Privacy Policy

HytndSec ("we," "us," or "our") is a Canadian cybersecurity services provider based in Ottawa, Ontario, serving clients across Canada. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit hytndsec.ca (the "Site"), book a consultation, or engage us for services. We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

1. Information We Collect

We collect information in the following ways:

• Information you provide directly — name, work email, company name, phone number (if given), and the details of your inquiry, when you fill out our contact form or book a risk assessment.
• Booking information — when you schedule a consultation through Microsoft Bookings, Microsoft processes your name, email, and selected time slot under its own privacy terms in addition to ours.
• Automatically collected information — IP address, browser type, device information, pages visited, and referral source, collected via standard web analytics if enabled on the Site.
• Client engagement information — if you become a client, we may collect additional business and technical information necessary to deliver security services, governed separately by our client services agreement.

2. How We Use Your Information

We use personal information to:

• Respond to inquiries and schedule requested consultations
• Provide, maintain, and improve our cybersecurity services
• Send administrative communications related to a booking or engagement
• Understand how visitors use the Site so we can improve it
• Meet legal, regulatory, and contractual obligations

We do not sell personal information, and we do not use client engagement data for marketing without separate, explicit consent.

3. How We Share Your Information

We disclose personal information only in the following circumstances:

• Service providers — third parties that support our operations, such as Microsoft (booking and calendar), our website host, and email providers, each bound by their own privacy and security terms
• Legal requirements — where disclosure is required by law, court order, or to protect the rights, safety, or property of HytndSec or others
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to continued protection of personal information

We never share client security data, incident details, or engagement information with third parties for marketing purposes.

4. Cookies & Tracking

The Site may use cookies or similar technologies to understand visitor behaviour and improve performance. You can disable cookies through your browser settings; doing so may limit some Site functionality.

5. Data Retention

We retain personal information only as long as necessary to fulfill the purposes described in this policy, meet legal and contractual obligations, or resolve disputes. Client engagement records are retained in line with our professional and insurance requirements, typically [INSERT RETENTION PERIOD].

6. Security Safeguards

As a cybersecurity firm, we hold our own data practices to the same standard we build for clients: administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including access controls, encryption where applicable, and monitored infrastructure. No system is completely secure, and we cannot guarantee absolute security of information transmitted to us.

7. Your Rights Under PIPEDA

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Withdraw consent for our collection or use of your information, subject to legal or contractual restrictions
• Ask questions about how your information is handled

To exercise any of these rights, contact us at [email protected].

8. Third-Party Links & Services

Our Site may link to or integrate with third-party services, including Microsoft Bookings. These third parties operate under their own privacy policies, which we encourage you to review.

9. Children's Privacy

Our services and Site are directed at businesses and are not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Effective date" above reflects the most recent revision. Material changes will be posted on this page.

11. Contact Us

Questions about this Privacy Policy or our data practices can be directed to:

HytndSec — Phone: (343) 350-0024 — Email: [email protected] — Based in Ottawa, ON. Providing services Canada wide.