Shopping cart

Subtotal $0.00

View cartCheckout

Make Appointment

Privacy Policy

Effective date: September 22, 2026
Last updated: September 22, 2026

ITRETECH (“ITRETECH,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit itretech.com, submit a form, subscribe to communications, request information, or engage us about our IT, cybersecurity, cloud, networking, governance, compliance, AI, passkey migration, or related services.

ITRETECH is based in Toronto, Ontario, Canada. We handle personal information in accordance with applicable privacy laws, including Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), where it applies. Additional rights may apply depending on where you live.

General statement. This policy is a general description of our current privacy practices and is provided for transparency. It does not create contractual rights or obligations beyond those imposed by applicable law. Any ITRETECH service engagement is governed by its applicable proposal, statement of work, service agreement, or other written contract. Nothing in this policy limits any right or obligation that cannot lawfully be limited or excluded.

1. Who is responsible for your information

ITRETECH is responsible for personal information under its control. Our Privacy Officer oversees privacy enquiries, access requests, and complaints.

Privacy Officer
ITRETECH
Toronto, Ontario, Canada
Email: info@itretech.com

2. Personal information we collect

We collect only information that is reasonably required for the purposes described in this policy. Depending on how you interact with us, this may include:

  • Contact and identity information: your name, job title, organization, email address, telephone number, city, and country.
  • Enquiry and service information: the service you are interested in, comments, business or technical requirements, preferred contact dates and times, and information you choose to provide in an enquiry, assessment, consultation, or passkey migration request.
  • Communications information: messages and correspondence with us, appointment details, support communications, and records of consent or communication preferences.
  • Newsletter information: your email address and subscription or unsubscribe status.
  • Technical and usage information: IP address, browser and device type, operating system, referring page, pages viewed, approximate location derived from an IP address, timestamps, and diagnostic or security events.
  • Cookie and preference information: consent choices, site preferences, session information, and, where permitted, referral or campaign information used to understand how visitors reach the website.
  • Client and supplier information: business contact information, project communications, contracts, invoices, and records necessary to deliver or obtain services.

Please do not submit passwords, authentication codes, private encryption keys, government identification numbers, payment-card details, health information, or other highly sensitive information through a general website form. If sensitive information is required for a service engagement, we will arrange an appropriate secure method for providing it.

3. How we collect information

We collect personal information directly from you when you complete a form, subscribe, book a consultation, email or call us, request a proposal, or enter into a service relationship. We also collect limited technical information automatically through server logs, security tools, necessary cookies, and optional technologies that operate according to your consent choices. We may receive business contact information from your organization, a referral partner, or a publicly available professional source where permitted by law.

4. Why we use personal information

We may use personal information to:

  • respond to questions, enquiries, and requests for proposals;
  • arrange consultations and contact you at a requested time;
  • assess requirements and provide IT, cybersecurity, passkey migration, cloud, networking, compliance, or related services;
  • prepare proposals, contracts, project plans, invoices, and service records;
  • operate, maintain, troubleshoot, and improve our website and services;
  • protect the website, our systems, our clients, and users from fraud, abuse, malware, unauthorized access, and other security threats;
  • manage cookie preferences and, with consent where required, measure website performance and referral sources;
  • send newsletters or marketing communications where you have consented or where otherwise permitted by law;
  • manage our client, supplier, and professional relationships;
  • comply with legal, regulatory, contractual, accounting, and security obligations; and
  • establish, exercise, or defend legal claims.

5. Consent and other lawful grounds

Where consent is required, we seek consent in a manner appropriate to the sensitivity of the information and the context. You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawal does not affect processing that was lawful before withdrawal.

Where applicable law recognizes additional lawful grounds, we may process information because it is necessary to respond to your request or perform a contract, comply with a legal obligation, protect vital or security interests, or pursue a legitimate business interest that is not overridden by your rights.

6. Cookies and similar technologies

We use necessary technologies to operate the website, remember consent choices, maintain security, and provide requested functions. Optional categories may include preferences, statistics, and marketing. Optional technologies are controlled through our consent banner where consent is required. You can accept, reject, or manage optional categories and change your selection using the “Cookie settings” control.

Our current cookie categories, purposes, providers, and available controls are described in the Cookie Policy. Your browser may also allow you to block or delete cookies, although doing so can affect website functionality.

7. Analytics, referrals, and external content

Where website analytics is enabled, we use it to understand site performance and how visitors find and use our pages. Optional analytics is subject to the consent controls described above. The website may also record limited referral or campaign information for service attribution.

