.png?width=142&height=42&name=a%20(1).png){kind=small}
Privacy
This Privacy Statement was last reviewed and approved on August 30, 2026. This policy is reviewed at least annually to ensure that information is used in conformity with the purposes identified in this privacy notice.
At ALCiT (A la carte Information System Services Inc., “ALCiT”, “we”, “us”) we recognize the importance of protecting your personal information and are committed to processing it responsibly and in compliance with applicable data protection laws in all countries in which ALCiT operates. The laws that apply to us include Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec’s Act respecting the protection of personal information in the private sector as amended by Law 25, applicable United States state privacy laws, and, where we handle the personal information of individuals in the European Economic Area or the United Kingdom, the General Data Protection Regulation (GDPR).
This Privacy Statement describes ALCiT’s general privacy practices that apply to personal information we collect, use and share about consumers and other individuals within our clients, business partners, supplier and other organizations with which ALCiT has or contemplates a business relationship. ALCiT limits the collection of personal information to the purposes identified by the organization.
Why and how we collect and use your personal information
We may collect your personal information as an individual for various purposes, such as the following:
Access and use of websites or other online services
When entering one of our websites, or using an online service, we will record information necessary to provide you with access, for the operation of the website and for us to comply with security and legal requirements in relation to operating our site, such as passwords, IP address and browser settings. We also collect information about your activities during your visit in order to personalize your website experience, such as recording your preferences and settings, and to collect statistics to help us improve and further develop our websites, products and services.
Responding to your request for information, order, or support
When you contact us (online or offline) in connection with a request for information, to order a product or service, to provide you with support, or to participate in a forum or other social computing tool, we collect information necessary to fulfil your request, to grant you access to the product or service, to provide you with support and to be able to contact you. For instance, we collect your name and contact information, details about your request and your agreement with us and the fulfilment, delivery and invoicing of your order and we may include client satisfaction survey information. We retain such information for administrative purposes, defending our rights, and in connection with our relationship with you.
When you provide your name and contact information to register in connection with such a request, the registration may serve to identify you when you visit our websites. For ordering of most services and products we require you to have registered an account. Registration may also allow you to customize and control your privacy settings.
Your use of ALCiT managed and cloud services
We collect information about your use of the managed, monitoring and cloud services we provide to you or to your employer to enable product features to operate, improve your user experience, tailor our interactions with you, inform our clients on the overall use of the services, provide support and improve and develop our products and services. Where we handle this information on behalf of a client, we act as that client’s service provider (processor) and handle it only on the client’s documented instructions and under our services agreement with them; the client’s own privacy policy governs that information.
Contacting employees of our clients, prospects, partners and suppliers
In our relationship with clients or prospects, partners and suppliers, they also provide us with business contact information (such as name, business contact details, position or title of their employees, contractors, advisors and authorized users) for purposes such as contract management, fulfilment, delivery of products and services, provision of support, invoicing and management of the services or the relationship.
Visitor information
We register individuals visiting our sites and locations (name, identification and business contact information) and use camera supervision for reasons of security and safety of persons and belongings, as well as for regulatory purposes.
Marketing
Most information we collect about you comes from our direct interactions with you. When you register for an event we may collect information (online or offline) in relation to the event organization, and during an event, such as participation in sessions and survey results. We combine the personal information we collect to develop aggregate analysis and business intelligence for conducting our business and for marketing purposes. You can choose to receive information by email, telephone or postal mail about our products and services, or sign-up for subscriptions. When visiting our websites or using our services we may provide you with personalized information. You can always opt-out from receiving personalized communication by sending an e-mail to privacy@alcit.com. Commercial electronic messages we send comply with Canada’s Anti-Spam Legislation (CASL): we send them only with your express or implied consent, they identify ALCiT, and every message contains an unsubscribe mechanism that we action within 10 business days.
Where we reference that we use your personal information in connection with a request, order, transaction or agreement (or preparing for the same), or to provide you with services that you requested (such as a website), we do this because it is necessary for the performance of an agreement with you.
Where we reference that we use your personal information in relation to marketing, improvement or development of our products or services, for reasons of safety and security, or regulatory requirements other than in connection with your agreement or request, we do this on the basis of our or a third party’s legitimate interests, or with your consent. When we collect and use your personal information subject to the EU Privacy Legislation this may have consequences for Your Rights.
