Legal
Privacy Statement
At Unit 91, your privacy is one of our top priorities. This Privacy Statement explains how we collect, use and protect your personal information when you interact with our website or use our services. It applies globally and adheres to relevant privacy laws, including Canada's PIPEDA and the EU GDPR.
Contact
Questions or concerns about this statement: privacy@unit91.com.
Unit 91 Cybersecurity
Sicamous, British Columbia, Canada
Information we collect
When you contact us or request a sample report, we collect only what you send us:
- Name
- Professional email address
- Phone number, if you provide one
- Company name
- Anything else you choose to include in your message
Our web host records standard server request data, including IP address and user agent, for security and abuse prevention. We do not run analytics or advertising scripts, and this website sets no cookies. The one measurement we do is described in the next paragraph.
We use Cloudflare Turnstile on our forms to help distinguish legitimate enquiries from automated abuse. Our hosting and message-delivery providers process the information needed to operate these services.
If you arrive from one of our ads on ChatGPT, the link carries a click identifier issued by OpenAI. We store it in your browser's local storage for up to 30 days. If you send us an enquiry in that time, our server reports to OpenAI that the ad led to an enquiry: the click identifier, the event type, the time and the page the form was on. It does not include your name, email address, company or message. If you book a call, the booking happens on Calendly's website under Calendly's privacy policy.
How we use your information
- To respond to your enquiry and deliver services you engage us for.
- To protect against unauthorised access, malicious activity and abuse.
- To meet legal and regulatory obligations.
Sharing your information
We do not sell your personal information. We share it only with service providers needed to operate the site and deliver messages to us, and, as described above, the ad click identifier with OpenAI. Beyond that, only where required by law, or in the event of a merger or acquisition in which information transfers as part of the assets involved.
Retention
We keep information only as long as it has a job to do, then delete it:
- Enquiries: the details you send through our forms are deleted 12 months after our last contact, unless an engagement follows.
- Engagement evidence: traffic captures, screenshots and test data are deleted 90 days after the retest, or 150 days after the report if no retest has taken place, or earlier on request.
- Reports: kept for 2 years so you can ask for a copy, then deleted.
- Contracts and invoices: kept for 7 years, which covers the Canada Revenue Agency's six-year record-keeping requirement.
Your rights
Depending on the law that applies to you, you may have the right to:
- Access a copy of the information we hold about you.
- Rectify inaccuracies in it.
- Delete it, subject to our legal obligations.
- Object to certain uses, including direct marketing.
- Port it, receiving a copy in a usable format.
To exercise these rights, contact privacy@unit91.com. We may need to verify your identity first.
Security
We use encrypted storage, access controls, and regular review of our own systems. No method of transmission over the internet is completely secure, and we will not claim otherwise.
Children's privacy
Our services are intended for professionals and are not directed to anyone under 18. We do not knowingly collect data from minors.
Third-party links
This site may link to external websites. We are not responsible for their privacy practices and encourage you to review their policies.
International users
Your data may be transferred to or processed in countries outside your own. We ensure such transfers comply with applicable data protection law.
Updates
We may update this statement to reflect changes in our practices or legal requirements. The current version is always on this page with its last-modified date.