Last updated: 12/08/25

WHO WE ARE

This Privacy Policy describes how Sectus Technologies Inc. and its affiliated entities (“Sectus”, “we”, “us”, “our”) collect, use, disclose and protect personal information when you:

visit our websites, including sectustechnologies.com and any localized versions (the “Site”); and

use our online forms, newsletter subscriptions and other digital touchpoints.

Sectus’ head office is located at:

Sectus Technologies Inc.
4408 Louis-B. Mayer
Laval, QC H7P 0G1
Canada

We also operate offices in Ontario (Canada), Barbados and the Dominican Republic.

WHICH LAWS APPLY

Because Sectus is headquartered in Quebec and operates across Canada and internationally, our handling of personal information is primarily governed by:

Quebec’s Act respecting the protection of personal information in the private sector, as modernized by Law 25 (the “Quebec Private Sector Act”); and

Canada’s Personal Information Protection and Electronic Documents Act (“PIPEDA”), which sets rules for the collection, use and disclosure of personal information in commercial activities across Canada and for information that crosses provincial or national borders.

Depending on where you are located, other local privacy laws may also apply. If those laws provide you with additional rights, we will respect them.

PERSON RESPONSIBLE FOR THE PROTECTION OF PERSONAL INFORMATION

Quebec law requires every organization to appoint a person responsible for the protection of personal information and to publish their title and contact information.

At Sectus, the person exercising the highest authority acts as the person in charge of the protection of personal information (the “Privacy Officer”), who may delegate certain responsibilities in writing.

You can reach the Privacy Officer at:

Attn: Privacy Officer
Sectus Technologies Inc.
4408 Louis-B. Mayer
Laval, QC H7P 0G1
Canada
Email: privacy@sectustechnologies.com
Subject line: “Privacy – Request”

WHAT PERSONAL INFORMATION WE COLLECT

We collect personal information that you provide directly, that is generated by your use of the Site, or that we obtain from third parties in accordance with applicable law. “Personal information” means information about an identifiable individual, including information that can identify you directly or indirectly.

4.1 Information you provide to us

When you use our Site or contact us, we may collect, for example:

Contact and identification details: full name, email address, phone number, country, company name, job title.

Business details: solution interests (for example “Security Checkpoint”, “Ports and Borders”), type of inquiry (general, sales, support, partnerships, careers).

Message content: information you choose to include in free-text fields (such as “Message”, “Anything else we should know?”).

Marketing preferences: your consent choice to receive occasional marketing updates from Sectus and your subscription status to our newsletter or insights.

Partnership and OEM information: contact name, work email, company, website, product category, target markets and launch timeline when you submit our “Partner with Sectus” or similar form.

Event, rental or quote requests: information you provide when requesting rentals or proposals (for example, type of equipment, event details, dates, locations).

Recruitment information: if you contact us regarding careers, we may collect information about your professional experience, CV, references and any details you choose to share.

Please do not provide sensitive personal information unrelated to our services (such as health data, social insurance numbers, financial account numbers) via our online forms.

4.2 Information collected automatically

When you access the Site, we and our service providers may automatically collect:

Device and usage data: IP address, browser type and version, operating system, language settings, date and time of access, pages viewed, links clicked, referring and exit pages, approximate location (for example city or region inferred from IP).

Technical identifiers and logs: device identifiers, cookie IDs, session IDs and similar information needed to operate and secure the Site.

4.3 Cookies and similar technologies

We use cookies and similar technologies:

to make the Site function properly (essential cookies);

to remember your preferences;

to understand how visitors use our Site (analytics); and

in some cases, to support marketing and business development (for example via analytics or advertising tools).

Under Quebec Law 25 and PIPEDA, we must obtain meaningful, express and informed consent before using non-essential cookies or similar technologies that involve personal information, especially for tracking and profiling.

Accordingly:

Non-essential cookies will only be activated after you have provided consent via our cookie banner or equivalent mechanism, where implemented and required.

You may withdraw or change your cookie preferences at any time via the cookie banner (where available) or your browser settings.

If you block or refuse certain cookies, parts of the Site may not function optimally.

WHY WE USE PERSONAL INFORMATION (PURPOSES)

We collect and use your personal information for the following purposes, in each case in accordance with applicable law:

Responding to inquiries and providing services

Processing contact and quote requests.

Providing product, solution and service information.

Scheduling demos, meetings and calls.

Sales, partnerships and business development

Qualifying and following up on sales opportunities.

Managing OEM, channel and technology partner relationships.

Managing account-based marketing and joint pursuits, where applicable.

Marketing communications

Sending security insights, product updates, case studies, events and related marketing communications when you have opted in or where permitted by law.

Managing your communication preferences and unsubscribe requests.

Site operation, security and improvement

Operating, maintaining and securing the Site and our systems.

Measuring and improving site performance, content relevance and user experience.

Detecting and preventing fraud, abuse or cyber threats.

Legal and compliance purposes

Complying with legal and regulatory requirements, including privacy and data-security obligations (such as incident registers and breach notifications).

Responding to lawful requests from public authorities and regulators.

Establishing, exercising or defending legal claims.

Recruitment and HR (if applicable)

Evaluating candidates who contact us regarding careers.

Managing hiring processes, background checks (where permitted), and onboarding.

We will not use your personal information for new, incompatible purposes without first obtaining any additional consent required by law.

