Effective Date: April 20, 2026
Tricord Enterprises Inc. (“Tricord,” “we,” “us,” or “our”) operates the website tricordit.ca and delivers managed I.T, cybersecurity, and fractional CIO/CISO services to manufacturing and professional services organizations across Ontario and Canada. Protecting the privacy of the people who visit our website and the organizations we serve is core to how we operate.
This Privacy Policy explains what personal information we collect through tricordit.ca, how we use and protect it, and the rights you have under the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable Canadian privacy laws.
Information we handle under a managed services, consulting, or fractional CIO/CISO engagement is governed by the contract, statement of work, and data processing terms agreed with that client, not by this Privacy Policy. If you are a client and have questions about how we handle your data under an active engagement, please contact us directly.
1. About Tricord and Scope of This Policy
Tricord Enterprises Inc. is a Canadian corporation headquartered in Milton, Ontario. This Privacy Policy applies to:
- Visitors to our website at tricordit.ca;
- Individuals who submit inquiries, book discovery calls, or otherwise communicate with us through our website or published contact channels;
- Prospective clients evaluating our services; and
- Recipients of our marketing communications and newsletters.
This policy does not apply to personal information we process on behalf of clients under a signed services agreement. That information is governed by the terms of the applicable agreement.
2. Information We Collect
2.1 Information You Provide Directly
We collect personal information when you choose to provide it to us, including when you:
- Fill out a contact or inquiry form on our website;
- Book a discovery call, demo, or consultation;
- Subscribe to our newsletter or thought-leadership content;
- Correspond with us by email, phone, or in-person; or
- Request a proposal, statement of work, or quotation.
The personal information we collect in these interactions typically includes your name, organization, job title, business email address, business phone number, and any additional details you voluntarily include in your message.
2.2 Information Collected Automatically
When you visit tricordit.ca, our web server and the analytics tools we use may automatically collect limited technical information, including:
- Your IP address (which may be used to approximate your city or region);
- Browser type, operating system, and device type;
- The pages you visit, referring URL, and time spent on each page;
- Date and time of access; and
- Cookie and similar identifiers (see Section 6).
This information helps us operate, secure, and improve the website. It is not used to build marketing profiles on individual visitors.
2.3 Information From Third-Party Sources
In limited cases we may supplement information you provide with publicly available business information (for example, your organization’s website, LinkedIn profile, or public business registry details) to better understand prospective clients and prepare for meetings.
3. How We Use Your Information
We use personal information for the following purposes:
- Responding to inquiries — to answer questions, schedule discovery calls, and provide requested information.
- Delivering services — to prepare proposals, statements of work, and to onboard new clients.
- Business communications — to send service updates, relationship correspondence, and administrative notices to clients and prospects.
- Marketing (with consent) — to send newsletters, educational content, and event invitations where you have opted in. You can unsubscribe at any time.
- Website operation and security — to monitor performance, detect abuse, and protect against unauthorized access.
- Legal and regulatory obligations — to comply with Canadian laws, respond to lawful requests, and enforce our agreements.
4. Consent and Legal Basis
Under PIPEDA, we collect, use, and disclose personal information only with your knowledge and consent, except where otherwise permitted by law. Depending on the interaction, your consent may be:
- Express — for example, when you subscribe to our newsletter or submit a contact form.
- Implied — for example, when you provide us with your business contact information in the course of a commercial discussion.
You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawing consent may affect our ability to provide certain services.
Marketing emails we send comply with Canada’s Anti-Spam Legislation (CASL). Every marketing email includes an unsubscribe mechanism and our business contact information.
5. How We Share Information
We do not sell personal information. We share personal information only in the following limited circumstances:
- Service providers — trusted third parties who perform services on our behalf (for example, cloud hosting, email delivery, CRM, and booking platforms). These providers are contractually required to protect your information and use it only for the purposes we specify.
- Professional advisors — our lawyers, accountants, and insurers, where necessary.
- Legal and regulatory authorities — where required by law, court order, or in response to a lawful request.
- Business transfers — if Tricord is involved in a merger, acquisition, or asset sale, personal information may be transferred as part of that transaction, subject to the protections of this Privacy Policy.
6. Cookies and Similar Technologies
Our website uses cookies and similar technologies to make the site function properly, remember your preferences, and analyze how visitors use the site. The categories we use are:
- Strictly necessary cookies — required for the website to operate (for example, session management and security). These cannot be disabled.
