Privacy Policy
Privacy Policy
Last updated: 2026-09-09
CyberCtrl ("we", "us") provides cybersecurity consulting services. This policy explains what personal information this website collects, why, who processes it, and what you can do about it. It covers www.cyberctrl.io only.
What we collect
Information you send us. When you submit the contact form we receive the name, company, email address, telephone number, service of interest and message you enter, and — if you choose to answer them — your company size, sector, and whether you have a security team. Every field except name, email and message is optional; we only receive what you choose to type or select.
Analytics. We use Plausible Analytics to understand which pages are read and where visitors arrive from. Plausible sets no cookies and does not create a persistent or cross-site identifier: it cannot follow you to another website or recognise you on a later visit. It records pages viewed, country (derived from IP address, which is never stored), device and browser type, and referring site. We also record an event when a form is submitted successfully, so we can tell which pages lead to enquiries. That event records the service selected, the optional qualification answers above and the page language — never your name, contact details, or the contents of your message.
We do not collect payment details through this site, run advertising or remarketing, sell personal information, or use automated decision-making or profiling.
Cookies
This site sets one cookie, and it is not used for tracking.
| Cookie | Set by | Purpose | Lifetime |
|---|---|---|---|
preferred_locale | This site | Remembers whether you chose English or French | 1 year |
Our analytics provider sets no cookies at all, which is why this site shows no cookie consent banner. Fonts are served from this site rather than from Google Fonts, so simply reading a page contacts no third party other than the analytics request above.
You can block or delete cookies in your browser. Doing so does not affect the site's function.
Who else processes it
| Processor | What they handle | Where |
|---|---|---|
| Formspree | Delivers contact form submissions to us by email | United States |
| Plausible Analytics | Website usage statistics (no cookies, no personal identifiers) | European Union |
| Microsoft Azure | Hosting and delivery of this site | Canada / global CDN |
Because these providers operate outside Québec, information you send through this site is transferred outside the province and is subject to the laws of the countries where it is processed.
Why we may keep it
We use what you send through the contact form only to respond to your enquiry and, if it leads to work, to manage that engagement. We do not use it for marketing unless you ask us to.
How long we keep it
Contact form submissions are retained for 14 months from the date of the enquiry, then deleted. Analytics data contains no personal identifiers and is retained as aggregate statistics only.
If an enquiry becomes a signed engagement, the records belonging to that engagement are kept for as long as our professional and legal obligations require, under the agreement covering it rather than under this policy.
Your rights
Under Québec's Act respecting the protection of personal information in the private sector (as amended by Law 25) and Canada's PIPEDA, you may ask us to confirm what personal information we hold about you, provide a copy, correct anything inaccurate, or delete it. You may also withdraw consent at any time, and complain to the Commission d'accès à l'information du Québec if you are unsatisfied with our response.
To exercise any of these, email contact@cyberctrl.io. We respond within 30 days. Enquiries about this policy and requests concerning your personal information both go to that address.
Changes
If this policy changes we will update the date at the top. Material changes will be described on this page.