LEGAL BASIS AND CONSENT

Under Quebec’s Private Sector Act and PIPEDA, we generally rely on:

Your consent: for most marketing communications and for non-essential cookies and tracking technologies. Consent must be free, informed, specific to each purpose and given in clear language. You may withdraw your consent at any time without affecting prior processing.

Legitimate and serious purposes / reasonable purposes: for example, operating the Site, responding to your direct inquiries, ensuring security, managing our business relationships, and keeping records we must maintain under law.

You may withdraw your consent, where applicable:

by using unsubscribe links in our emails;

by adjusting cookie preferences or browser settings; or

by contacting the Privacy Officer.

WITH WHOM WE SHARE PERSONAL INFORMATION

We do not sell your personal information. We may share it with:

Service providers
We use third-party service providers to support our operations, such as:

website and cloud hosting providers;

email and marketing automation platforms;

customer relationship management (CRM) systems;

analytics, cookie-consent and tag-management tools; and

IT security and support providers.

These providers are contractually required to protect personal information and to process it only on our instructions and for the purposes described above.

Business partners and OEMs
Where appropriate, and with your consent where required, we may share limited contact details and project information with OEMs and technology partners. For example, this may occur when we need their input to respond to a joint opportunity, to support solution design, or to provide services and support.

Corporate transactions
In connection with a merger, acquisition, financing, or sale of all or part of our business, your personal information may be transferred as part of the transaction, subject to appropriate safeguards and as permitted by law.

Legal and regulatory authorities
We may disclose personal information where required or permitted by law, including to comply with court orders, government or regulatory requests, or to protect our rights, property or safety, or those of our employees, clients or partners.

INTERNATIONAL TRANSFERS

Because Sectus serves clients across Canada, the Caribbean and Latin America and uses cloud-based services, personal information may be stored and processed in:

Quebec and other Canadian provinces;

the United States; and

other countries where our service providers are located.

When personal information is transferred outside Quebec, we assess factors such as the sensitivity of the information, the purposes of the transfer and applicable legal protections, as required by Quebec’s Private Sector Act.

When information is transferred outside Canada, it may be subject to the laws of those jurisdictions and accessible to foreign authorities in accordance with those laws.

HOW LONG WE KEEP PERSONAL INFORMATION

We keep personal information only as long as necessary to fulfil the purposes described in this Policy or as required by law, including:

while we maintain an active business relationship with you;

for a reasonable period afterwards to respond to questions, complaints or disputes; and

for longer where legal, accounting or regulatory requirements apply.

After that, we will delete, anonymize or aggregate the information in accordance with our retention and destruction policies.

HOW WE PROTECT PERSONAL INFORMATION

We implement technical, organizational and physical safeguards appropriate to the sensitivity of the personal information we hold. These safeguards are designed to protect personal information against loss, theft and unauthorized access, use, modification or disclosure.

Examples include:

role-based access controls and need-to-know restrictions;

secure networks and systems, encryption and monitoring where appropriate;

internal policies and training on privacy and information security; and

procedures for managing, logging and documenting confidentiality incidents, and, where required, notifying authorities and affected individuals.

No safeguard can guarantee absolute security; however, we take reasonable steps to protect personal information consistent with industry practices and applicable legal requirements.

YOUR RIGHTS

Under Quebec law, PIPEDA and other applicable legislation, you may have the following rights:

Right of access: to know whether we hold personal information about you and to receive a copy of that information, subject to certain exceptions.

Right to rectification: to request correction of inaccurate, incomplete or outdated information.

Right to withdraw consent: for processing based on your consent (for example marketing communications or non-essential cookies).

Right to erasure and de-indexation (where applicable): to request deletion of personal information in certain circumstances, subject to our legal obligations and retention requirements.

Right to data portability (Quebec, where technically feasible): to receive computerized personal information in a structured, commonly used technological format and to have it transmitted to another organization.

Right to object or restrict: in certain cases, to object to or request restriction of processing, for example where processing is based on legitimate interest.

Rights regarding automated decision-making: if we use personal information to make decisions based solely on automated processing that have significant effects, you may have the right to be informed and to request information about the factors and main parameters underlying the decision, as well as your right to have a human review where required.

If you are located in a jurisdiction that grants additional rights (for example in the European Union or United Kingdom), you may also exercise those rights by contacting us.

How to exercise your rights

To exercise your rights, contact the Privacy Officer using the contact details in section 3. To help us respond, please:

identify yourself and provide sufficient information for us to verify your identity;

describe your request with as much detail as possible; and

indicate the jurisdiction where you are located (for example Quebec, Ontario, Barbados).

We will respond within the time limits set out in applicable laws.

You also have the right to lodge a complaint with the relevant privacy regulator, such as:

the Commission d’accès à l’information du Québec (CAI); or

the Office of the Privacy Commissioner of Canada (OPC).

THIRD-PARTY WEBSITES

Our Site may contain links to third-party websites, services and content (for example OEM partners, media coverage, conference organizers). These sites are not controlled by Sectus, and their privacy practices are governed by their own policies. We encourage you to review the privacy policy of every site you visit.

CHILDREN

Our Site and services are intended for professional and institutional use, not for children under 14 years of age. We do not knowingly collect personal information from children under 14 without parental consent as required by law. If you believe that a child has provided us with personal information without appropriate consent, please contact the Privacy Officer and we will take steps to delete such information.

UPDATES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements or other factors. When we make material changes, we will update the “Last updated” date at the top of this page and, where required, provide more prominent notice and/or seek your renewed consent.

Your continued use of the Site after an update constitutes your acknowledgement of the revised Policy.