Qum Consulting Privacy Policy

Effective Date: August 19, 2025

Qum Consulting ("we," "us," or "our") is a Canadian tech consultancy firm. We are committed to protecting the privacy of our clients, website visitors, and all individuals whose personal information we collect, use, and disclose. This Privacy Policy outlines how we manage and safeguard your personal information in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA).

By using our website (qumconsulting.ca) or engaging with our services, you consent to the collection, use, and disclosure of your personal information as described in this policy.

1. Accountability

We are responsible for the personal information under our control. We have designated a Privacy Officer who is accountable for our compliance with this policy and PIPEDA. If you have any questions or concerns about our privacy practices, please contact our Privacy Officer at the details provided in Section 8.

2. What Personal Information We Collect

Personal information is any information about an identifiable individual. We collect personal information to provide our services and operate our business effectively. The types of personal information we may collect include:

Contact Information: Name, email address, phone number, and mailing address.
Professional Information: Job title, company name, and business information related to our services.
Website Usage Data: Information collected automatically when you visit our website, such as your IP address, browser type, operating system, pages visited, and the dates and times of your visits. This information helps us understand how our site is used and to improve its functionality.
Communication Data: Records of correspondence and communications between you and us, including emails, meeting notes, and project-related documentation.
Financial Information: Payment details and billing information for invoicing and processing payments for our services.

3. How We Collect and Use Your Personal Information

We collect personal information through fair and lawful means, with your knowledge and consent. We collect and use your information for the following purposes:

To Provide Services: To deliver our tech consultancy services, including project management, software development, IT strategy, and technical support.
To Communicate with You: To respond to your inquiries, provide updates on our services, and send you important notices or information related to your engagement with us.
To Improve our Services: To analyze website usage, understand client needs, and enhance our service offerings and our website's functionality.
For Marketing and Business Development: To send you marketing communications and newsletters about our services, events, or other information we think may be of interest to you. You can opt out of these communications at any time.
For Billing and Payments: To process invoices and manage financial transactions related to the services we provide.
To Meet Legal and Regulatory Requirements: To comply with applicable laws, regulations, and legal processes.

4. Disclosure of Personal Information

We do not sell, rent, or trade your personal information. We may disclose your personal information to third parties only in the following circumstances:

With Your Consent: We will obtain your explicit consent before disclosing your personal information for any purpose not outlined in this policy.
Service Providers: We may share your information with trusted third-party service providers who assist us in operating our business and providing our services (e.g., cloud hosting providers, payment processors, and marketing automation platforms). These providers are bound by confidentiality agreements and are only permitted to use your information to perform the services for which they were engaged.
Legal Compliance: We may disclose your information if required by law, court order, or a government request, or if we believe such disclosure is necessary to protect our rights, property, or safety, or that of others.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal information may be transferred as part of the transaction. We will ensure the new entity adheres to this Privacy Policy or provides you with notice of a new policy.

5. Safeguarding Your Personal Information

We take the security of your personal information seriously and have implemented appropriate physical, technical, and organizational safeguards to protect it from unauthorized access, use, disclosure, loss, or theft. These measures include:

Physical Security: Secure office spaces and restricted access to data storage facilities.
Technical Security: Use of firewalls, encryption, secure network configurations, and access controls.
Organizational Measures: Employee training, confidentiality agreements, and strict internal policies on data handling.

6. Retention of Personal Information

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. When it is no longer needed, we will securely destroy or de-identify the information.

7. Your Rights

Under PIPEDA, you have the right to:

Access: Request access to your personal information that we hold.
Correction: Request that your personal information be corrected if it is inaccurate or incomplete.
Withdraw Consent: Withdraw your consent to the collection, use, or disclosure of your personal information, subject to legal or contractual restrictions. Note that this may affect our ability to provide you with certain services.
Lodge a Complaint: Challenge our compliance with PIPEDA by contacting our Privacy Officer.

To exercise any of these rights, please submit a written request to our Privacy Officer.

8. Contact Information

For any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact:

Qum Consulting

Email: info@qumconsulting.ca

9. Changes to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time. We will post the revised policy on our website with an updated "Effective Date." We encourage you to review this policy periodically to stay informed about how we are protecting your information.

This policy is not a contract and does not create any legal obligations on our part beyond what is required by applicable law.