Sharing of Personal Information
ALCiT operates in Canada and the United States. We have adopted internal policies, standards and procedures for the consistent protection of personal information across our operations. We share personal information only with those of our personnel, affiliates and service providers who need it to deliver, support and bill for our services, and we require them by contract to protect it, to use it only for the purposes we specify, and to return or destroy it when the engagement ends.
Where appropriate, ALCiT may also share your personal information, including your phone number, with selected partners to help us provide you, or the company you work for, products or services, or to fulfill your requests. When selecting our suppliers and partners, we take into account their data handling processes. We do not sell your personal information.
Please be aware that in certain circumstances, personal information may be subject to disclosure to government agencies pursuant to judicial proceeding, court order, or legal process. We may also share your personal information to protect the rights or property of ALCiT, our business partners, suppliers or clients, and others when we have reasonable grounds to believe that such rights or property have been or could be affected. Where we are legally permitted to do so, we will notify the affected client before disclosing personal information in response to a government or law enforcement demand, and we will challenge demands that are overbroad or unlawful.
International Transfers
Personal information we hold may be stored or processed outside your province and outside Canada, principally in the United States, by us or by the service providers listed below. While it is in another country, personal information may be accessible to the courts, law enforcement and national security authorities of that country under its laws. Before we transfer personal information outside Quebec we carry out the privacy impact assessment required by Law 25 and confirm that the information will receive adequate protection. Where personal information is transferred from the European Economic Area or the United Kingdom, we rely on the European Commission’s standard contractual clauses (and the UK addendum) together with supplementary safeguards. You can request more information about these safeguards by writing to privacy@alcit.com.
Information Security and Accuracy
We intend to protect your personal information and to maintain its accuracy. ALCiT implements reasonable physical, administrative and technical safeguards to help us protect your personal information from unauthorized access, use and disclosure. We also require that our suppliers protect such information from unauthorized access, use and disclosure.
Retention Period
We will not retain personal information longer than necessary to fulfil the purposes for which it is processed, including the security of our processing complying with legal and regulatory obligations (e.g. audit, accounting and statutory retention terms), handling disputes, and for the establishment, exercise or defence of legal claims in the countries where we do business. We maintain a retention schedule that sets a retention period for each category of record, and we securely destroy or anonymize personal information once the applicable period ends. The categories of records we retain include client and contract records, service and support tickets, security telemetry and system logs, marketing and CRM records, and accounting and tax records. You can ask us for the retention periods that apply to your information by writing to privacy@alcit.com.
Cookies and similar technologies
Our websites use cookies and similar technologies that collect information capable of identifying you, tracking your activity across our site, or establishing a profile of your interests. Strictly necessary cookies are used to operate and secure the site. Analytics and marketing cookies are used only with your consent, which you give or refuse through the banner presented on your first visit and can change at any time through the same banner or through your browser settings. Our website is also protected by a content delivery and security network, which processes your IP address and request metadata to filter malicious traffic and sets only strictly necessary cookies.
Automated decision-making
We use AI-enabled and automated tools to help deliver our services, including security monitoring and threat detection, log and alert analysis, service desk triage, and customer support. We do not make decisions that produce legal or similarly significant effects about you based exclusively on the automated processing of your personal information. If this changes, we will inform you at the time of the decision, tell you which personal information was used and the principal factors that led to it, and give you the opportunity to submit observations to a member of our personnel who is able to review the decision.
Confidentiality and security incidents
We maintain a register of confidentiality incidents involving personal information. Where an incident presents a real risk of significant harm or a risk of serious injury, we notify the affected individuals and the Office of the Privacy Commissioner of Canada, the Commission d’accès à l’information du Québec, and any other authority to which notice is owed, without unreasonable delay. Where we handle personal information on behalf of a client, we notify that client promptly and support their own notification obligations.
Children
Our services are directed to organizations and business users, and we do not knowingly collect personal information from children.
Job applicants
We post our openings and receive applications through Indeed and LinkedIn, and we collect the information contained in your application and in any assessment or reference you provide. We use it only to evaluate your candidacy, to communicate with you about the role, and to meet our legal obligations. Where a role requires it, we ask for your separate written consent before we obtain a criminal record or background check through our screening provider, Sterling Backcheck; you may refuse, and you are entitled to be told the result and to challenge information you believe is inaccurate. We retain unsuccessful applications for 24 months and then destroy them, unless you ask us to keep your file on record for future openings. Personal information about our employees and contractors is governed by a separate internal privacy notice, available from the Privacy Officer.
