Data Governance
Protocol.

1. Our Philosophy

At Black Ice, privacy is not merely a compliance requirement; it is a core architectural pillar. We operate on a Zero Trust and Privacy by Design basis.

We believe that your digital footprint belongs to you. Our infrastructure is designed to minimize data collection, maximize encryption, and ensure total transparency regarding how information flows through our systems.

2. Data Collection Parameters

We limit data collection to what is strictly necessary for the functionality of our services and security auditing. We do not sell data to third parties.

• Essential Data: Name, business email, and technical requirements provided via our contact forms.
• Telemetry: Anonymous usage data to optimize system performance (only upon consent).
• Cookies: We utilize secure, encrypted cookies solely for session management and security verification (CSRF protection).

3. Usage & Processing

Data processed by Black Ice is used exclusively for:

• Establishing secure communication channels with clients.
• Architecting tailored infrastructure solutions.
• Detecting and preventing cyber threats against our platform.

4. Data Sovereignty & Storage

We respect Canadian Data Sovereignty. Unless otherwise requested by a client for specific global operations:

5. Your Rights (PIPEDA & Law 25)

Under the Personal Information Protection and Electronic Documents Act (Canada) and Quebec's Law 25, you maintain the following rights:

• Right to Access: You may request a copy of all personal data we hold about you.
• Right to Erasure: You may request the complete deletion of your data from our servers ("Right to be forgotten").
• Right to Portability: You may request your data in a structured, machine-readable format.

6. Privacy Officer Contact

For any inquiries regarding data protection, compliance, or to exercise your rights, please contact our designated Privacy Officer: