Privacy Policy
SinghIT Services Inc. (“SinghIT,” “we,” “us,” or “our”) .Our website address is: www.singhit.ca.
Overview
This Privacy Policy applies to www.singhit.ca and to the managed IT and cybersecurity services we provide to our clients. It describes what personal information we collect, how we use and disclose it, and the choices you have regarding that information. It applies to visitors to our website, prospective clients, current clients and their end users, and job applicants.
SinghIT is a managed service provider (MSP) based in Peterborough, Ontario. Because we are given access to client networks, systems, and data in order to deliver IT support, this policy also explains how we handle information encountered in the course of providing services – in addition to the information we collect through our website.
By using our website or engaging SinghIT for services, you consent to the practices described in this policy.
Information We Collect
We collect the following categories of personal information:
- Contact information – name, email address, mailing address, phone number
- Billing information – billing address, payment details processed through our billing provider
- Account and system identifiers – usernames, device names, IP addresses, and similar technical identifiers used to deliver IT support
- Business information – company name, address, industry, and technical environment details relevant to providing service
- Communications – records of support tickets, emails, and calls with our help desk
- Job applicant information – resume, cover letter, and related details if you apply for a position with us
We collect this information directly from you (through our website, contracts, support tickets, or phone/email), and – where we are engaged to provide managed IT services – from the systems, networks, and accounts we are authorized to access and monitor on a client’s behalf.
How We Use Your Information
We use personal information to:
- Assess your organization’s needs and recommend suitable services
- Deliver managed IT, cybersecurity, and help desk support, including remote monitoring and management (RMM), patching, and incident response
- Administer client accounts and respond to support requests
- Send invoices and process payments
- Respond to inquiries and provide requested information about our services
- Send service-related notices (e.g., maintenance windows, security advisories)
- With your consent, send marketing communications or newsletters
- Improve our website, service delivery, and internal processes
- Evaluate job applications
- Meet our legal, regulatory, and contractual obligations
We do not use client network or system data for any purpose beyond delivering the services you’ve engaged us for, and internal service-quality review.
Information Collected Through Managed Services
As part of delivering managed IT services, we may use tools such as remote monitoring and management (RMM) software, endpoint detection and response (EDR) agents, and documentation platforms that give us visibility into client systems, including device inventories, configuration data, logs, and – where necessary to resolve an issue – file or mailbox content. Access to this information is limited to what is needed to perform the engaged services, and our technicians are bound by confidentiality obligations in our client agreements.
We do not access, review, or use client data outside the scope of the services requested, except where required to investigate a security incident, comply with the law, or as otherwise authorized by the client.
Disclosure of Your Information
We do not sell, trade, or rent your personal information. We may share personal information with:
- Service providers and subcontractors who help us operate our business – for example, RMM/EDR vendors, billing and accounting platforms, cloud hosting providers, and email/CRM platforms. These providers are contractually required to protect your information and use it only to provide services to us.
- Professional advisors such as our accountant or legal counsel, where necessary.
- Authorities, where required by law, court order, or to protect the rights, property, or safety of SinghIT, our clients, or others.
- A successor organization, if SinghIT is involved in a merger, acquisition, or sale of assets – in which case we will notify affected clients of any change in how personal information is handled.
Some of our service providers may store or process data outside Canada (including the United States), in which case that information may be subject to the laws of that jurisdiction, including lawful access by that jurisdiction’s authorities.
Cookies and Website Analytics
Our website may use cookies and similar technologies (such as Google Analytics) to understand how visitors use the site, remember preferences, and improve the browsing experience. This information does not identify you individually. You can disable cookies through your browser settings, though some site features may not work properly if you do.
We also automatically log standard technical information when you visit our site – IP address, browser type, referring page, and timestamps – used only in aggregate to analyze site traffic.
Email and Marketing Communications
Data Retention
Security
Security Incidents and Breach Notification
If we become aware of a security incident affecting personal information in our custody or control – including information on client systems we manage – that poses a real risk of significant harm, we will notify affected clients and individuals without unreasonable delay, and report the incident to the Office of the Privacy Commissioner of Canada as required under PIPEDA. We maintain records of security incidents, including those that don’t meet the threshold for mandatory reporting, for at least 24 months.
If you are a client and suspect a security incident involving your systems, contact us immediately using the emergency contact provided in your service agreement, or at the email below.
Our Service Providers and Sub-Processors
To deliver our services, we rely on third-party platforms, including remote monitoring and management (RMM) software, endpoint detection and response (EDR)/security tools, professional services automation (PSA) and ticketing systems, backup and cloud storage providers, and billing/accounting software. These providers may process personal information on our behalf and are contractually required to protect it and use it only to provide services to us.
We can provide clients with a current list of the specific platforms and sub-processors used to deliver their services upon request – contact us at the email below.
Your Rights and Choices
You may ask us:
- Whether we hold personal information about you
- To access, correct, or update that information
- To have it deleted, subject to legal or contractual retention requirements
- To stop using your information for marketing purposes
To make a request, contact us using the details below. We will respond within a reasonable timeframe. We may ask for information to verify your identity before fulfilling a request.
Note that some information may need to be retained for recordkeeping, legal, or contractual reasons even after a deletion request.
Third-Party Links
Our website may contain links to third-party sites. We are not responsible for the privacy practices or content of those sites, and encourage you to review their privacy policies before providing any personal information.
Children’s Privacy
Changes to This Policy
Contact Us
If you have questions about this Privacy Policy or how we handle your information, contact us at:
SinghIT Services Inc.
Peterborough, Ontario, Canada
Email: privacy@singhit.ca
Website: singhit.ca
This policy is governed by the applicable privacy laws of Canada and the Province of Ontario, including the Personal Information Protection and Electronic Documents Act (PIPEDA).