Privacy Policy

1. Information We Collect

Depending on how you interact with Sixway, we may collect information such as:

Information You Provide

This may include:

• Name
• Business email address
• Telephone number
• Company or organization name
• Job title
• Industry and organization size
• Services you are interested in
• Preferred contact method
• Project or engagement timeframe
• Information you provide when requesting an assessment
• Messages, inquiries, and other information submitted through our forms
• Newsletter and communication preferences
• Information submitted when requesting access to resources or materials

Please do not submit confidential, highly sensitive, or security-sensitive information through general website forms unless specifically requested by Sixway through an appropriate secure channel.

Information Collected Automatically

When you use our website, limited technical information may be collected automatically, including:

• IP address
• Browser and device information
• Operating system
• Pages visited
• Referring page or website
• Approximate geographic region
• Date and time of access
• Website interactions and navigation
• Campaign or referral information

We may use cookies or similar technologies where necessary for website functionality, security, analytics, and performance.

2. How We Use Personal Information

We collect and use personal information only for identified and reasonable business purposes, including to:

• Respond to inquiries and requests
• Contact prospective or existing clients
• Evaluate and respond to requests for assessments
• Understand your organization's technology or cybersecurity needs
• Provide information about Sixway's services
• Deliver requested resources or materials
• Manage newsletter and Insights subscriptions
• Communicate with individuals who have consented to receive updates
• Improve our website, services, content, and user experience
• Understand website usage and marketing effectiveness
• Protect our website, systems, and users from misuse, fraud, and security threats
• Maintain appropriate business and operational records
• Meet legal, regulatory, contractual, and security obligations

If we wish to use personal information for a materially different purpose, we will obtain additional consent where required.

3. Consent

Where required, Sixway obtains consent before collecting, using, or disclosing personal information.

The form of consent may depend on the circumstances and sensitivity of the information. For example, submitting a Contact or Request Assessment form indicates that you understand Sixway will use the information provided to respond to your request.

Marketing and newsletter subscriptions are treated separately. We will not automatically subscribe you to marketing communications merely because you submitted another Sixway form.

You may withdraw your consent to optional uses of your personal information, subject to applicable legal or contractual restrictions.

4. Newsletter and Electronic Communications

If you subscribe to Sixway Insights or other electronic updates, we may use your email address to send you cybersecurity, technology, company, service, and thought-leadership communications.

We maintain records of subscription consent where appropriate.

Our commercial electronic communications will provide an appropriate way to unsubscribe. You may withdraw your consent at any time using the unsubscribe mechanism provided in our communications or by contacting us.

Unsubscribing from marketing communications does not prevent Sixway from sending communications necessary to respond to an inquiry, provide requested services, administer an existing business relationship, or meet legal obligations.

5. How We Share Information

Sixway does not sell personal information.

We may disclose personal information to trusted service providers that help us operate our business and website, including providers supporting:

• Website hosting and infrastructure
• Data storage
• Email and communications
• Analytics
• Security and monitoring
• Customer relationship and lead management
• Website and content operations

These providers may process personal information only as necessary to provide services to Sixway and are expected to protect information appropriately.

We may also disclose information where reasonably necessary to:

• Comply with applicable law, regulation, court order, or lawful government request
• Protect the rights, security, or property of Sixway or others
• Investigate fraud, misuse, or security incidents
• Complete a corporate transaction such as a merger, acquisition, financing, or sale, subject to applicable legal requirements

6. Service Providers and Processing Locations

Sixway may engage service providers in Canada and other jurisdictions to support our business operations.

As a result, personal information may be processed or stored outside your province or outside Canada and may be subject to the laws of those jurisdictions.

Sixway remains responsible for personal information under its control and takes reasonable steps to ensure that service providers handling personal information provide appropriate safeguards.

7. Analytics and Website Measurement

Sixway may use analytics technologies to understand how visitors interact with our website and to improve website performance, content, and marketing effectiveness.

Where analytics are used, we seek to limit the information collected to what is reasonably necessary.

We do not intentionally send information such as names, email addresses, telephone numbers, or free-form Contact or Request Assessment messages to website analytics systems.

