1. Introduction

Syfera Corp. (“Syfera”, “we”, “us”, “our”) operates https://www.syfera.com (the “Site”) and provides security advisory, readiness, and attestation services (the “Services”). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our Site, request information, schedule a call, or engage our Services.

By using our Site or Services, you agree to the terms of this Privacy Policy.

2. Definations

  • Personal Information / Personal Data: information that identifies or can reasonably be linked to an individual (e.g., name, email).
  • Usage Data: information collected automatically from the Site (e.g., IP address, browser type, pages visited).
  • Cookies: small files stored on your device used for analytics and site functionality.
  • Service Providers: third parties that help us operate the Site or deliver Services (e.g., scheduling, analytics).
  • 3. Information We Collect

    A) Information you provide to us

    We may collect Personal Information when you:

    • fill out a form on our Site
    • schedule a call
    • contact us by email or phone
    • subscribe to updates (if applicable)
    • engage Syfera for Services

    This may include:

    • name
    • email address
    • phone number
    • organization name, role/title
    • message content and any information you choose to share

    B) Information collected automatically (Usage Data)

    When you use the Site, we may collect:

    • IP address
    • browser/device type and settings
    • pages viewed and time spent
    • referring/exit pages
    • general location (city/region-level) derived from IP
    • diagnostic and performance logs

    C) Cookies and similar technologies

    We may use cookies and similar technologies to:

    • keep the Site functioning
    • understand how visitors use our Site
    • improve performance and user experience

    You can control cookies through your browser settings. Note that disabling cookies may impact Site functionality.

    4. How We Use Information

    We use information to:

    • provide and improve our Site and Services
    • respond to inquiries and schedule calls
    • communicate about our Services, updates, or content (you can opt out anytime)
    • operate and secure our Site (fraud prevention, abuse detection)
    • comply with legal obligations
    • maintain internal records and business operations

    We do not sell your personal information.

    5. How We Share Information

    We may share information in these situations:

    A) Service Providers

    We may share Personal Information with trusted Service Providers who help us run our business, such as:

    • scheduling/booking tools
    • website hosting
    • analytics providers
    • email/CRM platforms

    Service Providers are authorized to use Personal Information only as necessary to provide services to us.

    B) Legal requirements

    We may disclose information if required by law, regulation, subpoena, or legal process.

    C) Business transfers

    If Syfera is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction.

    6. Client/Customer Data in Our Services

    When we provide advisory, readiness, or attestation Services, we may receive or access certain information from a client (for example, policies, evidence artifacts, or security documentation).

    In these situations:

    • the client is typically the data controller for that information
    • Syfera acts as a service provider/processor and uses such information only to deliver the Services and as instructed by the client, unless required by law

    7. Data Retention

    We retain Personal Information only as long as necessary for the purposes described in this Privacy Policy, including to:

    • provide Services
    • maintain business records
    • comply with legal obligations
    • resolve disputes and enforce agreements

    Retention periods vary depending on the nature of the information and legal requirements.

    8. Data Security

    We take reasonable administrative, technical, and organizational measures designed to protect Personal Information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

    9. International Transfers

    Syfera is based in Canada. Your information may be processed in Canada or in other jurisdictions where our Service Providers operate. By using our Site/Services, you understand that your information may be transferred and processed outside your province or country, where privacy laws may differ.

    10. Your Privacy Rights

    Depending on where you live, you may have rights to:

    • request access to Personal Information we hold about you
    • request correction of inaccurate Personal Information
    • request deletion of your Personal Information (subject to legal exceptions)
    • withdraw consent where processing is based on consent
    • opt out of marketing communications

    Canada (PIPEDA)

    If you are in Canada, you may request access or correction under PIPEDA. To exercise rights, contact us using the information below.

    11. Marketing Communications

    If we send you marketing emails, you can opt out at any time by:

    Even if you opt out of marketing, we may still send administrative or transactional communications.

    12. Children's Privacy

    Our Site and Services are not intended for individuals under 18. We do not knowingly collect Personal Information from children.

    13. Contact Us

    If you have questions about this Privacy Policy or want to exercise your rights, contact us:

    Syfera Corp.
    Email: info@syfera.com
    Phone: +1 647-770-2932
    Address: 5476 Hurst Court, Mississauga, Ontario.

    For any questions or feedback, please contact us at info@syfera.com.