Privacy Policy
Effective date: September 1, 2026
PI Sec Audit respects your privacy and is committed to protecting the personal information entrusted to us. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit our website, contact us, register for training, or use our services.
We handle personal information in accordance with applicable Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA), where applicable.
1. Who We Are
PI Sec Audit provides cybersecurity training, cybersecurity audit services, IT consulting, and related educational resources.
Website: www.pisec.ca
Privacy contact: [Name or title]
Email: [Privacy contact email address]
Mailing address: [Business mailing address]
The person identified above is responsible for addressing privacy questions, requests, and complaints concerning our handling of personal information.
2. Personal Information We Collect
Depending on how you interact with PI Sec Audit, we may collect the following categories of personal information:
- Contact information: Your name, email address, telephone number, and any other contact information you choose to provide.
- Enquiries and communications: Information you provide when contacting us, requesting a consultation, submitting a question, or completing a website form.
- Student information: Registration details, course enrolments, learning progress, course completion records, and related communications, where applicable.
- Transaction information: Records of purchases, payments, refunds, and related transactions, where applicable. Payment card details may be handled directly by our payment service providers rather than stored by PI Sec Audit.
- Website usage information: Technical information such as IP addresses, browser type, device information, pages visited, referring pages, and approximate visit times, where collected through server logs, analytics, or similar technologies.
- Other information: Information you voluntarily provide when requesting services, providing feedback, or communicating with us.
We seek to collect only personal information that is reasonably necessary for the identified purposes.
3. How We Collect Information
We may collect personal information:
- Directly from you through website forms and email, and during meetings.
- When you register for a course or request our services.
- When you agree that we should invoice your employer for the services provided to you.
- When you communicate with us or provide feedback.
- Automatically through website server logs, cookies, or analytics technologies, where these are used.
- From service providers involved in delivering services you have requested, where appropriate and permitted by law.
4. Why We Use Personal Information
We use personal information for specific purposes, including:
- Responding to questions and requests for information.
- Scheduling consultations and meetings.
- Registering students and administering courses, allowing enrolment, providing course access, and maintaining appropriate records (such as CPE hours).
- Processing payments, refunds, and related transactions.
- Invoicing your employer for the services provided to you.
- Communicating about services you have requested.
- Maintaining website security, preventing abuse, and troubleshooting technical problems.
- Understanding website performance and improving our services, where appropriate.
- Meeting applicable legal, regulatory, accounting, and recordkeeping obligations.
- At a future date, we may communicate with you through emails to describe updates and new courses.
We will not use personal information for a new purpose that requires additional consent without obtaining the consent required by applicable law.
5. Consent
We obtain consent for the collection, use, and disclosure of personal information as required by applicable law. The form of consent depends on the nature and sensitivity of the information and the circumstances of its collection.
Before collecting personal information, we aim to explain why it is needed and how it will be used.
Where consent is required, you may withdraw it subject to legal or contractual restrictions and reasonable notice. Withdrawing consent may affect our ability to provide certain services.
Withdrawing consent does not prevent us from retaining or using information where permitted or required by law.
6. Email Communications
We use email to respond to enquiries, confirm registrations, provide course information, communicate about purchases, and deliver other services you have requested.
We do not currently operate a promotional email marketing program. If we introduce newsletters or other promotional email communications in the future, we will comply with applicable legal requirements, including obtaining consent where required by Canada's Anti-Spam Legislation (CASL).
Where required by law, promotional emails will identify the sender, provide appropriate contact information, and include a functioning unsubscribe mechanism.
You may continue to receive essential communications relating to a course, transaction, or service you have requested, even if you unsubscribe from promotional communications, where those service communications are otherwise permitted by law.
7. Disclosure to Service Providers
We use third-party service providers to help operate our website and deliver our services. These providers may process personal information on our behalf for authorized purposes.
Depending on the service involved, these providers may include:
- Website hosting providers that store and deliver website content and associated data.
- Google Analytics, which helps us understand website traffic and visitor interactions.
- Stripe and PayPal, which process payments and associated transaction information.
