Privacy Policy

Null Threat Labs ("Null Threat Labs," "we," "us," or "our") is a cybersecurity consultancy based in Manitoba, Canada. This Privacy Policy explains what personal information we collect through nullthreat.ca, how we use it, and the choices you have. We handle personal information in a manner consistent with Canadian privacy principles, including the Personal Information Protection and Electronic Documents Act (PIPEDA). This document is provided for transparency and is not legal advice.

The only personal information we actively collect from visitors is what you voluntarily submit through our contact form. Fields include:

• Name
• Company email address
• Company name (optional)
• Job title (optional)
• Company size (range)
• How you heard about us
• Services of interest
• Any free-form message content you choose to include

Our web host and the analytics/anti-abuse tools described below may also collect limited technical information automatically, such as IP address, browser user-agent, referring page, and timestamps, for the purpose of operating the site and protecting it from abuse.

We use the information you submit to:

• Respond to your inquiry and follow up about a potential engagement.
• Understand the nature and scope of the services you are interested in.
• Maintain a record of business correspondence.
• Detect and prevent spam, abuse, or fraudulent submissions.

We do not use your information for advertising, profiling, or automated decision-making.

Contact form submissions are transmitted over TLS (HTTPS) and delivered to our internal inbox via a reputable transactional email provider. Site hosting and serverless functions are operated on Cloudflare's edge network. These providers process data solely on our behalf as service providers and are bound by their own security and privacy commitments.

Once received, correspondence resides in our email systems and standard business tooling, protected by access controls appropriate to a security consultancy.

We use Google Analytics (GA4) to understand aggregate site usage. Google Analytics may set cookies to distinguish visitors and sessions. We do not use this data to identify you personally.

We use Google reCAPTCHA v3 on the contact form to help distinguish humans from automated bots. reCAPTCHA collects hardware and software information (such as device and application data) and sends it to Google for analysis. Use of reCAPTCHA is subject to Google's Privacy Policy and Terms of Service.

We do not sell, rent, or trade your personal information. We share information only with the service providers required to operate the website and communicate with you, currently:

• Cloudflare — website hosting and edge delivery
• SparkPost (MessageBird) — transactional email delivery
• Google — Analytics and reCAPTCHA

We may disclose information if required to do so by law, or to protect the rights, property, or safety of Null Threat Labs, our clients, or the public.

We retain contact-form correspondence for as long as needed to service the inquiry and maintain reasonable business records, typically no longer than 24 months from last contact, unless a longer period is required for contractual, tax, or legal reasons. You may request earlier deletion at any time.

Under Canadian privacy law, you have the right to access the personal information we hold about you, to request corrections, and to request its deletion, subject to legal and legitimate business exceptions. To exercise any of these rights, email privacy@nullthreat.ca. We will respond within a reasonable timeframe, typically within 30 days.

We apply reasonable administrative, technical, and physical safeguards to protect personal information against loss, misuse, and unauthorized access. No method of transmission or storage is perfectly secure; we continually review our practices as a security-focused firm.

This site is intended for business audiences and is not directed to children. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page. Continued use of the site after changes take effect constitutes acceptance of the revised policy.

For any questions, concerns, or requests regarding this Privacy Policy or your personal information, contact:

Null Threat Labs
Manitoba, Canada
privacy@nullthreat.ca