Privacy Policy

Peace Country Cyber Inc. (“PCC”, “we”, “us”) is an Alberta corporation based in La Crete, Alberta, Canada. We provide managed cybersecurity and IT services across northern Alberta. This policy describes how we handle personal information collected through this website (peacecountrycyber.ca).

For personal information collected through ongoing client engagements (which is the substantial majority of our processing), the terms of our Master Services Agreement and any signed engagement letter apply in addition to this policy.

We collect only the personal information we need to respond to inquiries. Specifically:

• Email correspondence: when you send us email (e.g., via the contact page mailto links), we receive your email address, the message content, and any attachments you choose to send.
• Risk Report responses: the 10 yes/no questions on the Risk Report page are processed entirely in your browser and are not transmitted to our servers. We do not see your individual answers unless you choose to share them with us via email.
• Server logs:our hosting provider (Vercel) records technical information about page requests, including IP address, browser type, referrer, and request timestamp. Logs are retained per Vercel's data retention policy and are used only for security, abuse prevention, and performance monitoring.
• Privacy-respecting analytics: we use Vercel Analytics and Vercel Speed Insights to measure aggregate traffic and Core Web Vitals (page load performance). These tools do not use cookies, do not track you across other websites, and do not collect personal information. Vercel anonymizes IP addresses, processes data in real-time without retaining raw logs, and is built to be GDPR / PIPEDA / Alberta PIPA compliant by design.
• No third-party trackers: we do not use Google Analytics, Meta Pixel, advertising cookies, or any cross-site tracking technology.

We use personal information collected through this website for:

• Responding to your inquiries
• Scoping potential engagements
• Sending you requested resources (such as the Compliance Checklist PDF when requested)
• Maintaining security and integrity of the website

We do not sell personal information. We do not share it with third parties for marketing purposes. We do not use it to train any artificial intelligence model.

Peace Country Cyber uses the following service providers to operate this website. Each is bound by their own privacy and security obligations:

• Vercel — website hosting, edge delivery, analytics, and performance monitoring (vercel.com/legal/privacy-policy)
• Cloudflare — DNS and email routing (cloudflare.com/privacypolicy)
• Google Workspace or Microsoft 365 — email processing for our team inbox

Some of our service providers operate primarily in the United States or other jurisdictions outside Canada. Personal information you provide may be processed outside Canada. Where this occurs, we use providers that maintain protections comparable to those required under Canadian privacy law.

We retain email correspondence and inquiry data for as long as needed to support an ongoing or potential engagement, and no longer than necessary. Inquiries that do not result in an engagement are deleted within 24 months of last contact unless you request earlier deletion.

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate personal information
• Withdraw consent for our processing (subject to legal and contractual constraints)
• Request deletion of personal information no longer required for a lawful purpose
• File a complaint with the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner of Alberta if you believe your rights have been violated

To exercise any of these rights, email us at privacy@peacecountrycyber.ca. We will respond within 30 days.

We use industry-standard administrative, technical, and physical safeguards to protect personal information, including encryption in transit (TLS 1.2+), encryption at rest where supported, access controls, audit logging, and employee confidentiality obligations.

No security measure is infallible. If you believe your personal information may have been compromised, please contact us immediately.

This website is intended for businesses and adult professionals. We do not knowingly collect personal information from individuals under the age of 18. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

We may update this policy from time to time. When we do, we will update the “Last updated” date at the top and, for material changes, post a notice on the website. The current version is always available at peacecountrycyber.ca/privacy.

For any privacy question or request:

Email: privacy@peacecountrycyber.ca
Mail: Peace Country Cyber Inc., La Crete, Alberta, Canada