SW SWOT Consultancy Ltd.

Privacy Notice

Last updated:

1. Personal Information Protection and Electronic Documents Act (PIPEDA)

SWOT Consultancy Ltd. collects, uses, and discloses personal information in accordance with PIPEDA, which applies to private-sector organizations across Canada that collect, use, or disclose personal information during commercial activity. We only collect the information you provide (such as your name, email, company, and evaluation responses) for the purpose of delivering your cybersecurity evaluation results and following up on your request.

2. Provincial privacy laws

Depending on your province, additional protections may apply, including Alberta's Personal Information Protection Act (PIPA), British Columbia's PIPA, and Quebec's Law 25 (Act to modernize legislative provisions respecting the protection of personal information), which introduces enhanced obligations such as privacy impact assessments for high-risk automated processing and data portability rights.

3. Data breach notification

In the event of a data breach creating a real risk of significant harm, SWOT Consultancy Ltd. will notify affected individuals and, where required, the Office of the Privacy Commissioner of Canada (OPC) or the applicable provincial regulator, consistent with PIPEDA's breach notification requirements.

4. How we use evaluation data

Free Cybersecurity First Evaluation responses are used to generate your maturity score and report, to allow our team to follow up with relevant recommendations, and to improve our services. We do not sell your personal information.

5. Data retention and deletion

We retain evaluation and CRM records only as long as reasonably necessary for the purposes described above, or as required by law. You may request access to, correction of, or deletion of your personal information at any time by contacting us.

6. Contact

SWOT Consultancy Ltd.
info@swotconsultancy.ca
(800) 771-8308
www.swotconsultancy.ca

This page is provided for general informational purposes and does not constitute legal advice. For advice specific to your organization's obligations under PIPEDA, provincial privacy laws, or Quebec Law 25, consult a qualified Canadian privacy or legal professional.