¶ºÄÌÊÓƵ

1. Privacy Officer

In accordance with PIPEDA and Quebec Law 25, we have designated a Privacy Officer responsible for the protection of personal information under our control. To contact our Privacy Officer, please write to:

¶ºÄÌÊÓƵnical Services Inc.

Attention: Privacy Officer

7212 Flint Pl SE, Calgary, AB T2H 1Y8

Email: info@gamtech.ca

Phone: 1-833-GAM-TECH (1-833-426-8324)

2. Personal Information We Collect

We collect personal information that you provide directly to us and that we generate through your interactions with our website and services. The categories of personal information we collect may include:

Contact information — name, email address, telephone number, business address, and job title provided when you request information, book a consultation, or engage our services.

Business information — company name, industry, employee count, technology environment, and IT service requirements shared during discovery calls or onboarding.

Account and authentication information — usernames, passwords, and access credentials for our client portal or service delivery platforms.

Communication records — records of your communications with us, including support tickets, email exchanges, and call notes.

Payment and billing information — banking details, credit card information, and billing address (payment card information is processed by our payment processors and is not stored on our systems).

Website usage information — IP address, browser type, device information, referring URL, pages visited, and behavioural data collected through cookies (see our Cookie Policy at gamtech.ca/cookie-policy).

Recruitment information — resumes, cover letters, references, and interview notes if you apply for a position with ¶ºÄÌÊÓƵ.

We do not knowingly collect personal information from individuals under the age of majority in your province of residence. Our services are directed to businesses, not to children.

3. How We Use Personal Information

We use personal information for the following purposes:

To provide, maintain, and improve our managed IT and cybersecurity services.

To respond to inquiries, provide quotes, and communicate with you about our services.

To onboard and support clients, including provisioning access, providing help desk support, and delivering strategic reviews through your Client Success Manager.

To send administrative communications (service updates, billing notices, security alerts, and policy changes).

With your consent, to send marketing communications about our services, industry insights, and events. You can opt out at any time.

To ensure the security of our own systems and our clients' systems, including monitoring for and responding to security incidents.

To comply with legal, regulatory, and contractual obligations.

To recruit and evaluate candidates for employment.

4. Consent

We collect, use, and disclose personal information with your consent, except where otherwise permitted or required by law. Consent may be express (e.g., when you sign up for a service) or implied (e.g., when you provide business contact information for a specific purpose).

For sensitive personal information — as defined under Quebec Law 25 (including health information, biometric data, and financial information indicating economic vulnerability) — we obtain express, informed consent before collection, use, or disclosure.

You may withdraw your consent at any time by contacting our Privacy Officer, subject to legal and contractual restrictions and reasonable notice. Withdrawal of consent may affect our ability to provide you with services.

5. Sharing and Disclosure

We do not sell personal information. We disclose personal information only in the following circumstances:

Service providers — third parties that assist us in delivering services, including cloud infrastructure providers, software vendors, payment processors, and professional advisors. These providers are contractually bound to protect personal information and use it only for the purposes we specify.

Business transactions — in connection with a merger, acquisition, financing, or sale of business assets, personal information may be disclosed to potential or actual acquirers or successors, subject to confidentiality obligations and applicable law.

Legal requirements — where required by law, court order, or regulatory authority, or where necessary to protect our rights, safety, or property, or the rights, safety, or property of others.

With your consent — for any other purpose disclosed to you and consented to at the time of collection.

6. Cross-Border Data Transfers

Some of our service providers may process personal information outside the province where the information was collected, including outside of Canada. When personal information is transferred outside your province of residence:

The information becomes subject to the laws of the jurisdiction where it is processed, including lawful access requirements by foreign courts and government authorities.

We take reasonable contractual and technical measures to ensure comparable levels of protection.

For transfers of Quebec residents' personal information outside Quebec, we conduct Privacy Impact Assessments as required by Quebec Law 25.

You may contact our Privacy Officer for more information about specific cross-border transfers of your personal information.

