Data Governance Protocol
Published data-governance commitments restored from the previous site.
1. Our Philosophy
At Black Ice Labs, privacy is not merely a compliance requirement; it is a core architectural pillar. We operate on a Zero Trust and Privacy by Design basis.
We believe that your digital footprint belongs to you. Our infrastructure is designed to minimize data collection, maximize encryption, and ensure total transparency regarding how information flows through our systems.
2. Data Collection Parameters
We limit data collection to what is strictly necessary for the functionality of our services and security auditing. We do not sell data to third parties.
- Essential Data: Name, business email, and technical requirements provided via our contact forms.
- Telemetry: Anonymous usage data to optimize system performance (only upon consent).
- Cookies: Secure, encrypted cookies solely for session management and security verification.
3. Usage & Processing
Data processed by Black Ice Labs is used exclusively for:
- Establishing secure communication channels with clients.
- Architecting tailored infrastructure solutions.
- Detecting and preventing cyber threats against our platform.
4. Data Sovereignty & Storage
We keep data collection minimal. Contact-form submissions are handled through a third-party form processor and may be stored or processed outside Canada; where that happens, we rely on the safeguards described in our Privacy Policy. We do not sell data, and we retain only what a conversation requires.
5. Your Rights (PIPEDA & Law 25)
Under the Personal Information Protection and Electronic Documents Act (Canada) and Quebec's Law 25, you maintain the following rights:
Right to Access
Request a copy of all personal data we hold about you.
Right to Erasure
Request complete deletion of your data ("Right to be forgotten").
Right to Portability
Request your data in a structured, machine-readable format.
6. Privacy Officer Contact
For any inquiries regarding data protection, compliance, or to exercise your rights, please contact our designated Privacy Officer:
Research governance
Scope before action
Experiments and security research run in authorised environments. Tools are constrained to the resources and responsibilities of their role.
Decisions leave evidence
Persistent context should make a decision easier to inspect: what was known, what changed, and who authorised it. An agent reporting success is one source of evidence; verification is another step.
People remain accountable
The lab develops mechanisms for approval, interruption and recovery. A system’s autonomy does not remove the operator’s responsibility.
Research stays open to correction
Prototypes, concepts and deployed systems are identified separately. We publish observations and revise our conclusions as the work develops.