- Providers supporting student registration, course administration, and electronic communications.
Payment information is processed according to the applicable payment provider's practices. We do not intentionally store full payment card numbers or card security codes on our website.
We do not sell personal information as part of our ordinary business practices.
We may also disclose personal information when required or authorized by law, or when otherwise permitted under applicable privacy legislation.
8. Service Providers and Processing Outside Canada
Some service providers may process or store personal information outside Canada, depending on the services we use and their operating arrangements.
Where personal information is processed in another jurisdiction, it may be subject to the laws of that jurisdiction and may be accessible to its courts, law enforcement agencies, or other authorities in accordance with applicable law.
We remain responsible for personal information under our control and take appropriate steps to ensure that service providers protect it in a manner consistent with our legal obligations.
9. Cookies and Google Analytics
We use Google Analytics to understand how visitors use our website and to help improve its content and functionality.
Google Analytics may collect information such as pages visited, approximate visit times, referring websites, browser and device information, and IP addresses or related technical identifiers, depending on the configuration of the service.
Google Analytics may use cookies or similar technologies to collect and process information about website usage. Information may be processed by Google in accordance with its applicable terms and privacy practices.
You can learn more about Google's privacy practices through Google's Privacy Policy.
You can manage cookies through your browser settings. Blocking cookies may affect certain website functions.
We configure and use analytics technologies in accordance with applicable legal requirements. Where consent is required, we will obtain it before engaging in the relevant collection or tracking.
10. Safeguarding Personal Information
We use administrative, technical, and physical safeguards appropriate to the sensitivity of the personal information we hold.
Depending on the information and services involved, safeguards may include access restrictions, authentication controls, secure communications, appropriate service-provider arrangements, and secure disposal practices.
Access to personal information is limited to individuals and service providers who require it for authorized purposes.
No method of transmission over the Internet or electronic storage can be guaranteed to be completely secure. We work to protect personal information but cannot guarantee absolute security.
11. Retention and Disposal
We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, meet applicable legal obligations, resolve disputes, and maintain appropriate business records.
Retention periods depend on the type of information and the reason it is held. When information is no longer required, we take appropriate steps to securely destroy it, delete it, or render it anonymous, subject to applicable legal requirements.
12. Access to and Correction of Personal Information
Subject to applicable legal exceptions, you may request access to personal information we hold about you and information about how it has been used or disclosed.
You may also request correction of information that is inaccurate or incomplete.
To submit a request, contact our privacy representative using the contact information in Section 1.
We may need to verify your identity before responding. We will respond within the time required by applicable law and explain any lawful reason for refusing a request.
13. Privacy Questions, Requests, and Complaints
If you have a question or concern about how PI Sec Audit handles your personal information, please contact our privacy representative using the contact information in Section 1.
We will review privacy concerns, investigate complaints as appropriate, and take corrective action where warranted.
If your concern remains unresolved, you may contact the Office of the Privacy Commissioner of Canada:
Office of the Privacy Commissioner of Canada
The appropriate provincial or territorial privacy commissioner may also be relevant, depending on the circumstances and the law that applies.
14. Children's Privacy
Our services are intended for the audiences identified in the relevant course or service descriptions. We do not knowingly collect children's personal information in circumstances where doing so would violate applicable law.
15. Third-Party Websites
Our website may contain links to external websites or services. Those websites operate under their own privacy practices, which we do not control.
We encourage you to review the privacy policies of external websites before providing personal information to them.
16. Changes to This Policy
We may update this Privacy Policy to reflect changes in our services, information-handling practices, or applicable legal requirements.
The current version will be published on this page with its effective date. Where required, we will provide notice or obtain consent for material changes in our collection, use, or disclosure of personal information.
17. Contact Us
For questions, access requests, correction requests, or complaints concerning this Privacy Policy, contact:
PI Sec Audit
Privacy representative: Phil Irving
Email: phil@pisec.ca
Mailing address: PI Sec Audit, PO Box 1347, Kemptville, ON Canada K0G1J0
Last updated: September 1, 2026