Sub-processors
ALCiT uses the following service providers to store or process your information. This list is current as of the date at the top of this Statement, and we update it when we add or remove a provider:
Atlassian
Customer support
Level 6, 341 George Street
Sydney NSW 2000 Australia
https://www.atlassian.com/legal/cloud-terms-of-service
https://www.atlassian.com/legal/privacy-policy
Amazon Web Services
Hosting & Data storage
410 Terry Avenue North
Seattle, WA 98109-5210
https://aws.amazon.com/privacy/
HubSpot
CRM
2 Canal Park
Cambridge, MA 02141
https://legal.hubspot.com/terms-of-service
https://legal.hubspot.com/privacy-policy
Microsoft
Hosting, Email, Docs, Analytics, Azure cloud services, Defender and Sentinel security services
One Microsoft Way
Redmond, WA 98052-6399
https://www.microsoft.com/en/microsoft-365/business/terms-and-conditions
https://privacy.microsoft.com/
Wasabi
Data storage
2860-111 Huntington Avenue
Boston, MA 02199
https://wasabi.com/legal/customer-agreement/
https://wasabi.com/legal/privacy-policy/
Arctic Wolf
Managed detection and response, SIEM and security monitoring
https://arcticwolf.com/wp-content/uploads/2026/06/Privacy-Notice_GENERAL_2026.06-FINAL.pdf
Mimecast
Email security, continuity and archiving
https://www.mimecast.com/legal/terms-of-use/
https://www.mimecast.com/legal/privacy-statement/
Cloudflare
Website security, DDoS protection and content delivery
https://www.cloudflare.com/en-ca/website-terms/
https://www.cloudflare.com/en-ca/privacypolicy/
Indeed
Job postings and applicant management
https://www.indeed.com/legal/indeed-jobs
Recruiting, job postings and business-to-business sales and marketing
https://www.linkedin.com/legal/l/service-terms
https://www.linkedin.com/legal/privacy-policy
Sterling Backcheck (a First Advantage company)
Pre-employment background and criminal record screening
https://www.sterlingbackcheck.ca/
https://www.sterlingcheck.com/about-sterling/platform-terms-of-use/
How to contact us
If you have a question related to this Privacy Statement, please contact us at privacy@alcit.com. ALCiT’s Privacy Officer, who is the person in charge of the protection of personal information for the purposes of PIPEDA and Law 25, is Loïc Calvez, CEO. You may write to the Privacy Officer at privacy@alcit.com or at 5-2475 Skymark ave, Mississauga, ON, L4W 4Y6. We respond to requests within 30 days.
Your Rights
You can request to access, update, delete, or correct your personal information. You also have the right to object to direct marketing, to withdraw a consent you previously gave, to receive the computerized personal information you provided to us in a structured, commonly used technological format, and to ask us to stop disseminating your personal information or to de-index a link to it where the law allows. You can make a request by writing to privacy@alcit.com. We will confirm your identity before acting on a request, and we will tell you in writing if we refuse it, giving our reasons and the recourse available to you.
You may have additional rights pursuant to your local law applicable to the processing. For example, if the processing of your personal information is subject to the EU General Data Protection Regulation (“GDPR”), you also have the right to restrict or object to processing, the right to data portability, and the right not to be subject to decisions based solely on automated processing. If you are a resident of California, Colorado, Connecticut, Virginia or another United States state with a comprehensive privacy law, you have the right to know the categories of personal information we collect and the purposes for which we use them, to obtain a copy of that information, to correct or delete it, to opt out of any sale, sharing or targeted advertising and of profiling with legal or similarly significant effects, and not to be discriminated against for exercising these rights. You may use an authorized agent to make a request on your behalf, and you may appeal a refusal by writing to privacy@alcit.com.
Right to Lodge a Complaint
In the event you consider our processing of your personal information not to be compliant with the applicable data protection laws, you can lodge a complaint via email at privacy@alcit.com. You may also complain directly to the regulator that applies to you: the Office of the Privacy Commissioner of Canada (priv.gc.ca), the Commission d’accès à l’information du Québec (cai.gouv.qc.ca) if you are in Quebec, your state attorney general if you are in the United States, or your local supervisory authority if you are in the European Economic Area or the United Kingdom.
From time to time we may update this Privacy Statement, as well as any other specific privacy statement. When making changes to this Privacy Statement, we will post the updated version on our website and change the date at the top. Where the changes are significant, we will give you notice by email or by a notice on our website before they take effect, and where the law requires it we will ask for your consent.
.png)
