Logo CTC
Let’s Talk

Privacy Policy

Effective Date: June 18, 2026 | Last Updated: June 18, 2026

This policy applies to solutionsctc.com. It is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, Quebec’s Act respecting the protection of personal information in the private sector (Law 25).

1. Who We Are

Solutions CTC Inc. (“CTC”, “we”, “us”, “our”) is a digital platform engineering company based in Canada. We partner with enterprise and mid-market organizations to modernize, stabilize, and scale complex digital platforms.

Our website is located at https://solutionsctc.com. Questions about this policy should be directed to our Privacy Officer (see Section 12).

2. Scope of This Policy

This policy covers personal information collected through solutionsctc.com, including contact forms, newsletter sign-ups, analytics, and cookies. It does not cover personal information collected under separate client agreements or employment relationships, which are governed by distinct arrangements.

3. Information We Collect

3.1 Information You Provide

When you interact with our website, you may voluntarily provide:

  • Name and job title
  • Business email address
  • Company name and industry
  • Phone number (if included in a form)
  • Message content submitted through contact or inquiry forms
  • Email address for newsletter subscription

3.2 Information Collected Automatically

When you visit our website, we and our service providers automatically collect certain technical information, including:

  • IP address and approximate geographic location (city and country level)
  • Browser type and version, operating system
  • Pages visited, time on page, referral source
  • Device identifiers and screen resolution
  • Cookie identifiers and similar tracking technologies

3.3 What We Do Not Collect

We do not collect payment card information, government identification numbers, health information, or other sensitive personal information through our website.

4. Why We Collect This Information

We collect and use personal information only for identified, legitimate purposes:

  • Responding to inquiries and requests submitted through our contact forms
  • Sending our Insights newsletter to subscribers who have opted in
  • Analyzing website traffic and user behavior to improve our website and content
  • Understanding how visitors find and use our site for analytics and optimization
  • Complying with applicable legal obligations

We will not use your personal information for purposes other than those listed above without your prior consent, or unless otherwise permitted by law.

5. Legal Basis for Processing

Under PIPEDA and Quebec Law 25, we process your personal information on the following bases:

  • Consent: For newsletter subscriptions and non-essential cookies, we rely on your express consent. You may withdraw consent at any time (see Section 9).
  • Legitimate interest: For security monitoring, fraud prevention, and basic website analytics where not consent-based under applicable law.
  • Legal obligation: Where we are required to retain or disclose information by law.

Where Quebec Law 25 applies, we will not infer consent from inaction. Consent for the collection of sensitive information will always be explicit.

6. Cookies and Tracking Technologies

6.1 Types of Cookies We Use

  • Strictly necessary cookies: Required for the website to function. Cannot be disabled.
  • Analytics cookies: Help us understand how visitors interact with our site (for example, Google Analytics). These are only set with your consent.
  • Preference cookies: Remember settings and choices you have made. Set with your consent.

6.2 Cookie Consent

When you first visit our website, you will be presented with a cookie consent banner. You may accept, reject, or customize non-essential cookies. You can change your preferences at any time by clearing your browser cookies and revisiting our site.

Residents of Quebec have the right to refuse or withdraw consent for non-essential cookies without any negative consequence to your access to our content.

7. Disclosure of Personal Information

7.1 Service Providers

We share personal information with trusted third-party service providers who assist us in operating our website and delivering our services, including:

  • Website hosting and infrastructure providers
  • Email service providers for newsletter delivery
  • Analytics platforms such as Google Analytics
  • CRM platforms used to manage contact inquiries

These providers are contractually required to protect your information and may only use it to deliver services on our behalf.

7.2 Legal Requirements

We may disclose personal information if required to do so by law, court order, or lawful government authority. Where permitted, we will notify you before disclosing your information.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction. We will notify affected individuals before personal information becomes subject to a materially different privacy policy.

7.4 No Sale of Personal Information

We do not sell, rent, or trade personal information to third parties for their own marketing purposes.

