Privacy Policy
Last updated: March 4, 2025
Who We Are
This website is operated by Martin Harrod, a cybersecurity and technology leadership consultancy based in Vancouver, British Columbia (“we”, “us”, or “our”). We provide advisory and fractional leadership services focused on security, trust, and AI governance. This Privacy Policy explains how we handle personal information when you visit our website, contact us, or engage with our services.
Information We Collect
We collect the following categories of information:
- Information you provide directly: details you submit through contact forms, meeting requests, newsletter sign-ups, or when you email us. This may include your name, job title, company, email address, phone number, and any context you share about your priorities.
- Business communications: messages, proposals, contracts, statements of work, or other documentation exchanged during discovery conversations and engagements.
- Automatically collected data: limited technical information when you visit the website, such as IP address, device type, browser, referring/exit pages, and general usage metrics. We currently rely on privacy-focused, first-party analytics to understand aggregate website performance.
- Third-party sources: publicly available business contact details or information shared with us by mutual connections solely to facilitate introductions.
We do not intentionally collect sensitive personal data unless it is voluntarily provided for a defined purpose, and we ask that you avoid submitting confidential or regulated data through unsecured channels.
How We Use Personal Information
We use personal information to:
- Respond to inquiries, schedule conversations, and understand whether our services are a fit for your organization.
- Deliver proposals, statements of work, and the services you engage us to perform.
- Operate, maintain, and improve the website, including monitoring aggregate traffic patterns.
- Send updates about service offerings, articles, or events when you have opted in to receive communications.
- Meet legal, regulatory, audit, or contractual obligations, including maintaining appropriate business records.
- Protect our rights, confidentiality, safety, and the rights of our clients and partners.
We process personal information on the basis of legitimate interests in operating and growing a professional services business, to perform a contract, to comply with legal obligations, or with your consent when required.
Sharing and Disclosure
We do not sell personal information. We share it only with:
- Service providers: trusted vendors that deliver hosting, analytics, productivity, or communications tools and are bound by confidentiality and data protection commitments.
- Professional advisers: lawyers, accountants, and insurers when necessary for governance or compliance.
- Legal or regulatory authorities: when disclosure is required by law, court order, or to protect our rights or the rights of others.
- Successors: in the unlikely event of a merger, acquisition, or other business transition, subject to appropriate safeguards.
Any third parties accessing personal information are limited to what is necessary to perform their services and must follow instructions consistent with this policy.
Cookies and Similar Technologies
Our website uses essential cookies and privacy-friendly analytics to deliver core functionality, understand aggregate usage, and improve content. You can adjust browser settings to refuse cookies or alert you when cookies are being sent. Rejecting cookies may impact certain website features but should not prevent basic navigation.
Data Retention
We retain personal information only for as long as needed to fulfill the purposes described above, including meeting legal, contractual, or accounting requirements. When retention is no longer necessary, we securely delete or anonymize the data.
International Data Transfers
Our business operates from Canada. If you access the website or share information from outside Canada, your data may be transferred to Canada or other jurisdictions where our service providers operate. We implement contractual and technical safeguards to protect personal information subject to these transfers.
Your Rights and Choices
Depending on your location, you may have rights to:
- Request access to the personal information we hold about you.
- Ask for corrections or updates to inaccurate or incomplete data.
- Request deletion of your personal information, subject to legal obligations.
- Object to or restrict certain processing activities.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with your local data protection authority.
To exercise these rights, please contact us using the details below. We will respond within a reasonable timeframe and consistent with applicable laws.
Security
We employ administrative, technical, and physical safeguards to protect personal information against unauthorized access, disclosure, alteration, or destruction. While no method of transmission or storage is completely secure, we regularly assess and adapt our practices to address evolving threats.
Third-Party Links
Our website may include links to external sites or resources. This Privacy Policy does not cover those third parties. We encourage you to review the privacy statements of any external services you visit.
Changes to This Policy
We may update this Privacy Policy to reflect changes to our practices, the law, or the services we offer. When we make material updates, we will revise the “Last updated” date above and, where appropriate, provide additional notice.
Contact Us
For questions, requests, or concerns about this policy or our data practices, please contact:
Martin Harrod
Vancouver, BC
martin.harrod@gmail.com
+1 778 998 4447
We will review and respond to all legitimate requests in accordance with applicable privacy laws.