Last updated: 27 August 2026
Who we are
Skeldra Group, trading as Canada Cyber-Safe, is responsible for the personal information collected through cyber-safe.ca.
You can reach us at privacy@cyber-safe.ca or +1 647 361 2215, or write to us at 100 University Avenue, Toronto, Ontario M5J 1V6.
Our Privacy Officer is Denny Thompson, who is accountable for our compliance with this notice. You can contact him at privacy@cyber-safe.ca.
What we collect, and when
When you contact us through a form on this site, we collect the name, organisation, email address and telephone number you give us, together with anything you choose to tell us about your organisation and your enquiry.
When you visit any page, our hosting provider records information about that visit, including your IP address, the pages you view and basic details about your browser and device. This is part of running the site and keeping it available. Until 5 September 2026 our host also injected scripts that measured visits and sent data to its own systems. We have switched those off.
When you simply browse the site, our hosting provider records standard server information including your IP address, browser type and the pages you request. We use this to keep the site available and to protect it against attack.
We run Google Analytics on this site so that we can see how many people visit and which pages they read. Until you accept the analytics category on our cookie banner it stores nothing on your device and records only an anonymous count; if you accept, it sets the two cookies listed below. We run no advertising trackers, we do not process payments on this page, and you cannot create an account on this site.
Why we collect it
We use what you give us to answer your enquiry, to prepare a proposal if you ask for one, and to deliver our services if you become a client. We use server and security records to keep the site secure. We do not use your information for anything else, and we do not sell it.
Your consent
We ask for your information only when you choose to contact us, and we tell you what we will do with it at the point you give it to us. You can withdraw your consent at any time by emailing privacy@cyber-safe.ca. We will then stop using your information and delete it, unless we are required to keep it.
Who else sees it
We use a small number of service providers to run this site: GoDaddy, our hosting provider; our cookie consent provider; Google, which supplies the fonts the site uses and provides our analytics; Gravatar, which may serve profile images; and Stripe, which processes payments when you buy a document from us. They handle your information only in order to provide those services to us.
Payments
When you buy one of our documents, the payment is taken on Stripe’s own checkout pages, not on this website. We never see and never hold your card details. Stripe tells us that a payment succeeded, what was bought, the amount and the email address you gave, so that we can send you the files and keep a record of the licence. Stripe’s handling of your information is governed by its own privacy policy, which you can read at stripe.com/en-ca/privacy.
Where your information is held
This site and the information you send us through it are hosted in Canada.
Several of the services the site uses process information in the United States: GoDaddy, which hosts the site; Google, which supplies the fonts; Gravatar; and Stripe, which processes payments.
This means your information may be accessible to courts, law enforcement and government authorities in the United States under the laws of that country. If you would rather your information were not handled this way, please telephone us instead of using the forms.
How long we keep it
If you send us a CV or an expression of interest in working with us, we keep it for twelve months and then delete it. You can ask us to keep it for longer, or to delete it sooner, and we act on either request on the day we receive it. We do not circulate it outside the practice and we do not add you to a mailing list.
We keep enquiries that do not lead to work for 24 months, and then delete them.
We keep records relating to clients — assessments, reports, certificates and related correspondence — for 7 years after our work for them ends. This lets us meet Canadian record-keeping requirements and answer questions about work we have certified.
Server and security logs are kept for 90 days.
Where we have used your information to make a decision about you, we keep it for at least one year after that decision so that you have the chance to ask us for access to it.
How we protect it
The site runs over an encrypted connection and sits behind a web application firewall. Access to the systems holding your information is limited to the people who need it. No system is perfectly secure, but we take this seriously — it is what we do for a living.
Your rights
You can ask us what personal information we hold about you and receive a copy of it. You can ask us to correct anything that is wrong. You can withdraw your consent and ask us to delete what we hold. Write to privacy@cyber-safe.ca and we will respond within 30 days.
If you are not satisfied with how we have handled your information, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.
If you are in Quebec
Quebec’s Law 25 gives you some additional rights, and we apply them to anyone in Quebec who contacts us.
Denny Thompson is the person in charge of the protection of personal information for the purposes of that law, and can be reached at privacy@cyber-safe.ca.
As well as the rights set out above, you can ask us to give you the personal information you provided to us in a structured, commonly used technological format, and you can ask us to stop disseminating your personal information or to de-index a link that gives access to it, where the law allows.
We do not make decisions about you based exclusively on automated processing.
Before we transfer personal information about a Quebec resident outside Quebec, we assess whether it would receive adequate protection where it is going.
If you are not satisfied with how we have handled your information, you can complain to the Commission d’accès à l’information du Québec at cai.gouv.qc.ca.
Changes to this notice
If we change how we handle personal information, we will update this page and change the date at the top.