Privacy

Privacy policy

Effective January 2026

Who we are

SJSTechnet is an IT professional services company in Oakville, Ontario, Canada. This policy explains how we handle personal information collected through sjstechnet.com and while delivering our assessments and services. Questions go to our Privacy Officer at info@sjstechnet.com.

What we collect, and why

When	What we collect	Why
You fill in a contact or booking form	Name, work email, company, the topic you choose and your message	To reply, book your review and keep a record of our conversation
You request an external scan	Name, work email, phone, company, the domain to scan, and a record of your authorization (time, IP address and browser)	To confirm you own the domain, run the scan, deliver your report and follow up on serious findings
You use the free email check	The domain you check isn't sent to us: your browser looks up its public DNS records through Google Public DNS. We only count that a check was run and the grade it got	To grade the domain's email settings on your screen, and to know how many people use the check
You book a meeting	The details you enter in the booking tool: name, email, time and notes	To hold the meeting and link it to your request
We run an assessment you've authorized	Configuration settings of the systems in scope (for example security policies, account settings and resource lists), read with temporary read-only access	To produce your report. We don't read the content of email, files, logs, databases or code
You visit the website	Standard web server logs (IP address, pages requested, browser type), kept briefly for security. Visit statistics: the pages you view, the site that referred you, your device type and which checks or forms you use, under an anonymous code that changes every day. Your IP address isn't stored with them	To keep the site secure and working, and to understand which pages and checks are useful

We don't use cookies, tracking pixels, advertising networks or third-party analytics on this website. Our visit statistics run on our own server, are kept for 90 days, and can't be used to recognize you on another day or another website. If you fill in a form or request a scan, we can see which of our pages you visited on that visit.

We don't sell or rent your information

We have never sold personal information and won't. We don't share it for cross-context behavioural advertising, and we don't use client data to train AI models or for any purpose other than the service you asked for.

Who can access it

Only SJSTechnet employees, and only those who need it for their work. We don't share your information with any other company or person.

Like any business, we rely on a few technology providers to run our systems. They store or carry information on our behalf, under contract and confidentiality, and don't access it or use it for themselves:

• Microsoft Azure: the servers that host our website, client records and scan results.
• Our email provider: carries email between you and us.
• Our booking tool: holds the details you enter if you book a meeting online.

The free email check runs in your own browser, which looks up your domain's public DNS records through Google Public DNS; that lookup never reaches us.

We may also disclose information if the law requires it, or to protect our rights or someone's safety. If SJSTechnet were ever sold or merged, this policy would continue to apply to your information.

Where it's stored

Our systems are hosted in Microsoft Azure data centres in the United States (East US). Information stored there may be accessible to authorities under US law. Assessment working files are kept on SJSTechnet staff computers, protected with disk encryption, while an engagement is active.

How we protect it

• Encrypted in transit (HTTPS/TLS) and at rest.
• Staff access only, behind a password gate plus individual accounts with two-factor authentication.
• Least-privilege access: staff see only what their work needs.
• Assessments use temporary, read-only access that you control and can remove at any time; Microsoft 365 and Azure access expires on its own.
• We follow recognized security practices, including CIS benchmarks, for our own systems, and keep nightly backups.
• If a breach ever put your information at real risk of significant harm, we'd tell you and the regulator as the law requires.

How long we keep it

• Scan requests that are never verified: deleted after 7 days.
• Contact requests and client records: while we're working with you, and up to 2 years after our last contact.
• Assessment and scan results: up to 12 months after the report, or for as long as you're a client.
• Backups of our records system: 14 days.
• Financial records for paying clients (quotes, contracts, invoices and payment records, which include your name, company and contact details): 7 years. Canadian tax law requires us to keep them for six years after the end of the tax year they relate to.

Ask us and we'll delete your information sooner. The one exception is financial records we're legally required to keep; we'll keep only those, for only as long as the law requires, and delete everything else.

Your rights

You can ask to access, correct or delete your personal information, or withdraw your consent to us using it. Email info@sjstechnet.com and we'll reply within 30 days. Depending on where you live, you may have further rights (for example under Canada's PIPEDA, Quebec's Law 25 or US state privacy laws); we honour them.

Changes

If we change this policy, we'll update the date at the top. Significant changes will be highlighted on this page.