1. Commitment to Privacy
Lorikeet Security Canada ("Lorikeet Security", "we", "us", or "our") is dedicated to protecting the privacy, confidentiality, and security of personal information entrusted to us. As a Canadian cybersecurity consulting organization operating across Calgary, Toronto, and nationwide, our privacy practices comply with Canada's federal Personal Information Protection and Electronic Documents Act (PIPEDA), Alberta's Personal Information Protection Act (PIPA), and applicable provincial privacy laws.
2. Scope of this Policy
This Privacy Policy outlines how we collect, use, disclose, and safeguard personal information obtained through our website (lorikeetsecuritycanada.ca), consultation request forms, newsletter sign-ups, and business inquiries. This policy does not apply to client technical data processed under explicit, non-disclosure-bound Professional Services Agreements, which are governed by specific contractual Rules of Engagement.
3. Information We Collect
We only collect personal information necessary to deliver our cybersecurity consulting and penetration testing services, respond to inquiries, or fulfill legal obligations. This includes:
- Contact Information: Name, work email address, corporate telephone number, job title, and company name provided when submitting inquiry forms.
- Inquiry Details: Information regarding your organization's testing scope, compliance frameworks of interest (e.g. SOC 2, HIPAA, ISO 27001), and technical specifications shared during discovery calls.
- Technical Telemetry: Anonymized server logs, browser type, operating system, and IP address collected for website performance, diagnostic analysis, and security telemetry.
4. How We Use Information
Personal information collected by Lorikeet Security Canada is used strictly for:
- Scoping and delivering offensive security assessments, penetration tests, and compliance readiness programmes;
- Responding to consultation requests, service inquiries, and scheduling scoping calls;
- Sending requested security advisories and monthly threat briefings where explicit consent has been provided;
- Maintaining operational security, preventing unauthorized access, and complying with Canadian legal and regulatory requirements.
5. Safeguards and Storage
We apply robust physical, technical, and administrative safeguards appropriate to the sensitivity of information. These include TLS 1.3 encryption in transit, strict access control, multi-factor authentication for assessors, and Canadian hosting options. We retain personal information only as long as necessary to fulfill the identified commercial purposes or statutory retention windows.
6. Disclosure to Third Parties
We do not sell, rent, or trade personal information to third parties. We disclose personal information only:
- To vetted service providers and infrastructure partners bound by contractual privacy commitments equivalent to PIPEDA standards;
- To comply with a court order, subpoena, or lawful requirement by a Canadian law enforcement agency having competent jurisdiction;
- With your prior informed written consent.
7. Your Privacy Rights
Under Canadian privacy legislation, you have the right to request access to the personal information we hold about you, request corrections to inaccurate records, or withdraw consent to ongoing marketing communications. To exercise your rights, please contact our privacy representative.
8. Contact Our Privacy Officer
If you have questions regarding this Privacy Policy or our personal information practices, please contact us at:
Lorikeet Security Canada - Privacy Office
Email: canada@lorikeetsecurity.com
Locations: Calgary, AB • Toronto, ON
