Privacy policy

1. Who we are

IT-TEAM Operations Inc. runs this website and the services described on it. We are a Canadian corporation. Our mailing address is 1 King Street West, Suite 1600, Toronto, Ontario, M5H 1A1. We work with businesses in Canada and in the U.S.

Questions about this page go to our privacy contact at privacy@itopsi.com. A person reads that mailbox.

2. What we ask for

When you ask for a callback. The callback form asks for your name and your phone number, and lets you pick the best time of day to reach you. Our system also records which page you were on and whether you were reading in English or in French, so the person calling you back knows what you were looking at.

When you use the longer forms. The contact form, the free infrastructure audit and the get-started questionnaire ask for more: your email address, your company name, roughly how many people work there, and a description of what is going wrong. You choose how much of that to write.

When you simply read the site. Our website measurement records the pages you visit, the rough region you are in, your device and browser type, and the site or search that sent you here. Our hosting provider keeps standard server records that include your IP address and the time of the request.

When you become a client. To run your systems we receive information about your network, your software, your vendors, and contact details for your staff. That information is covered by the written agreement and the mutual non-disclosure agreement we sign with you.

This website never asks for health records, a Social Insurance Number, or a payment card.

3. What we use it for

We use what you give us for these purposes only:

• To call you back about the request you sent, at the time of day you picked.
• To answer a question you asked us in writing.
• To deliver the work you hired us for, and to run the systems in your agreement.
• To send you invoices and service notices, such as planned maintenance.
• To see which pages of this website are useful, using visit counts that are not tied to your name.
• To meet a legal, tax or court requirement.

Your information is never sold, rented, or handed to an advertiser. Client information is never used to train an AI model. Marketing email goes only to people who asked for it.

4. Cookies and website measurement

This website uses Google Analytics to count visits and see which pages people read. Google Analytics sets cookies in your browser and gives us totals, such as how many people opened the pricing page this week. Those totals never carry your name.

The site sets no advertising cookies, follows you to no other website, and builds no behavioural profile.

You can block cookies in your browser settings, or install the Google Analytics opt-out add-on. Every page and every form on this site keeps working with cookies switched off.

5. Who else touches your information

Running a website takes a few suppliers. These are the ones that see what you send us:

• Vercel Inc. hosts this website and keeps the standard server records described above.
• Resend delivers your callback request to our inbox as an email.
• Google provides the visit measurement, and hosts the mailbox where your request lands.

Each of them is bound by its own agreement with us to use your information only to provide that service.

Your information crosses the border. All three companies process data in the United States, which means U.S. authorities can require access to it under U.S. law. Our contracts with them require protection equivalent to what PIPEDA asks of us. If your business needs the data to stay in Canada, tell us before you send the form and we will take your request another way.

For client work we also use cloud infrastructure, accounting software and support tooling. The current list of those suppliers is available on request.

6. How long we keep it

• Callback requests and website enquiries: we delete them two years after the last time we spoke, unless the conversation turns into work.
• Client records: for the length of the agreement, plus seven years after it ends, because the Canada Revenue Agency requires that of our books.
• Support history: three years after the ticket is closed.
• Server records held by our host: a short retention window set by the hosting platform, measured in weeks.

Ask us to delete your enquiry sooner and we do it within 30 days, keeping only what a tax or legal rule forces us to keep.

7. How we keep it safe

Everything you send through this website travels over an encrypted connection. Access to the inbox that receives your request is limited to the people who answer it, and every account we use for it requires a second factor at sign-in.

For client work, each client's information is kept separate from every other client's, and access is limited to the people assigned to your account. When an agreement ends, we return or delete your data on the schedule written into the exit plan.

We make no certification claims on this website. If your insurer or your board needs a specific attestation, ask your account lead and we will tell you plainly what we hold and what we do not.

8. Your rights under PIPEDA

Canadian privacy law gives you the following rights, and we answer all of them within 30 days:

• Ask what personal information we hold about you and what we use it for.
• Get a copy of it.
• Have anything wrong corrected.
• Withdraw your consent, so long as a contract or a law does not require us to keep the information.
• Ask us to delete your enquiry.
• Complain to the Office of the Privacy Commissioner of Canada if you believe we handled your information badly.

Write to privacy@itopsi.com to use any of these. Tell us which one you want and we will confirm in writing when it is done.

9. Changes to this page

When this policy changes in a way that matters, we email active clients at least 30 days before the change takes effect, and we update the date at the top of this page. The current version always lives at itopsi.com/privacy.

10. How to reach us

For a question, a correction, a deletion or a complaint about privacy:

You can also leave your name and number in the form below and ask the person who calls you to route it to the privacy contact.