- Performance and analytics cookies — help us understand which pages are visited and how the site performs, so we can improve it. We use Google Analytics for this purpose (see Section 7).
- Functionality cookies — remember choices you have made (for example, preferred language or region).
You can control cookies through your browser settings. Disabling some cookies may affect site functionality.
7. Third-Party Services We Rely On
To operate the website and communicate with prospects and clients, we use the following third-party platforms:
- Website hosting and WordPress infrastructure — used to host and deliver tricordit.ca.
- Microsoft 365 — used for business email, calendar, and document collaboration (Microsoft Corporation).
- Microsoft Bookings — used to schedule discovery calls and consultations booked through our website (Microsoft Corporation).
- Google Analytics — used to understand how visitors use our website so we can improve it (Google LLC).
Each of these providers has its own privacy practices and may process personal information outside of Canada. We select providers that maintain industry-standard security practices and contractual protections.
A note on Google Analytics
Google Analytics uses cookies and similar technologies to collect information about how visitors interact with our website, including pages visited, time on site, and referring source. This information is processed by Google LLC and may be transferred to and stored on servers in the United States. We have configured Google Analytics to use IP anonymization where available. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on or by adjusting your cookie preferences in your browser.
8. Data Residency and International Transfers
Canadian data residency is a core part of how Tricord designs and delivers technology. Where we can, we select Canadian-hosted infrastructure and Canadian processing regions for the tools that support our business and our clients.
In some cases, service providers may process personal information outside Canada (for example, in the United States). When that occurs, the information is subject to the laws of the jurisdiction where it is processed, which may include lawful access by foreign authorities. We select providers that maintain industry-standard security practices and contractual protections, and we disclose this reality transparently.
9. How We Protect Your Information
Tricord applies administrative, technical, and physical safeguards designed to protect personal information against loss, theft, and unauthorized access, disclosure, or modification. These include:
- Multi-factor authentication and strong identity controls on our business systems;
- Endpoint protection through enterprise-grade security tools (including SentinelOne and Microsoft Defender);
- Conditional access policies aligned with Microsoft security best practices;
- Encryption of data in transit and, where applicable, at rest;
- Role-based access controls and the principle of least privilege; and
- Regular review of security posture against recognized frameworks including NIST and CIS Controls.
No method of transmission over the internet or electronic storage is 100% secure. We continuously work to maintain and improve our safeguards.
10. How Long We Keep Your Information
We retain personal information only for as long as is reasonably necessary to fulfill the purposes for which it was collected, to comply with legal and regulatory obligations, and to enforce our agreements. Retention timelines depend on the type of information:
- Website inquiry and booking records are typically retained for up to 24 months unless a business relationship is established.
- Newsletter subscriber records are retained until you unsubscribe, and are then purged within a reasonable period.
- Client and engagement records are retained in accordance with professional, tax, and legal obligations.
When personal information is no longer required, we securely destroy, erase, or anonymize it.
11. Your Rights Under Canadian Privacy Law
Subject to applicable law, you have the right to:
- Access the personal information we hold about you;
- Correct inaccurate or incomplete personal information;
- Withdraw consent to further collection, use, or disclosure, subject to legal or contractual restrictions;
- Ask questions about our privacy practices; and
- File a complaint with our Privacy Officer or with the Office of the Privacy Commissioner of Canada.
To exercise any of these rights, please contact our Privacy Officer using the contact details in Section 15. We may require you to verify your identity before responding, and we will respond within the timeframes required by applicable law.
12. Children’s Privacy
Tricord provides services to organizations, not to individuals under the age of majority. Our website is not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.
13. Links to Other Websites
Our website may contain links to third-party websites, including our partners, social media platforms, and published resources. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policy of any third-party site you visit.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the Effective Date at the top of this policy and, where appropriate, provide additional notice on our website or by email. We encourage you to review this policy periodically.
15. Contact Our Privacy Officer
If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact our Privacy Officer:
Privacy Officer
Dwight G., Founder and CEO
Tricord Enterprises Inc.
473 Kincardine Terrace
Milton, Ontario L9T 8E8
Canada
Email: dwight@tricordit.ca
Telephone: (905) 247-5010
If you are not satisfied with our response, you have the right to contact the Office of the Privacy Commissioner of Canada: www.priv.gc.ca.