How we handle your information.

1. Who we are

Uzado Inc.(“Uzado,” “we,” “our,” or “us”) is a Canadian managed service and managed security service provider headquartered at 95 Mural Street, Suite 301, Richmond Hill, ON L4B 3G2, Canada. For questions about this policy or your personal information, contact our Privacy Officer at privacy@uzado.com.

2. Scope of this policy

This policy applies to personal information Uzado collects through www.uzado.com, through direct communications with us (email, phone, contact forms), and through the services we provide to clients under a managed services agreement. It does not apply to personal information collected by third-party services we link to but do not control, such as our Trust Center (trust.uzado.com, operated by Vanta) or our client support portal (support.uzado.com). Those services publish their own privacy notices.

Uzado primarily serves clients in Canada and the United States. We do not geo-block visitors from other jurisdictions. If you are a resident of the European Union, the United Kingdom, or another jurisdiction with specific data protection laws, and you voluntarily provide personal information through this site, we process that information in accordance with this policy and, where applicable, with the additional protections required under the GDPR or UK GDPR. Section 9 describes those protections.

3. Information we collect

We collect two categories of information: what you give us, and what we observe as you use the site.

3.1 Information you give us

• Contact details (name, company name, work email, phone number) when you submit our contact form or correspond with us by email.
• Enquiry content: the subject, message, and any context you provide about your compliance or security situation.
• Professional context: your job title or role, if you include it.

3.2 Information we observe automatically

• Usage data: pages visited, approximate geographic location (derived from IP address), device type, browser, referring URL, and time spent on pages. We use this in aggregated form to understand how the site is used.
• Server logs: IP address, timestamp, and request details retained by our hosting provider for security and reliability.

We do notcollect special categories of personal data (health, biometric, racial or ethnic origin, religious belief, political opinion, sexual orientation) through this site. If you voluntarily disclose such information in a free-text field, please don’t; we don’t need it to respond to your enquiry.

4. How we use your information

We use the information we collect for the following purposes:

• Respond to enquiries. To reply to your message, prepare a proposal, or schedule an introductory call.
• Deliver services. Where you become a client, to perform the services described in our managed services agreement.
• Operate the site. To host, secure, monitor, and improve our website.
• Send requested communications.To send information you’ve specifically asked for, such as a service overview or a follow-up after a call.
• Comply with legal obligations. To meet our obligations under applicable law, including tax, anti-fraud, and record-keeping requirements.

4.1 Commercial electronic messages (CASL)

Under Canada’s Anti-Spam Legislation, when you contact us about our services, you provide implied consent to receive a reasonable response about those services. We rely on express consent for ongoing marketing communications (e.g. a newsletter) and you can withdraw that consent at any time by using the unsubscribe link in any marketing email or by contacting us directly.

4.2 Legal bases (for EU/UK visitors)

Where the GDPR or UK GDPR applies, we rely on the following lawful bases: consent (for optional marketing communications), contract (to respond to pre-contractual enquiries and to deliver services under an agreement), legitimate interests (to operate and secure our site, prevent abuse, and improve our services, balanced against your interests and rights), and legal obligation (to comply with applicable laws).

5. Who we share information with

We don’t sell personal information. We share it only with the service providers we rely on to operate our business, and only to the extent each provider needs to deliver its service. Our current sub-processors are:

Each of these providers is bound by a written agreement that includes confidentiality and data-protection obligations. We maintain an up-to-date list of sub-processors; if you would like a copy, contact privacy@uzado.com.

We also disclose information when required by law (to comply with a valid legal process, court order, or regulatory request), to protect our rights or the safety of others, or in connection with a corporate transaction (e.g. a merger or acquisition), in which case we will provide notice before your information becomes subject to a different privacy policy.

6. International transfers

Uzado is based in Canada. The service providers listed above operate data centers located in Canada. Where personal information is transferred outside Canada, we rely on contractual safeguards, including Standard Contractual Clauses (SCCs) where required by the GDPR or UK GDPR, and written data processing agreements that obligate each provider to protect your information to a standard consistent with this policy.

7. Retention

We keep personal information only for as long as we need it to fulfil the purposes described in this policy, and then for as long as required to comply with legal, accounting, or reporting obligations, resolve disputes, or enforce our agreements. In practice, this means:

• Contact form submissions: emailed directly to our sales team and retained in our mailbox for the lifetime of the active enquiry; archived after 24 months of inactivity.
• Server logs: retained by our hosting provider for up to 30 days.
• Analytics data: retained in aggregate form only. GA4 data is retained per the configured retention period (14 months by default).
• Client records (under a managed services agreement): retained as required by the applicable agreement and by tax and record-keeping laws.

8. Security

We maintain administrative, physical, and technical safeguards designed to protect personal information against unauthorised access, use, disclosure, alteration, or destruction. Uzado is SOC 2 Type 2 compliant, and our security program covers access control, encryption in transit and at rest, vulnerability management, secure development practices, and ongoing employee security training.

No system is perfectly secure. If we experience a breach of security safeguards involving personal information under our control that creates a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada without unreasonable delay, as required by PIPEDA’s Breach of Security Safeguards regulations.

9. Your rights

9.1 For everyone

You have the right to ask us what personal information we hold about you, to correct information that is inaccurate, to withdraw your consent to our use of your information (subject to legal and contractual restrictions), and to complain about our handling of your information. To exercise any of these rights, email privacy@uzado.com. We will verify your identity and respond within 30 days.

You can also file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.

9.2 Additional rights for EU/UK visitors

If you are in the European Union or the United Kingdom, in addition to the rights above, you have the right to: access your personal data, request erasure, request restriction of processing, request data portability, object to processing based on legitimate interests or direct marketing, and not be subject to a decision based solely on automated processing. You also have the right to lodge a complaint with your local supervisory authority.

10. Cookies and similar technologies

This site uses a minimal set of cookies and storage technologies. We aim to keep this list short and truthful. When you first visit, a consent banner lets you accept or reject the optional categories below. Optional cookies are not set until you opt in, and you can change your choice at any time using the Cookie Preferences link in the footer.

• Strictly necessary (always on): a first-party cookie that stores your consent choice, and Google reCAPTCHA (used to protect the contact form from spam). These are required for the site to work and cannot be switched off.
• Analytics (opt-in): if we have enabled Google Analytics 4, it sets a small number of first-party cookies (e.g. _ga) used to measure aggregate site usage. Using Google Consent Mode, no analytics cookies are set until you accept this category. If we are using Vercel Analytics instead, no cookies are set; Vercel Analytics is cookie-free by design.
• Live chat (opt-in): our live-chat widgets (Intercom, 3CX) set cookies to run a chat session. They only load once you accept this category.

When you make or change a choice, we keep a record of it (a random consent identifier, the categories you selected, and the time) so we can honour and evidence your choice. That record does not include your name, email, or IP address. You can also block or delete cookies using your browser settings; rejecting the optional categories will not prevent you from using the site.

11. Children

Our services are directed to businesses, not to individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

12. Third-party links

Our site contains links to third-party sites (for example, our Trust Center, our support portal, LinkedIn, and technology partners). We are not responsible for the privacy practices of those sites. We encourage you to read their privacy notices before providing any personal information.

13. Changes to this policy

We review this policy at least annually and may update it from time to time. The “Last updated” date at the top of this page will reflect the most recent revision. For material changes, we will provide notice through the site or by email before the change takes effect.

14. Contact us

Privacy Officer
Uzado Inc.
95 Mural Street, Suite 301
Richmond Hill, ON L4B 3G2
Canada
Email: privacy@uzado.com
Phone: 888-204-1521