Where required, cookie or analytics preferences will be handled in accordance with applicable requirements.

8. Retention of Personal Information

Sixway retains personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected and to meet applicable legal, contractual, security, and business requirements.

Retention periods may vary depending on the nature of the information and the purpose for which it was collected.

For example:

• Inquiry and assessment information may be retained while the business opportunity or relationship remains relevant and for an appropriate period afterward.
• Subscription information may be retained while the subscription is active and as necessary afterward to maintain unsubscribe or suppression records.
• Security and technical logs may be retained for periods appropriate to operational and security requirements.
• Information subject to legal, contractual, or regulatory requirements may be retained for the applicable required period.

When personal information is no longer reasonably required, Sixway will delete, anonymize, or otherwise securely dispose of it in accordance with its retention practices.

9. Security Safeguards

As a cybersecurity and technology company, Sixway recognizes the importance of protecting information entrusted to us.

We use reasonable administrative, technical, and organizational safeguards appropriate to the nature and sensitivity of the information.

These may include measures such as:

• Access controls
• Secure communications
• Encryption where appropriate
• Server-side validation
• Security monitoring
• Authentication and authorization controls
• Secure configuration and development practices
• Rate limiting and abuse prevention
• Restricted access to personal information
• Logging and monitoring
• Vulnerability and dependency management

No method of transmitting or storing information can be guaranteed to be completely secure. We therefore cannot guarantee absolute security.

10. Data Minimization

Sixway seeks to collect only the personal information reasonably necessary for the identified purpose.

Our public website forms are not intended for the submission of highly sensitive personal information, passwords, credentials, payment-card information, protected health information, security keys, vulnerability details, or confidential client data unless Sixway has specifically provided an appropriate secure method for doing so.

11. Accessing or Correcting Your Information

Subject to applicable law, you may request access to personal information Sixway holds about you and request correction of information that is inaccurate or incomplete.

We may need to verify your identity before processing an access or correction request.

Certain information may be exempt from access where permitted or required by law.

To make a privacy request, contact Sixway using the information provided in the Contact Us section below.

12. Withdrawal of Consent and Deletion Requests

Where our processing is based on consent, you may request to withdraw that consent, subject to applicable legal or contractual restrictions.

You may also ask us to delete personal information that is no longer required, subject to legal, regulatory, contractual, security, record-keeping, and legitimate business requirements.

Withdrawal of consent may affect our ability to provide certain requested communications or services.

13. Cookies

Sixway may use cookies and similar technologies for:

• Essential website functionality
• Security
• Performance
• Remembering appropriate preferences
• Analytics and website measurement

Where required, visitors will be provided with appropriate choices regarding non-essential cookies.

You may also manage cookies through your browser settings. Disabling certain cookies may affect website functionality.

14. Third-Party Websites

The Sixway website may contain links to third-party websites, technology providers, partners, or other external resources.

Sixway is not responsible for the privacy practices, security, or content of third-party websites. We encourage you to review the privacy policies of those organizations before providing personal information.

15. Children's Privacy

Sixway's website and services are intended for businesses and professionals and are not directed toward children.

We do not knowingly collect personal information from children through our business website.

If we become aware that personal information from a child has been collected inadvertently, we will take appropriate steps to address it.

16. Privacy and Security Incidents

If Sixway becomes aware of a privacy or security incident involving personal information, we will assess and respond to the incident in accordance with our internal processes and applicable legal requirements, including notification or reporting obligations where applicable.

17. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our business, services, legal requirements, or privacy practices.

The current version will be posted on the Sixway website with the applicable Last Updated date.

Where a material change affects how personal information is collected, used, or disclosed, we will take appropriate steps to provide notice and obtain additional consent where required.

18. Contact Us

Sixway has designated responsibility for overseeing its privacy practices.

For questions about this Privacy Policy, requests to access or correct personal information, withdrawal of consent, privacy concerns, or complaints, please contact:

We will review privacy inquiries and complaints and respond in accordance with applicable requirements.

Individuals may also have the right to contact the appropriate privacy regulator regarding unresolved privacy concerns.