Privacy policy

This website is operated by ITACC Inc. (“ITACC”, “we”), based in Ontario, Canada. We handle personal information in line with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA). This policy covers this website. Client projects are governed by the agreements we sign with each client, and our Rowlock product has its own policy on its website.

1. What we collect

• When you contact us: your name, email, organisation, organisation type, what you’re interested in, your message and, optionally, your role.
• Technical data: our hosting provider processes standard request data such as IP address and browser type to deliver the site and protect it from abuse. We use your IP address briefly to limit repeated form submissions.
• Cookies: this site does not set tracking or advertising cookies and does not use analytics.
• Spam protection: the contact page uses Google reCAPTCHA, which collects hardware and software information (such as device and browser data) and sends it to Google to tell people from bots. Google’s Privacy Policy and Terms apply.

2. Why we use it

• To reply to your enquiry and discuss a possible engagement.
• To protect the website and our forms from spam and abuse.
• To meet legal obligations.

We do not sell personal information. We won’t add you to marketing emails without your consent, as Canada’s anti-spam law (CASL) requires.

3. Who we share it with

We use trusted service providers to host this website and to deliver email. They process personal information only on our behalf and under their own security and privacy commitments. Some of them store or process information outside Canada, including in the United States, where it may be accessible to authorities under local law. A list of our current providers is available on request. We may also disclose information when the law requires it.

4. How long we keep it

Enquiries that don’t lead to an engagement are deleted within two years, or sooner if you ask. If you become a client, related records are kept as long as our agreement and Canadian law require.

5. How we protect it

We limit access to authorised staff, encrypt data in transit, and use security headers and rate limits on this website. No system is perfectly secure; if a breach creates a real risk of significant harm, we will notify you and the Office of the Privacy Commissioner of Canada as PIPEDA requires.

6. Your rights

You can ask to access, correct or delete your personal information, or withdraw consent, through our contact form (choose “Privacy or data request”). We respond within 30 days. If you’re not satisfied, you can contact the Office of the Privacy Commissioner of Canada.

7. Changes

We will post any changes on this page with a new date.

8. Contact

Privacy questions: ITACC Inc., Ontario, Canada · contact form (choose “Privacy or data request”)