Skip to main content
background
Legal

Privacy Policy

Cosys Information Corp respects your privacy. This page explains what personal information this website collects, why, where it goes, and what you can ask us to do about it. It is written in plain language on purpose. If anything here is unclear, write to us and we will explain it.

Cosys Information Corp, a Canadian company working with clients and teams around the world. Wherever we operate, we are accountable for the personal information under our control. Questions, access requests and complaints go to info@cosys.ca.

What you send us. When you use the contact form we collect your name, email address, organisation if you give it, and your message.

When you buy from the Cosys Store. We collect your account and order information: name, contact details, billing address, and order history. Payment card details go directly to our payment processor and never touch our systems.

Technical information. Our servers record the usual request information, including your IP address, browser type and the pages you request. We use your IP address to rate-limit the contact form against abuse.

Site performance data. On the public site we use Amazon CloudWatch RUM to measure real page performance: load timings, JavaScript errors and request timings. This tells us when the site is slow or broken for real visitors.

What we do not collect. We do not sell personal information. We do not run advertising trackers. We do not build profiles of visitors.

We set no advertising or tracking cookies, and our performance measurement runs without cookies. The only cookies this site uses are the ones a feature needs to work: when you use the Cosys Store, cookies keep your cart, your sign-in and your checkout working. Those exist so the Store can do what you asked it to do, and nothing else.

If we ever add optional analytics cookies, we will ask for your consent first and update this page before we do it.

To answer your enquiry, to keep the site available and fast, to protect it from abuse, and to meet our legal and professional obligations. Nothing more.

This website runs on Amazon Web Services in the United States (us-east-1), and our monitoring data is processed there too. That means information covered by this policy is stored and processed outside Canada and is subject to the laws of that country. We use AWS security controls, encryption in transit, and least-privilege access on our side.

Enquiries are kept for up to twenty-four months after our last exchange, in case you follow up, then deleted. Server and monitoring logs are kept for ninety days for operations and security, then expire automatically.

Our service providers, and only so the site can run: Amazon Web Services for hosting and monitoring, Cloudflare for DNS, Microsoft for our email, and our payment processor for Store purchases. We do not share your information with anyone else unless the law requires it.

You can ask us what personal information we hold about you, ask us to correct it, ask us to delete it, and withdraw consent. We honour these rights for everyone, wherever you live, and we also honour any additional rights your local privacy law gives you. Write to info@cosys.ca and we will respond within thirty days. If you are not satisfied, you can contact the privacy regulator where you live; in Canada that is the Office of the Privacy Commissioner of Canada.

Everything is served over HTTPS. Access to our systems runs on named accounts with least-privilege permissions. No system is perfectly secure and we will not pretend otherwise; if something material happens to your information, we will tell you.

If we change this policy we will change the date at the top. Material changes get a notice on the site.

About this policy

Applies to cosys.ca. Accountable organisation: Cosys Information Corp, serving clients worldwide.

info@cosys.ca

On this page

Related