Privacy Policy

Taking client data & privacy seriously

Cybersecurity is Forecight's core focus. We are committed to complying with applicable privacy legislation — including PIPEDA and the GDPR — and supporting our partners and clients in their own compliance efforts.

Forecight is committed to providing exceptional cybersecurity services and respects its clients' right to privacy and the request to control personal data shared. All content on Forecight's corporate website, Forecight.com, is covered by this privacy policy.

Upon your discretion and approval, Forecight may disclose personal information to its agents or subcontractors. Any designated agent or subcontractor will be obligated to use that personal information in accordance with the terms of this privacy policy. In addition to disclosures reasonably necessary for the purposes identified below, Forecight may only disclose your personal information to the extent required by law, in connection with any legal proceedings or prospective legal proceedings, and to establish, exercise, or defend its legal rights.

Information you provide us

We request information, including personal information, via forms on this site. What is collected depends on the form, and we indicate whether a field is mandatory or optional. If you choose not to provide certain information, we may not be able to provide the requested services. This site has four forms:

• Contact. Your name, work email address, phone number, job title, organization, region, the areas you tell us you are interested in, and your message.
• Incident response. Your name, organization, phone number, email address, the type of incident, and your description of it. See the section below — this one is different.
• Careers. Your name, email address, phone number, the role you are applying for, any link you supply (for example to a professional profile), and your message. Where you send a CV or other application material by email, that is covered too.
• Event RSVP. Your name and email address, and the name of a guest if you bring one.

Every submission also records the time it was sent and the country your request came from, which we use to route enquiries and to detect automated abuse.

Incident reports

If you use the incident response form, what you send us may describe a live security incident — and may therefore contain information about your organization, your systems, and people other than yourself. We treat those submissions as confidential, restrict access to the staff who need it to respond, and use them only to respond to the incident you are reporting.

Please do not put log excerpts, credentials, keys, or copies of affected data into this form. It is an intake channel, not a secure evidence transfer: send us enough to make contact and understand the urgency, and we will open an appropriate channel for anything sensitive. If an incident is in progress, calling 1-888-96-CYBER is faster than any form.

Information we receive from your use of the site

We collect the following types of information automatically through cookies, device identifiers, and similar technologies. When you use or access the site, we and our service providers may use cookies and similar technologies to collect information about how you use the site. For more information, please see our Cookie Policy.

How we use your information

Forecight may use your personal information to:

• Respond to your inquiries and provide requested services
• Administer and improve your experience on our website
• Send you information you have explicitly requested
• Personalize content and enable access to website services
• Send statements, invoices, and marketing or event registration information where applicable

Personal information we may collect

• Information provided through registration or contact submissions
• Information sent to Forecight directly
• Usage data collected to improve the site

We take precautions to prevent the loss, misuse, or alteration of personal information. Information you send through this site is encrypted in transit, and is encrypted at rest by the service providers named below. Access is limited to the people who need it for the purpose you sent it for.

Service providers

We keep the number of third parties involved deliberately small. Handling a submission from this site involves:

• Cloudflare — hosts and delivers this website, and provides the Turnstile check that protects the forms from automated abuse. Every submission passes through Cloudflare.
• Microsoft — routes submissions from the website into our own tenant, where they are stored and notified to the relevant team within Microsoft 365.

Both act as processors on our behalf and are bound to handle the information accordingly. We do not sell personal information, and we do not share it with advertising or analytics providers — this site runs neither.

How long we keep it

We keep form submissions for 12 months from the date you send them, and then delete them. We keep a submission longer only where there is a specific reason to — for example where it has become part of a client engagement, or where we are required to retain it by law or by our professional or insurance obligations. Where a submission becomes part of an engagement, that engagement’s own terms govern how long we hold it. You can ask us to delete a submission sooner, using the contact details below, and we will do so unless we are required to keep it.

Cross-border data transfers

Information may be stored, processed, and transferred across regions in which Forecight operates, in accordance with this privacy policy. By accessing content on our website, you agree to such cross-border transfers of personal information.

Our commitment to GDPR guidelines

We take data protection very seriously and strive to ensure that data we receive is:

• Processed lawfully, fairly, and in a transparent manner
• Collected only for specified and legitimate purposes
• Limited to what is necessary and held no longer than required to operate our services
• Processed in a manner that ensures appropriate security

We also provide features that give users control over their data, including the ability to request a copy of information we store, request erasure, and opt out of analytics and other non-essential services.

Other websites

Forecight's website may contain links to external websites. Forecight is not responsible for the privacy, content, or security practices of third-party sites.

Updating this policy

This policy may be updated periodically to reflect changes to Forecight's privacy and information security practices. Notification of material changes will be provided via email and/or a public notice on this site prior to the changes becoming effective.

Contact us

For questions regarding Forecight's privacy policy, please contact us:

Forecight Cybersecurity Inc.
Terminal City Club Tower
837 West Hastings Street
Vancouver, British Columbia
Canada, V6C 3N7

privacy@forecight.com