Privacy Policy

Introduction

Nonprofit IT Solutions ("we," "our," or "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website at nonprofititsolutions.com (the "Site") or use our cybersecurity and compliance services (the "Services").

We understand the importance of data protection for nonprofit organizations, and we hold ourselves to the same high standards that we recommend to our clients. Please read this Privacy Policy carefully. By accessing or using our Site or Services, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy.

Information We Collect

Information You Provide to Us

We may collect personal information that you voluntarily provide to us when you:

• Complete forms on our website, including contact forms
• Use our Cybersecurity Health Check Tool
• Register for events or webinars
• Subscribe to our newsletter
• Request information about our services
• Enter into service agreements with us

The personal information we collect may include:

• Contact information (name, email address, phone number, organization name)
• Professional information (job title, department)
• Organization details (size, sector, address)
• Information about your organization's security practices and infrastructure (through our assessment tools)
• Communication preferences

Information We Collect Automatically

When you visit our Site, we may collect certain information automatically, including:

• IP address
• Browser type and version
• Operating system
• Referring website
• Pages viewed and interactions with our Site
• Date and time of your visit
• Device information

We collect this information using cookies and similar technologies. Please see our Cookie Policy for more information about our use of cookies.

How We Use Your Information

We use the information we collect for various purposes, including to:

• Provide, maintain, and improve our Services
• Process and fulfill your requests and inquiries
• Generate and provide personalized cybersecurity recommendations
• Communicate with you about our Services, security updates, and other relevant information
• Send you marketing communications (with your consent)
• Analyze and understand how users access and use our Site and Services
• Detect, prevent, and address technical issues, fraud, or illegal activity
• Comply with legal obligations
• Protect our rights, property, and safety, and the rights, property, and safety of our users or others

Information Sharing and Disclosure

We value your privacy and do not sell your personal information. We may share your information in the following circumstances:

Service Providers

We may share your information with trusted third-party service providers who perform services on our behalf, such as website hosting, data analysis, payment processing, and customer service. These service providers are contractually obligated to use your personal information only to provide the services requested by us.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court order, government request).

Business Transfers

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Site of any change in ownership or uses of your personal information.

With Your Consent

We may share your information with third parties when you explicitly consent to such sharing.

Data Security

The security of your data is important to us. We implement appropriate technical and organizational measures to protect the personal information we collect and process. However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

Our security measures include:

• Encryption of data in transit and at rest
• Regular security assessments and testing
• Access controls and authentication mechanisms
• Staff training on data protection and security practices
• Incident response procedures

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure, and applicable legal requirements.

In some circumstances, we may anonymize your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you.

Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information, including:

• Access: You may request access to your personal information that we hold.
• Correction: You may request that we correct inaccurate or incomplete personal information.
• Deletion: You may request that we delete your personal information in certain circumstances.
• Restriction: You may request that we restrict the processing of your personal information.
• Data Portability: You may request a copy of your personal information in a structured, commonly used, and machine-readable format.
• Objection: You may object to our processing of your personal information.
• Withdrawal of Consent: You may withdraw your consent at any time where we rely on consent to process your personal information.

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below. We will respond to your request within 30 days.

Email Communications

You can opt out of receiving marketing emails from us by clicking the "unsubscribe" link in any marketing email we send. Even if you opt out of marketing emails, we may still send you non-marketing emails, such as those about your account or our ongoing business relationship.

Children's Privacy

Our Site and Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and you believe that your child has provided us with personal information, please contact us. If we discover that a child under 16 has provided us with personal information, we will delete such information from our servers.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our information practices. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the bottom of this page. We encourage you to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

Nonprofit IT Solutions
18 King Street East, Suite 1400
Toronto, ON, M5C 1C4
Canada

Phone: (416) 623-9677
Email: [email protected]

We will respond to your inquiry as soon as possible and within 30 days.