8. Cross-Border Data Transfers

Some of our service providers are located outside Canada, including in the United States. When personal information is transferred outside Canada, it may be subject to the laws of the receiving jurisdiction, including lawful access by foreign governments.

We take reasonable steps to ensure that international service providers maintain privacy protections equivalent to those required under PIPEDA. If you are a resident of Quebec, please note that transfers of personal information outside Quebec must satisfy the requirements of Law 25, including a privacy impact assessment where applicable.

9. Your Privacy Rights

9.1 Rights Under PIPEDA (All Canadian Residents)

  • Right of access: Request a copy of the personal information we hold about you.
  • Right to correction: Request that inaccurate or incomplete information be corrected.
  • Right to withdraw consent: Withdraw your consent to the collection, use, or disclosure of your information at any time, subject to legal or contractual restrictions.
  • Right to challenge compliance: Lodge a complaint with us or the Office of the Privacy Commissioner of Canada.

9.2 Additional Rights Under Quebec Law 25 (Quebec Residents)

  • Right to data portability: Request that personal information you have provided be transmitted to you or a designated third party in a structured, commonly used technological format.
  • Right to de-indexing and erasure: Request that personal information published online be de-indexed or that links to such information be suppressed, where the information was collected when you were a minor or where its dissemination causes you serious harm.
  • Right to be informed of automated decisions: Request information about any automated decisions made using your personal information and request human review where applicable.
  • Right to file a complaint with the CAI: Residents of Quebec may file complaints with the Commission d’accès à l’information du Québec.

9.3 How to Exercise Your Rights

To exercise any of the above rights, contact our Privacy Officer at the address in Section 12. We will respond within 30 days of receiving a verified request. In some cases, we may need to verify your identity before processing your request.

10. Data Retention

  • Contact form inquiries: Retained for up to 24 months from the date of submission, or until the business relationship concludes.
  • Newsletter subscriber data: Retained until you unsubscribe. After unsubscription, we retain a suppression record to prevent inadvertent re-addition.
  • Analytics data: Aggregated or anonymized data may be retained indefinitely. Individual identifiers are deleted or anonymized within 26 months.
  • Legal obligations: Some records may be retained for longer periods where required by law.

When personal information is no longer required, we securely destroy or anonymize it.

11. Security Safeguards

We implement administrative, technical, and physical safeguards appropriate to the sensitivity of the personal information we hold, including:

  • Encrypted data transmission using TLS/HTTPS for all website traffic
  • Access controls limiting personal information to authorized personnel on a need-to-know basis
  • Regular review of our privacy and security practices
  • Vendor due diligence to ensure third-party service providers maintain appropriate safeguards

No method of transmission over the internet is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security.

11.1 Privacy Breach Notification

In the event of a privacy breach that poses a real risk of significant harm, we will notify affected individuals and the applicable privacy commissioner(s) as required by law. Quebec residents will be notified in accordance with Law 25 requirements, including notification to the Commission d’accès à l’information where required.

12. Privacy Officer

Solutions CTC Inc. has designated a Privacy Officer who is accountable for our compliance with PIPEDA and applicable provincial privacy laws.

Privacy Officer
Solutions CTC Inc.
Email: privacy@solutionsctc.com
Website: solutionsctc.com/contact

You may also contact the Office of the Privacy Commissioner of Canada (OPC) at www.priv.gc.ca or 1-800-282-1376, or the Commission d’accès à l’information du Québec (CAI) at www.cai.quebec.ca.

13. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. When we make material changes, we will update the “Last Updated” date at the top of this document and, where appropriate, notify you directly.

Your continued use of solutionsctc.com after any changes constitutes acceptance of the updated policy.

14. Privacy by Design and Default

Consistent with the principles of Privacy by Design and the requirements of Quebec Law 25, we incorporate privacy protections into our practices from the outset. By default, we collect only the minimum personal information necessary for the identified purpose. Non-essential data collection requires your active consent and is not enabled by default.