Privacy notice

SecureBit Inc., based in Ontario, Canada, is accountable for the information described here. Privacy questions and requests go to our Privacy Officer at info@securebit.ca.

• Assessment answers — your responses to the twelve questions, plus optional organisation name, industry, company size and regulatory exposure.
• Business contact details — name, business email, role, and optionally phone number and preferred contact method, entered before the full report is shown.
• Consent choices — whether you agreed to assessment follow-up, and separately whether you opted in to marketing.
• Account details — only if you choose to create an account to keep a history of your assessments.

We do not collect technical details of your systems, credentials, or any data from your environment. Answers are self-reported statements about controls.

To calculate and present your scorecard, to produce your report, and to follow up about your results if you asked us to. Marketing communications are sent only if you separately opted in — that opt-in is never a condition of receiving your report, and you can withdraw it at any time.

We rely on your consent, given knowingly at the point of collection. Two consents are kept apart: consent to be contacted about your assessment, and optional consent to receive marketing. You may withdraw either at any time; withdrawing marketing consent does not affect your report.

Assessment records and contact details are kept for 24 months from the date of the assessment, so results can be compared over time and follow-up is possible. After that they are deleted or anonymised. Anonymous assessments taken without contact details cannot be traced back to an individual.

Only SecureBit Inc. staff who need it. Information is stored in a managed cloud database with access controls that prevent one visitor from reading another's data. Report wording is produced by an AI service from your scores and answer summaries; it is not used to train that service. We do not sell your information or share it with advertisers.

You may ask for a copy of what we hold, ask us to correct it, ask us to delete it, or withdraw marketing consent. We respond within 30 days. Use the request form below or email our Privacy Officer directly. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada, or the Commission d'accès à l'information du Québec where Law 25 applies.

Data is encrypted in transit and at rest, access is restricted, submissions are rate limited, and access to records is logged.