Privacy Policy

Last updated: 12 October 2026

1. Introduction

This Privacy Policy explains how CCURITY Inc. (“CCURITY”, “we”, “us” or “our”) handles personal information in connection with our website, enquiries and related business communications.

CCURITY is a cybersecurity consultancy serving organisations and technology businesses. This policy should be read alongside our Cookie Policy and Terms and Conditions.

Professional consulting, assessments and authorised security testing may involve additional confidentiality, data-handling and contractual obligations. Those arrangements are addressed in the relevant client agreement.

2. Information We May Collect

The information we collect depends on how you interact with us and which website features are enabled. It may include:

Contact details, such as your name, email address, telephone number, organisation and location.
Enquiry details and information you choose to provide through forms, email or other communications.
Business correspondence and records needed to respond to requests or manage an engagement.
Technical and usage information, such as browser and device details, IP address, pages visited, referral sources and website interactions, where collected by enabled technologies.
Cookie preferences and consent records, where a consent mechanism is implemented.

Please do not submit passwords, access credentials, confidential vulnerability reports or sensitive client information through general website contact forms. Contact us first to arrange an appropriate channel.

3. How We Use Personal Information

We may use personal information for the following purposes:

Responding to enquiries and communicating about our services.
Managing business relationships and arranging separately agreed professional services.
Operating, maintaining and securing the website.
Understanding website performance and improving content and usability, where analytics are enabled.
Managing consent choices and responding to privacy requests.
Meeting applicable legal obligations and protecting our legal rights.

Where we send marketing communications, we will do so in accordance with applicable consent and anti-spam requirements. You may withdraw consent or use an available unsubscribe mechanism.

4. Consent and Applicable Requirements

We handle personal information in accordance with applicable privacy requirements, which may include Canadian federal and provincial laws and other laws that apply to a particular interaction.

Where consent is required, we seek appropriate consent for the relevant collection, use or disclosure. Other processing may be permitted or required by law. Using the website does not replace consent that must be obtained separately.

You may withdraw consent where applicable, subject to legal or contractual restrictions and reasonable notice. Withdrawal may limit our ability to provide a requested feature or service. We will explain relevant consequences where appropriate.

5. Cookies and Website Analytics

Cookies and similar technologies may be used to deliver website features, remember preferences and understand website activity. Please refer to our Cookie Policy for more information.

We may use Google Analytics to measure website traffic and interactions. The information collected, retention settings and consent behaviour depend on its configuration.

We may use Microsoft Clarity for heatmaps, session recordings and behavioural insights. If enabled, appropriate masking, exclusions and consent settings should be configured to reduce the risk of collecting sensitive information.

Where required by law, non-essential tracking should only operate after the necessary consent has been obtained. The actual technologies and configurations must be verified before publication.

6. Forms, HubSpot and Framer

We may use HubSpot for contact forms, enquiry management, customer relationship management and related communications. Information submitted through enabled features may be processed by HubSpot on our behalf, depending on the configuration and applicable arrangements.

Our website is built using Framer. Framer and other enabled providers may process technical information needed to host, deliver, secure or operate website features.

Third-party embedded content and integrations may also process information when used. The specific providers, features and data flows depend on the live website configuration.

7. Sharing Personal Information

We may disclose personal information to service providers that support website hosting, communications, analytics, forms or business operations, where those services are used. Their access and use should be governed by appropriate contractual or other safeguards.

We may also disclose information where required by law, to respond to lawful requests, to protect rights or safety, or in connection with a business transaction subject to applicable protections.

Third-party services may process information under their own terms and privacy documentation. Their role depends on the service and how it is configured. This policy does not govern independent third-party websites.

8. International Processing

Some service providers may process or store information outside Canada. Locations depend on the providers and configurations used.

Information processed in another jurisdiction may be subject to that jurisdiction’s laws, including lawful access by public authorities. Where required, appropriate safeguards and transfer arrangements should be assessed and implemented.

9. Retention

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including responding to enquiries, managing business relationships and meeting legal or contractual requirements.

Retention periods vary by information type and context. Analytics and recording data depend on the settings of the relevant services.

When information is no longer needed, it should be deleted, anonymised or otherwise disposed of appropriately, subject to applicable requirements. Specific retention schedules must be confirmed against our actual practices.

10. Security

We use safeguards appropriate to the nature and sensitivity of the personal information we handle. These may include access controls, secure communication practices and organisational measures.

No website, transmission method or storage system can be guaranteed completely secure. Please use only agreed secure channels for sensitive security information.

Any handling of client systems, testing data or confidential materials must be separately authorised and governed by the relevant engagement terms.

11. Your Privacy Choices and Rights

Depending on applicable law, you may be able to:

Request access to personal information we hold about you.
Request correction of inaccurate or incomplete information.
Withdraw consent where processing relies on consent.
Request deletion or other restrictions where applicable.
Raise concerns about our handling of your information.

These rights may be subject to exceptions, identity verification and legal retention requirements. Contact us using the details below. We will respond in accordance with applicable law.

Where available, you can also manage non-essential cookie choices through the website’s consent controls. Browser cookie settings may provide additional options.

12. Children’s Privacy

Our website and business services are intended for organisations and professional audiences, not specifically for children.

If you believe a child has provided personal information to us without appropriate authorisation, please contact us so we can assess and address the matter.

13. Changes to This Policy

We may update this Privacy Policy to reflect changes to our website, services, practices or legal requirements.

The revised policy will be posted on this page with an updated revision date. Where required, we will provide additional notice or obtain consent for relevant changes.

14. Contact and Complaints

For privacy questions, requests or concerns, please contact:

CCURITY Inc.

1971 Shannon Dr, Mississauga, Ontario L5H 3Z6, Canada

Email: discover@ccurity.io

Telephone: +1 416 831 7292

If you are not satisfied with our response, you may have the right to contact the relevant privacy regulator, such as the Office of the Privacy Commissioner of Canada, depending on the applicable law.