canada.

11. Changes to This Policy

We may update this policy when our practices or legal obligations change. The date at the top of this page shows when it was last updated.