Privacy Policy

Who we are

Cyber Risk Office (“we,” “us”) is a Canadian executive cybersecurity advisory firm. Our website is CyberRiskOffice.com.

What we collect

When you use the Cyber Risk Office Scorecard we collect the information you provide, full name, business name, business email, optional phone number, industry, number of employees and locations, province, IT model, main cybersecurity concern, and your answers to the scorecard questions.

When you contact us through our forms, we collect the details you submit and your consent to be contacted.

Why we collect it

To provide the scorecard results you requested, to respond to your inquiries, and, with your consent, to share relevant advisory communications. We do not use scorecard submissions for automated promotional email without explicit consent.

How it is stored and shared

Submissions are stored securely with trusted service providers used to operate our website, send transactional email, and manage our client records. We do not sell your personal information.

How long we keep it

We retain submissions only as long as necessary to provide our services and for reasonable business, legal, and audit purposes.

Your choices

You can request access to your information, ask us to correct it, or ask us to delete it by contacting us. You can unsubscribe from communications at any time.

Scorecard-specific note

The Cyber Risk Office Scorecard provides general educational information based on the answers submitted. It is not a formal cybersecurity assessment, audit, penetration test, certification, legal opinion, insurance determination, or guarantee of security.

Canadian privacy law

We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, including Quebec's Law 25. Commercial electronic messages are sent only with consent as required by Canada's Anti-Spam Legislation (CASL), and every message includes an unsubscribe option.

Cookies and analytics

We use only the cookies needed to operate the site and basic, aggregated analytics to understand which pages are useful. You can block or delete cookies in your browser settings at any time.

Privacy officer and complaints

Our privacy officer can be reached at info@cyberriskoffice.com. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca, or your provincial privacy regulator, such as the Commission d'accès à l'information du Québec.

Contact

Questions about this policy? Contact us through the Contact page or at info@cyberriskoffice.com.