Privacy Policy

We collect information you provide directly to us, including: • Contact Information: Name, email address, phone number, and organization name when you request access or contact us. • Professional Information: Your role, province/region, and information about your current DSAR management processes. • Usage Data: Information about how you interact with our website, including pages visited and time spent. • Communications: Records of correspondence when you contact us for support or inquiries.

We use the information we collect to: • Respond to your inquiries and requests for access • Provide, maintain, and improve our services • Send you information about our services that may be of interest • Comply with legal obligations under PIPEDA, Law 25, and other applicable regulations • Protect against fraudulent or unauthorized activity We will never sell your personal information to third parties.

Your data is stored on secure servers hosted by Amazon Web Services (AWS) with Canadian region options available. We implement industry-standard security measures including: • Encryption of data at rest and in transit • Role-based access controls • Regular security assessments • Audit logging of all data access We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected.

Under PIPEDA and Québec's Law 25, you have the right to: • Access: Request a copy of the personal information we hold about you • Correction: Request correction of inaccurate or incomplete information • Deletion: Request deletion of your personal information, subject to legal retention requirements • Withdrawal of Consent: Withdraw your consent for us to process your data To exercise any of these rights, contact us at privacy@dsarsuite.com. We will respond within 30 days as required by law.

Our website uses essential cookies to ensure proper functionality. We do not use advertising cookies or sell data to advertisers. You can configure your browser to refuse cookies, though this may affect your ability to use certain features of our website.

We may use third-party services for: • Website hosting and infrastructure (AWS) • Email communications • Analytics (privacy-respecting, no personal data shared) These providers are contractually bound to protect your information and use it only for the services they provide to us.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

If you have questions about this Privacy Policy or our privacy practices, contact us at: Email: privacy@dsarsuite.com Mailing Address: DSAR Suite Canada We are committed to resolving any concerns about your privacy.