Privacy Policy

Who we are

Cyber Risk Office (“we,” “us”) is a Canadian executive cybersecurity advisory firm. Our website is CyberRiskOffice.com.

What we collect

When you use the Cyber Risk Office Scorecard we collect the information you provide, full name, business name, business email, optional phone number, industry, number of employees and locations, province, IT model, main cybersecurity concern, and your answers to the scorecard questions.

When you contact us through our forms, we collect the details you submit and your consent to be contacted.

Why we collect it

To provide the scorecard results you requested, to respond to your inquiries, and, with your consent, to share relevant advisory communications. We do not use scorecard submissions for automated promotional email without explicit consent.

How it is stored and shared

Submissions are stored securely with trusted service providers used to operate our website, send transactional email, and manage our client records. We do not sell your personal information.

How long we keep it

We retain submissions only as long as necessary to provide our services and for reasonable business, legal, and audit purposes.

Your choices

You can request access to your information, ask us to correct it, or ask us to delete it by contacting us. You can unsubscribe from communications at any time.

Scorecard-specific note

The Cyber Risk Office Scorecard provides general educational information based on the answers submitted. It is not a formal cybersecurity assessment, audit, penetration test, certification, legal opinion, insurance determination, or guarantee of security.

Contact

Questions about this policy? Contact us through the Contact page.