Risk Core Privacy Policy
Last updated:
1. Scope
Risk Core Vision ("we", "us", "our") is a cybersecurity and governance, risk, and compliance consultancy based in Montreal, Quebec. This policy explains how we collect, use, disclose, and protect personal information when you visit our website, contact us, or engage our services. "Personal information" means information about an identifiable individual, as defined under PIPEDA and Quebec law.
2. Information we collect
We aim to collect only what we need, which may include:
- contact and identification details you provide, such as name, business email, telephone, employer, and role;
- the content of messages you send us, including details about your security or compliance needs;
- engagement and billing information when you become a client; and
- technical information collected automatically, such as IP address, browser type, pages viewed, and time of access.
Please do not send us sensitive personal information through unsecured channels.
3. Why we collect it
- to respond to inquiries and provide requested information or services;
- to deliver, manage, and improve our engagements;
- to send service communications and, where permitted, relevant updates you may opt out of at any time;
- to operate, secure, and improve our website; and
- to meet legal, regulatory, and contractual obligations.
We do not sell your personal information.
4. Consent
We collect, use, and disclose personal information with your consent, except where the law permits or requires otherwise. Consent may be express or, where appropriate and lawful, implied by your provision of information for an evident purpose. You may withdraw consent at any time, subject to legal or contractual restrictions, by contacting our Privacy Officer. Commercial electronic messages are sent in accordance with Canada's Anti-Spam Legislation (CASL).
5. Disclosure and service providers
We do not disclose personal information except: to service providers who process it on our behalf under contract and confidentiality obligations; where you have consented; or where required or permitted by law, such as in response to a valid legal request.
6. Storage and cross-border transfers
Personal information may be stored or processed by us or our service providers in Canada or other jurisdictions, where it may be subject to local law. Where information is handled outside Quebec or Canada, we take reasonable steps, including a privacy impact assessment where required under Quebec law, to ensure comparable protection, and will identify the relevant jurisdictions on request.
7. Retention
We keep personal information only as long as necessary for the purposes collected, to meet legal or contractual requirements, and to resolve disputes, after which we destroy, erase, or anonymize it.
8. Your rights
- access the personal information we hold about you and request a copy;
- request correction of inaccurate or incomplete information;
- withdraw consent or ask that we cease using or communicating your information;
- request portability of computerized information you provided, where Quebec law applies; and
- make a complaint about how we handle your information.
9. Cookies and analytics
Our website uses only the technical means necessary to function and, where applicable, privacy-respecting analytics in aggregate. Where non-essential cookies are used, we seek consent in accordance with Quebec law and provide a means to refuse them. You can also configure your browser to limit or block cookies.
10. How we protect information
As a security firm, safeguarding information is core to what we do. We maintain administrative, technical, and physical measures appropriate to the sensitivity of the information, including access controls, encryption in transit, and least privilege. We will notify affected individuals and the relevant authorities of a confidentiality incident where required by law.
11. Privacy Officer and complaints
We have designated a person responsible for the protection of personal information. To ask a question, exercise a right, or make a complaint, contact:
- Privacy Officer, Risk Core Vision
- Email: privacy@riskcorevision.com
- General: contact@riskcorevision.com
- Montreal, Quebec, Canada
If our response does not satisfy you, you may contact the Office of the Privacy Commissioner of Canada, or, in Quebec, the Commission d'acces a l'information du Quebec.
12. Changes
We may update this policy from time to time. The "last updated" date reflects the most recent revision.