Privacy

Privacy policy

This policy explains what personal information 360ISS Inc. collects through 360iss.com, why we collect it, and the choices you have. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and collect only what we need to respond to you and run our services.

Last updated

Who we are

360ISS Inc. is a technology services company based in Ontario, Canada. We are responsible for the personal information described in this policy. Questions or requests about your information go to our privacy contact at projects@360iss.com.

What we collect

We collect information you choose to send us, information needed to run client accounts, and limited technical information about how the site is used. We do not buy personal information, and we do not sell or rent it to anyone.

  • Inquiry form: your name, work email, the service area you choose and any project details you write. We use it only to respond to your inquiry.
  • Client portal: for clients, the account details, project records, requests and messages needed to deliver the work we agreed.
  • Analytics (only with your consent): if you accept cookies, Google Analytics (through Google Tag Manager) and Microsoft Clarity record pages visited, clicks, device and approximate location so we can see which pages help people. Clarity loads only after acceptance; page text and form input contents are masked, and client/staff portal pages are excluded. If you reject, analytics cookies stay off.
  • Technical logs: our hosting providers process IP addresses and request details to deliver pages, block abuse and limit repeated form submissions.

Cookies and your choices

Analytics and advertising cookies are off by default. A banner asks for your choice on your first visit, and you can change it at any time with "Cookie settings" in the site footer. Rejecting cookies does not affect the inquiry form or any other part of the site.

We use Google Consent Mode: until you accept, Google tags may send cookieless signals that do not identify you. Your choice is stored in your browser's local storage so we do not ask again on every page.

How we use and share information

We use your information to answer inquiries, deliver and support client work, keep the site secure and improve our content. Only the 360ISS team can see inquiries and portal records. We share information with service providers only as needed to run the site and our services.

These providers include DigitalOcean (hosting and database, Toronto region), Cloudflare (domain and network services), Google (Workspace email, Tag Manager and Analytics) and Microsoft (Clarity). Some providers may process information outside Canada, where it can be subject to local laws. We may also disclose information when the law requires it.

Microsoft collects or receives personal data through Clarity to provide its services and Microsoft Advertising, under the Microsoft Privacy Statement. Our integration sends advertising storage consent as denied. Microsoft acts as an independent controller; see its statement for its data uses and your choices. Reject or withdraw analytics consent using "Cookie settings" to prevent loading Clarity on subsequent pages and clear its cookies on the current page.

How long we keep it

We keep inquiry details for up to 24 months after our last contact with you, then delete them, unless you become a client. Client records are kept for the duration of our engagement and as long afterwards as tax, accounting and contract obligations require. Analytics data is retained according to the settings in each analytics tool.

How we protect it

We protect personal information with access limited to the 360ISS team, encrypted connections (HTTPS), hashed passwords for portal accounts, rate limiting on forms and an audit trail of staff actions in our systems. No method of transmission or storage is perfectly secure, but we act promptly on any suspected breach, including notifying you and the Privacy Commissioner where required.

Your rights

You can ask to see the personal information we hold about you, ask us to correct it, or withdraw your consent and ask us to delete it, subject to legal limits. Email projects@360iss.com and we will respond within 30 days.

If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada. Visitors from the European Union also have rights under the GDPR, including access, correction, deletion, objection and complaint to their local data protection authority.

Changes to this policy

We update this policy when our practices change. The "Last updated" date at the top shows when it last changed. Significant changes affecting clients will also be communicated directly.