Privacy Policy

1. Introduction

CyberLeda ("we," "us," or "our") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us.

As a managed IT and cybersecurity service provider operating in Ontario, Canada, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and all applicable Canadian privacy laws.

2. Information We Collect

2.1 Personal Information You Provide

We collect information you voluntarily provide to us, including:

• Contact Information: Name, email address, phone number, company name, and business address
• Business Information: Number of employees, current IT setup, cybersecurity concerns, and service interests
• Communication Records: Correspondence via email, phone, contact forms, or live chat
• Service Information: When you become a client, we collect information necessary to provide IT and cybersecurity services (network configurations, system details, user accounts)

2.2 Information Collected Automatically

When you visit our website, we automatically collect:

• Usage Data: Pages visited, time spent, links clicked, and browsing behavior
• Device Information: IP address, browser type, operating system, device identifiers
• Cookies: Small data files stored on your device (see Section 8 for details)

3. How We Use Your Information

We use your personal information for the following purposes:

3.1 To Provide Services

• Respond to inquiries and assessment requests
• Deliver managed IT and cybersecurity services
• Provide technical support and troubleshooting
• Monitor and secure your IT infrastructure
• Manage user accounts and access controls

3.2 Business Operations

• Process payments and maintain billing records
• Send service updates, security alerts, and important notices
• Conduct internal analytics to improve our services
• Comply with legal obligations and regulatory requirements

3.3 Marketing (With Your Consent)

• Send newsletters, cybersecurity tips, and promotional offers
• Provide information about new services or features
• Invite you to events, webinars, or community activities

You can opt-out of marketing communications at any time.

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We only share your information in the following circumstances:

4.1 Service Providers

We may share information with trusted third-party providers who assist us in operating our business:

• Technology Partners: SentinelOne, Blackpoint Cyber, Acronis, Microsoft (for security and backup services)
• Communication Tools: Email service providers, live chat platforms
• Business Tools: CRM systems, payment processors, analytics platforms

All service providers are contractually obligated to protect your information and use it only for the specified purposes.

4.2 Legal Requirements

We may disclose information when required by law, including:

• Responding to court orders, subpoenas, or legal processes
• Cooperating with law enforcement or regulatory investigations
• Protecting our legal rights, property, or safety
• Preventing fraud, security breaches, or illegal activities

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

5. Data Security

As a cybersecurity-first MSP, we take data protection seriously and implement industry-leading security measures:

• Encryption: Data encrypted in transit (TLS/SSL) and at rest (AES-256)
• Access Controls: Multi-factor authentication (MFA) and role-based access
• Monitoring: 24/7 SOC monitoring and threat detection
• Physical Security: Secure data centers with restricted access
• Regular Audits: Security assessments, penetration testing, and compliance reviews
• Employee Training: Regular cybersecurity awareness training for all staff

While we use reasonable safeguards, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your information.

6. Your Privacy Rights (PIPEDA)

Under PIPEDA and Canadian privacy laws, you have the following rights:

6.1 Right to Access

You can request access to the personal information we hold about you.

6.2 Right to Correction

You can request corrections to inaccurate or incomplete information.

6.3 Right to Withdrawal of Consent

You can withdraw your consent for us to use your personal information for marketing or other purposes (subject to legal or contractual restrictions).

6.4 Right to Portability

You can request your data in a commonly used format to transfer to another provider.

6.5 Right to Lodge a Complaint

You can file a complaint with the Office of the Privacy Commissioner of Canada if you believe we've violated your privacy rights.

7. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

• Active Clients: We retain service-related data for the duration of our business relationship plus 7 years for legal and tax purposes
• Prospective Clients: Inquiry data retained for 2 years or until you request deletion
• Marketing Contacts: Retained until you opt-out or request deletion

When information is no longer needed, we securely delete or anonymize it.

8. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your experience and analyze site usage.

8.1 Types of Cookies We Use

• Essential Cookies: Required for website functionality (login, forms, security)
• Analytics Cookies: Help us understand how visitors use our site (Google Analytics)
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Used to show relevant ads (only with your consent)

8.2 Managing Cookies

You can control cookies through:

• Our cookie consent banner (accept or decline)
• Your browser settings (most browsers allow you to block or delete cookies)
• Opt-out tools (e.g., Google Analytics opt-out browser add-on)

Note: Disabling essential cookies may affect website functionality.

9. Third-Party Links

Our website may contain links to third-party websites, services, or resources. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

10. Children's Privacy

Our services are intended for businesses and are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we learn we have inadvertently collected information from a child, we will delete it promptly.

11. International Data Transfers

Your information is primarily stored and processed in Canada. Some service providers may store data in the United States or other jurisdictions with different privacy laws. When transferring data internationally, we ensure appropriate safeguards are in place through contractual agreements and compliance with applicable laws.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, services, or legal requirements. When we make changes:

• We will update the "Last Updated" date at the top
• Significant changes will be communicated via email or website notice
• Your continued use of our services constitutes acceptance of the updated policy

We encourage you to review this policy regularly to stay informed about how we protect your information.

13. Contact Us