Our pages may link to social networks, videos, maps, partner sites, or other external services. A normal link does not give us control over the external site. If embedded external content is used, the provider may receive technical information when the content is loaded, subject to our consent controls where applicable. External services have their own privacy practices, which we encourage you to review.

8. When we disclose information

We do not sell or rent personal information. We may disclose information only as reasonably necessary to:

  • Service providers: organizations that provide website hosting, cloud infrastructure, forms, email delivery, appointment scheduling, communications, data storage, security monitoring, spam prevention, analytics, or professional support on our behalf.
  • Client-authorized providers: technology vendors, platform providers, or implementation partners involved in a requested service, after appropriate authorization or under the applicable service agreement.
  • Professional advisers: lawyers, accountants, auditors, insurers, and other advisers where necessary.
  • Authorities and legal processes: regulators, law-enforcement bodies, courts, or other parties where disclosure is required or permitted by law, or reasonably necessary to protect rights, safety, and security.
  • Business transactions: a prospective purchaser, investor, successor, or adviser in connection with a financing, reorganization, merger, sale, or transfer, subject to appropriate confidentiality and legal requirements.

Service providers are expected to use personal information only for authorized purposes and to apply safeguards appropriate to the sensitivity of the information.

9. Processing outside your jurisdiction

ITRETECH and its service providers may process or store information in Canada or other countries. Information processed in another jurisdiction may be subject to that jurisdiction’s laws and may be accessible to courts, law-enforcement agencies, or regulatory authorities in accordance with those laws. Where required, we use contractual, organizational, and technical measures intended to protect information transferred across borders.

10. Retention

We retain personal information only for as long as reasonably necessary for the identified purposes, including to respond to an enquiry, provide services, maintain appropriate business and security records, meet legal or accounting requirements, resolve disputes, and enforce agreements. Retention periods vary according to the type and sensitivity of the information, the relationship, legal requirements, and operational needs.

Newsletter information is retained while you remain subscribed, together with a limited suppression record where necessary to honour an unsubscribe request. Security information may be retained longer where it is needed to investigate an incident or protect systems. When information is no longer required, we take reasonable steps to delete, anonymize, or securely destroy it.

11. Information security

We use administrative, technical, and organizational safeguards appropriate to the nature and sensitivity of the information. These may include access controls, authentication, encryption where appropriate, backups, logging, malware and vulnerability monitoring, security updates, and service-provider controls. No website, transmission, or storage system can be guaranteed to be completely secure. If you believe information has been exposed or misused, contact us promptly at info@itretech.com.

12. Marketing communications

We send commercial electronic messages only where we have the required consent or another lawful basis. Marketing messages identify the sender and include an unsubscribe method. You may unsubscribe at any time using the link in a message or by contacting us. We may still send non-marketing communications that are necessary to respond to a request, administer a service, or meet legal or security obligations.

13. Your privacy rights

Subject to applicable law and permitted exceptions, you may ask us to:

  • confirm whether we hold personal information about you;
  • provide access to that information and explain how it has been used or disclosed;
  • correct inaccurate or incomplete information;
  • withdraw consent or change communication preferences;
  • delete information that is no longer required or that we are not legally required to retain; and
  • address a concern or complaint about our privacy practices.

Residents of jurisdictions that provide additional rights may also have rights to data portability, restriction of processing, objection to certain processing, and complaint to a privacy or data-protection authority. European Economic Area and United Kingdom residents may exercise these rights where the GDPR or UK GDPR applies. If processing relies on consent, you may withdraw it; if it relies on legitimate interests, you may object in appropriate circumstances.

Send requests to info@itretech.com with the subject “Privacy Request.” We may need to verify your identity before completing a request. We will respond within the period required by applicable law and will explain any lawful reason we cannot fulfill all or part of a request. Canadian residents may also contact the Office of the Privacy Commissioner of Canada, and other residents may contact their local privacy authority.

14. Children’s privacy

Our website and services are intended for organizations and adults and are not directed to children under 13. We do not knowingly collect personal information from children under 13 through the website. If you believe a child has provided personal information, contact us so we can review and, where appropriate, delete it.

15. Changes to this policy

We may update this Privacy Policy when our services, website practices, providers, or legal obligations change. The revised version will be posted on this page with an updated “Last updated” date. If a change is material, we may provide additional notice where appropriate.

16. Contact us

Questions, requests, or complaints about privacy may be directed to:

Privacy Officer, ITRETECH
Toronto, Ontario, Canada
Email: info@itretech.com
Website: https://itretech.com