7. Data Retention

We retain personal information only as long as necessary to fulfill the purposes for which it was collected, or as required by law, contract, or applicable retention schedules. Specific retention periods vary depending on the type of information and the purpose of collection.

When personal information is no longer required, we destroy, erase, or anonymize it in accordance with our data retention procedures. In accordance with Quebec Law 25, we honour requests for deidentification or destruction of personal information when the purpose of collection has been fulfilled, subject to legal retention obligations.

8. Data Security

¶ºÄÌÊÓƵ maintains administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, disclosure, alteration, and destruction. Our safeguards include:

SOC 2 certified security controls independently audited annually.

Multi-factor authentication on employee and client-accessible systems.

Encryption of personal information in transit and at rest.

Role-based access control aligned to the principle of least privilege.

Continuous monitoring and threat detection through our internal Security Operations Centre.

Documented incident response procedures.

Regular staff security awareness training and phishing simulations.

No system can guarantee absolute security. If you have concerns about the security of your personal information, please contact our Privacy Officer immediately.

9. Breach Notification

If we experience a breach of security safeguards that creates a real risk of significant harm to affected individuals (under PIPEDA) or presents a risk of serious injury (under Quebec Law 25), we will notify:

The Office of the Privacy Commissioner of Canada, as required by PIPEDA.

The Commission d'accès à l'information du ²Ï³Üé²ú±ð³¦, as required by Quebec Law 25.

Applicable provincial or sectoral regulators, as required.

Affected individuals, without unreasonable delay.

We maintain records of all confidentiality incidents in accordance with our legal obligations.

10. Your Rights

You have the following rights regarding your personal information:

Right of access — you have the right to know whether we hold personal information about you and to receive a copy of it, subject to legal exceptions.

Right of correction — you have the right to request that we correct inaccurate or incomplete personal information.

Right to withdraw consent — you have the right to withdraw your consent to our collection, use, or disclosure of personal information, subject to legal and contractual restrictions.

Right to deidentification or destruction (Quebec Law 25) — Quebec residents have the right to request that we cease disseminating their personal information or deidentify or destroy it when the purpose of collection has been fulfilled.

Right to data portability (Quebec Law 25) — Quebec residents have the right to receive their computerized personal information in a structured, commonly used technological format, or to have it transferred to another person or organization.

Right to be informed of automated decision-making — where personal information is used to render a decision based exclusively on an automated processing, you have the right to be informed and to request that the decision be reviewed.

To exercise any of these rights, please contact our Privacy Officer. We will respond within 30 days as required by PIPEDA (or such other timeframe as required by applicable provincial law).

11. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies. For a full description of the cookies we use, third-party services, and how to manage your preferences, please see our Cookie Policy at gamtech.ca/cookie-policy.

12. Complaints

If you believe we have not handled your personal information in accordance with this Privacy Policy or applicable privacy law, please contact our Privacy Officer using the contact information above. We take all complaints seriously and will investigate and respond.

If you are not satisfied with our response, you may contact:

The Office of the Privacy Commissioner of Canada at priv.gc.ca (for PIPEDA complaints).

The Commission d'accès à l'information du ²Ï³Üé²ú±ð³¦ at cai.gouv.qc.ca (for complaints from Quebec residents).

Your provincial privacy commissioner (e.g., the Office of the Information and Privacy Commissioner of Alberta, British Columbia, or Ontario, as applicable).

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other factors. Material changes will be posted with an updated "Last updated" date at the top of this policy. We encourage you to review this policy periodically. Continued use of our services and website after material changes constitutes acceptance of the updated policy.

14. Contact Us

For questions about this Privacy Policy or our privacy practices, please contact our Privacy Officer:

¶ºÄÌÊÓƵnical Services Inc.

Attention: Privacy Officer

7212 Flint Pl SE, Calgary, AB T2H 1Y8

Email: info@gamtech.ca

Phone: 1-833-GAM-TECH (1-833-426-8324)