Privacy Policy

1. Overview

Purpose of This Policy

This Privacy Policy explains how we collect, use, disclose, and protect personal information in connection with our website and our digital forensics and cybersecurity services. It is intended to comply with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and substantially similar provincial legislation where applicable.

What Is Personal Information

Personal information means information about an identifiable individual, such as a name, contact details, an identification number, or information about online activity that can be linked to a specific person. It does not include anonymized or aggregated information that cannot reasonably be associated with an identifiable individual.

When This Policy Applies

This Policy applies when you visit or use our website, contact us, or engage us to provide services. Additional contractual privacy terms may apply when we act as a service provider for clients in the context of digital forensic investigations. In case of conflict, those contractual terms prevail for the relevant engagement.

2. Organization Responsible for Personal Information

Identity and Contact Details

The organization responsible for personal information collected through this website is:

Digital Forensic (Solid State Forensics Ltd.)

1170 Birdsall Line, Hastings, Ontario, K0L1Y0, Canada

OCN: 1001176062

BN: 710789421

GST: 710789421 RT2131

Phone: +1 (613) 518-1792

Email: info@dforensic.ca

For questions about this Policy or our privacy practices, you can contact us using the details above and indicate that your request is privacy-related.

3. What Information We Collect

Information You Provide to Us

We collect personal information that you choose to provide, for example when you:

  • Submit a request through our contact form or by email or phone
  • Request a consultation or proposal for services
  • Enter into a service agreement with us
  • Subscribe to receive information or updates from us

This may include your name, contact information, organization, role, details about your request, and any other information you choose to provide in connection with a matter.

Information Collected Automatically

When you visit our website, certain technical information is collected automatically by our systems and by third party service providers. This may include:

  • IP address and approximate location
  • Browser type and version
  • Device type and operating system
  • Date, time, and duration of your visit
  • Pages visited and interactions with the site
  • Referring URLs or sources

This information is typically collected using cookies, logs, and similar technologies. For more detail, see our Cookie Policy.

Information Processed for Client Matters

In the context of digital forensic investigations and related services, we may receive and process personal information on behalf of our clients. The type of information depends on the engagement and may include user account data, logs, device images, or other digital records. In such cases we act as a service provider and process personal information under the instructions of our client and in accordance with our service agreements and applicable law.

4. How and Why We Use Personal Information

Service Delivery and Client Management

We use personal information to provide, manage, and improve our services, including to:

  • Respond to inquiries and requests for information
  • Assess and manage potential and existing client relationships
  • Perform digital forensic investigations and related services
  • Issue invoices, process payments, and maintain business records

Website Operation and Security

We use technical and usage information to operate, secure, and optimize our website, including to detect and prevent security incidents, understand how visitors use our site, and improve performance and usability.

Legal and Regulatory Compliance

We may use and retain personal information as necessary to comply with legal, regulatory, tax, or accounting obligations, to respond to lawful requests and proceedings, and to protect our rights and the rights of others.

Legal Basis Under Canadian Law

Under Canadian privacy law, we generally rely on your consent (which may be express or implied depending on the context), our legitimate business purposes, and our legal obligations as the basis for collecting, using, and disclosing personal information. Where we process personal information on behalf of clients, they are responsible for ensuring that a proper legal basis exists for such processing.

5. When We Disclose Personal Information

Service Providers and Partners

We may share personal information with third-party service providers who assist us in operating our business and delivering our services, such as hosting providers, payment processors, IT and security providers, professional advisors, and communication tools. These service providers are given access only to the information necessary to perform their functions and are required to handle personal information in a manner consistent with this Policy and applicable law.

Client and Matter-Related Disclosures

Where we act as a service provider, we may disclose personal information to our clients and, where authorized or required, to their legal counsel, courts, tribunals, regulators, or law enforcement agencies in the context of an investigation, dispute, or proceeding.

Legal and Regulatory Disclosures

We may disclose personal information where we believe it is necessary or appropriate to comply with applicable laws, regulations, or legal processes, to respond to lawful requests from public authorities, or to protect the safety, rights, or property of ourselves, our clients, or others.

Business Transactions

In the event of a proposed or completed business transaction (such as a merger, acquisition, or sale of assets), personal information may be disclosed to counterparties or advisors, subject to appropriate confidentiality and security safeguards and in accordance with applicable law.

6. International Transfers

Personal information may be stored and processed in Canada or in other jurisdictions where our service providers are located. As a result, personal information may be subject to the laws of those jurisdictions and may be accessible to courts, law enforcement, and national security authorities in those jurisdictions. We take steps to ensure that any cross-border transfers are carried out in accordance with applicable Canadian privacy requirements and that appropriate contractual and technical safeguards are in place.

7. Cookies, Analytics, and Similar Technologies

Cookies and Local Storage

Our website uses cookies and similar technologies to enable essential functions, enhance user experience, and understand how visitors use the site. Some cookies are strictly necessary for the functioning of the website, while others are used for analytics or marketing purposes. For detailed information about the types of cookies we use and your choices, please see our Cookie Policy.

Analytics and Marketing Tools

We may use tools such as Google Analytics, Google Tag Manager, or similar services to analyze website traffic and usage patterns. These tools may collect information such as your IP address, device identifiers, and information about your interactions with our site. Where required by law, we obtain your consent for the use of non-essential cookies and analytics technologies.

8. How We Protect Personal Information

We use a combination of administrative, technical, and physical safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification. Measures may include access controls, encryption, secure storage, logging, and staff training. Despite these measures, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Retention of Personal Information

We retain personal information only for as long as necessary to fulfill the purposes described in this Policy or as required by law, professional standards, or contractual obligations. When personal information is no longer required, we will delete, anonymize, or securely destroy it in accordance with our retention and destruction practices.

10. Your Rights and Choices

Access and Correction

Subject to certain legal limitations, you have the right to request access to the personal information we hold about you and to request corrections to any inaccurate or incomplete information. To make such a request, contact us using the contact details above and provide sufficient information to allow us to identify you and the information you are requesting.

Withdrawal of Consent

Where we rely on your consent to process personal information, you may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawal of consent may affect our ability to provide certain services to you.

Marketing and Cookies

You can manage your browser settings to block or delete cookies and can opt out of certain analytics or marketing tools as described in our Cookie Policy. You may also unsubscribe from marketing communications by following the instructions in those communications or by contacting us.

Complaints

If you have concerns about how we handle your personal information, you can contact us using the contact details provided above. You also have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada or, where applicable, with the privacy commissioner in your province or territory.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal developments, or other operational reasons. The "Last updated" date below indicates when this Policy was last revised. Your continued use of our website or services after any changes signifies your acceptance of the updated Policy.

Last updated: December 2, 2025