WinTech Security — Website Privacy Policy

Last updated: October 10, 2025

1. Who we are

Services de Sécurité WinTech Inc. (“WinTech Security”, “we”, “us”, “our”) is a Canadian information security consultancy headquartered in Québec. We operate the website located at www.wintech-security.com and any related pages that link to this Privacy Policy (collectively, the “Site”).

We are committed to protecting the privacy of visitors and prospective clients. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you use the Site and when you communicate with us.

2. Scope

This Privacy Policy applies to personal information that we collect through the Site and through our direct communications with you about the Site. It does not cover information processed in the course of client engagements that are governed by separate agreements.

This Policy is intended to meet the requirements of the Personal Information Protection and Electronic Documents Act of Canada (PIPEDA) and Québec’s Act respecting the protection of personal information in the private sector as amended by Law 25. If you are located in the European Economic Area or the United Kingdom, see Section 13 for additional information.

3. Personal information we collect

We collect the following types of information about you, depending on how you interact with us.

Information you provide to us

• Contact details such as name, job title, company, email address, and phone number
• Information you include in forms, meeting requests, downloads, surveys, or emails
• Preferences related to marketing communications and events

Information collected automatically

• Device and usage data such as IP address, browser type, operating system, language, referral URLs, pages viewed, and links clicked
• Cookie and similar technology data used for essential functionality, analytics, and preference management

Information from third parties

• Business contact details and lead information from partners, event organizers, or publicly available professional sources
• Web analytics and advertising partners where you have given consent to them

We do not intentionally collect sensitive personal information through the Site. Please do not include confidential or sensitive information in web forms.

4. Purposes for which we use personal information

We use personal information for the following purposes:

• To operate, secure, and improve the Site
• To respond to your inquiries, provide information you request, and schedule meetings
• To market our services including sending newsletters and event invitations where permitted by law
• To understand Site usage and measure the performance of pages and campaigns
• To comply with legal obligations and to protect our rights and the rights of others

5. Legal grounds under Canadian and Québec law

Under PIPEDA and Québec law we rely on one or more of the following legal grounds:

• Your consent, which you may withdraw at any time
• The performance of a request you made such as sending you requested materials or scheduling a call
• Our legitimate interests in operating a secure business website, understanding our audience, and promoting our services, balanced with your privacy rights
• Compliance with legal and regulatory obligations

6. Cookies and similar technologies

Cookies are small bits of text sent by our servers to your computer or device when you access our services. They are stored in your browser and later sent back to our servers so that we can provide contextual content. Without cookies, using the web would be a much more frustrating experience. We use them to support your activities on our website. For example, your session (so you don't have to login again) or your shopping cart.

Cookies are also used to help us understand your preferences based on previous or current activity on our website (the pages you have visited), your language and country, which enables us to provide you with improved services. We also use cookies to help us compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future.

Here is an overview of the cookies that may be stored on your device when you visit our website:

You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. Each browser is a little different, so look at your browser's Help menu to learn the correct way to modify your cookies.

We do not currently support Do Not Track signals, as there is no industry standard for compliance.

We permit the acceptance of essential cookies only for navigation purposes on the Site, or acceptance of all cookies.

7. Analytics and communications

We may use privacy respectful analytics tools to understand how visitors find and use the Site. We may also send you communications about our services where the law allows. You can opt out of marketing emails at any time by using the unsubscribe link in the message or by contacting us.

8. Disclosure of personal information

We disclose personal information only as described below:

• Service providers that help us host the Site, operate analytics, manage forms and scheduling, and send emails. These providers are permitted to use personal information only to provide services to us and must protect it.
• Professional partners where we jointly organize events or publish materials and you accept to be contacted
• Business transfers in connection with a merger, acquisition, or sale of assets
• Legal and safety where required by law or to protect our rights, your safety, or the safety of others.

We do not sell personal information.

9. International transfers

Our service providers may be located outside Québec and Canada. When we transfer personal information outside Québec we assess the privacy protections in the destination and implement appropriate safeguards as required by Québec law and PIPEDA. You can contact us to obtain more information about these safeguards.

10. Data retention

We retain personal information for as long as necessary to meet the purposes described in this Policy, to comply with legal obligations, and to resolve disputes. When information is no longer needed, we delete it or deidentify it according to industry good practices.

11. Security

We implement administrative, technical, and physical safeguards designed to protect personal information against loss, theft, and unauthorized access. While no method of transmission or storage is fully secure, we continually improve our controls and limit access to personal information to those who need it for their work.

12. Your rights and choices

Subject to applicable law, you may have the following rights regarding your personal information:

• Right to be informed about our practices
• Right of access to the personal information we hold about you
• Right to rectification of inaccurate or incomplete information
• Right to withdraw consent for activities based on consent
• Right to cease dissemination and to request deindexation in certain circumstances under Québec law
• Right to erasure where allowed by law
• Right to restriction of processing in specific cases
• Right to data portability where technically feasible under Québec law

To exercise your rights, contact us using the details in Section 15. We will respond within the time limits set by law. We may ask for information to confirm your identity.

Automated decision making and profiling

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing of your personal information. If we ever introduce such features, we will inform you and explain your rights.

13. Additional information for individuals in the EEA and UK

Additional information for individuals in the EEA and UK If you are in the European Economic Area or the United Kingdom and we offer you services or monitor your behavior online, the General Data Protection Regulation or the UK GDPR may apply. In that case we process your personal data on the legal bases of consent, contract, legitimate interests, and legal obligations. You also have the rights listed in Section 12 and the right to object to processing based on legitimate interests and the right to lodge a complaint with a supervisory authority. Where applicable we rely on appropriate safeguards for transfers outside the EEA and UK.

14. Children’s privacy

The Site is intended for business professionals. We do not knowingly collect personal information from children. In Québec, consent for the collection of personal information from minors under fourteen must be given by the holder of parental authority. If you believe a child has provided us with personal information, please contact us so that we can delete it.

15. How to contact us

If you have questions about this Policy or our privacy practices, or if you wish to exercise your rights, please contact our Privacy Officer.

• Email: Connect@wintech-security.com
• Phone: +1 514 360 9181

If you are not satisfied with our response, you may contact the appropriate privacy authority:

• Office of the Privacy Commissioner of Canada 
  Toll free: 1 800 282 1376 
  Online: www.priv.gc.ca
•  
• Commission d’accès à l’information du Québec 
  Online: www.cai.gouv.qc.ca

16. Links to other sites

The Site may contain links to third party websites. We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy notices.

17. Changes to this Privacy Policy

We may update this Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated version on the Site and revise the “Last updated” date above. If changes are material, we will provide a clear notice on the Site before they take effect.