Effective Date: April 6, 2026
Netxafe is committed to protecting the privacy of every individual and organisation that interacts with our website and services. This Privacy Policy explains how we collect, use, store, and protect personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy law.
By visiting syberfence.ca or engaging our services, you agree to the terms of this Privacy Policy.
1. Who We Are
Netxafe is a Canadian cybersecurity company based in Ottawa, Ontario. We provide cybersecurity scanning, auditing, and compliance monitoring services to healthcare practices and professional service firms across Canada. We are the data controller for all personal information collected through our website and service delivery.
2. Information We Collect
Information you provide directly
- Your name and professional title
- Business name, address, and contact information
- Email address and phone number
- Domain names and staff email addresses submitted for scanning (with consent)
- Payment information (processed by third-party providers — we do not store card details)
- Any information included in contact forms or correspondence
Information collected automatically
- IP address and browser type
- Pages visited and time spent on our website
- Cookie data (see our Cookie Policy for full details)
Information collected during service delivery
- Domain name and associated DNS, SSL, and network exposure data
- Staff email addresses submitted by authorised representatives for breach checking
- Security vulnerability findings specific to your organisation
3. How We Use Your Information
We use your information to deliver contracted services, respond to enquiries, process payments, improve our services, and comply with legal obligations. We do not use your personal information for marketing without your consent, and we never sell, rent, or trade your information to any third party.
4. How We Store and Protect Your Information
All client data is encrypted in transit using TLS 1.2 or higher and encrypted at rest. Access is limited to authorised personnel only. All data is stored on servers located in Canada. We do not transfer personal information outside Canada without your explicit consent.
5. Data Retention
- Contact form submissions: 12 months from last contact
- Scan reports and findings: 24 months from date of delivery
- Billing records: 7 years as required by Canadian tax law
- Retainer client data: duration of service agreement plus 24 months
6. Your Rights Under PIPEDA
You have the right to access, correct, or request deletion of your personal information. You may also withdraw consent for processing at any time. To exercise any of these rights, contact legal@netxafe.ca. We will respond within 30 days.
7. Contact
“The Privacy Officer”: legal@netxafe.ca | netxafe.ca | Ottawa, Ontario, Canada