Privacy Policy

NorthStar IT Solutions Inc. ("NorthStar," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information in the course of our business, in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable Canadian privacy law.

NorthStar is responsible for the personal information under its control. We have designated a Privacy Officer responsible for our compliance with this policy and applicable privacy law. You can reach our Privacy Officer using the contact information in Section 12 

*Our Privacy Officer is the Director of NorthStar IT Solutions Inc.*

Depending on the services you engage us for, we may collect:

• Contact information: name, email address, phone number, mailing address
• Account and billing information: information needed to process payment for services (processed securely by our payment provider; we do not directly collect or store full payment card numbers)
• Service-related information: information you provide so we can deliver IT support, password management, network access, or security monitoring services, such as device inventories, user lists, and configuration preferences
• Communications: records of your correspondence with us (email, support requests, call notes)
• Technical and usage information: limited technical metadata generated in the course of delivering managed services (for example, administrative activity logs related to account or device changes), where applicable to the service you've engaged us for

We collect only the personal information reasonably necessary for the purposes identified below.

We collect, use, and disclose personal information to:

• Provide, maintain, and support the services you've engaged us for
• Process payment for services
• Communicate with you about your account, service requests, or support needs
• Detect, investigate, and respond to security incidents affecting services we manage on your behalf
• Meet our legal, regulatory, and contractual obligations
• Improve our services

We will identify the purpose for collecting personal information at or before the time it is collected, and will not use it for a materially different purpose without your consent.

By engaging our services or providing your personal information to us, you consent to its collection, use, and disclosure as described in this policy. You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice, by contacting us using the information in Section 12. Withdrawing consent may limit our ability to provide certain services.

We do not sell your personal information. We may share personal information with:

• Third-party service providers we engage to help deliver services to you (for example, providers of password management, network access, or security monitoring platforms). These providers are authorized to use your information only as necessary to provide the relevant service, and are subject to their own privacy and security obligations.
• Professional advisors (legal, accounting) where necessary for our business operations.
• Regulators or law enforcement, where required by law.

Some of our third-party service providers may process or store information outside of Canada, including in the United States or the European Economic Area, depending on the specific service. Where this applies, information may become subject to the laws of that jurisdiction, including lawful access by that jurisdiction's authorities. We select service providers with appropriate safeguards and, where available and appropriate to the service, prioritize Canadian-hosted infrastructure. Specific data-handling arrangements for a given service are set out in your service agreement.

For security reasons, we do not publicly disclose the specific technical architecture, vendor configurations, or infrastructure details of the systems we manage. This information is available to you as our client under the applicable service agreement and is protected accordingly.

We retain personal information only as long as necessary to fulfill the purposes it was collected for, or as required by law or your service agreement. When no longer needed, personal information is securely deleted or de-identified.

We maintain administrative, physical, and technical safeguards appropriate to the sensitivity of the personal information we hold, including access controls, encryption where appropriate, and multi-factor authentication on administrative systems. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Subject to limited exceptions under applicable law, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Withdraw consent to certain uses, subject to Section 4
• Ask questions about how your information is handled

To exercise these rights, contact us using the information in Section 12. We may need to verify your identity before fulfilling a request, and may charge a reasonable fee for extensive requests where permitted by law.

Our website uses cookies and similar tracking technologies, provided through our website platform's built-in analytics, to understand how visitors use our site. This includes aggregate metrics such as: number of site visitors, search engine ranking position, blog post views, service bookings, email link clicks, ad clicks, social media views, and overall site performance. This information is used in aggregate form to help us understand site usage and improve our website; it is not used to build individual profiles for marketing purposes.

When you first visit our site, you will be shown a cookie notice allowing you to accept or decline non-essential tracking. If you decline, only essential cookies necessary for basic site functionality will be used. You may change your cookie preferences at any time through the cookie settings link available on our site.

In the event of a breach of security safeguards involving personal information that creates a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required under PIPEDA.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated to active clients.

If you have questions, concerns, or wish to exercise your privacy rights, contact us at:

Email: admin@northstarits.ca Phone: (647) 609-3616

If you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca).

NorthStar IT Solutions Inc. is committed to handling your personal information responsibly and transparently.