Legal

Privacy Policy

Last updated: June 22, 2026 · Effective date: June 22, 2026

1001549742 Ontario Inc. · Toronto, Ontario, Canada

Canadian-built. Practitioner-led. Technology Integrated Solutions is operated by 1001549742 Ontario Inc., incorporated in Ontario, Canada. All personal information is collected and processed in accordance with Canada's PIPEDA.

1

Who We Are

Technology Integrated Solutions is a cybersecurity services firm operated by 1001549742 Ontario Inc., a corporation incorporated under the laws of Ontario, Canada. We are the "organization" responsible for the personal information you provide to us under PIPEDA. Our privacy officer can be reached at: info@technology-is.com

2

Information We Collect

We collect the following categories of information: Contact information: Your name, job title, company name, email address, and phone number when you submit a consultation request or contact us. Engagement information: Technical details about your organization's security environment that you share during consultations, assessments, or engagements. This information is treated as strictly confidential. Assessment and findings data: Vulnerability findings, penetration test results, forensic investigation data, and incident response documentation generated during engagements. This data is governed by your engagement agreement. Usage data: Log files and page views on technology-is.com to improve our website. Payment and billing information: Invoicing details for engagement billing. Payment processing is handled separately under your engagement agreement.

3

How We Use Your Information

We use your information to: • Respond to consultation requests and schedule engagements • Deliver penetration testing, incident response, forensics, and consulting services • Communicate findings, recommendations, and reports under your engagement agreement • Send relevant security advisories and updates (you can unsubscribe at any time) • Improve our services and website • Comply with legal obligations under Canadian law We do not sell your personal information or engagement data to third parties. We do not use your security data for marketing purposes.

4

Engagement Confidentiality

All technical information, findings, vulnerabilities, and security data shared with TIS or generated during engagements is treated as strictly confidential. TIS personnel are bound by confidentiality obligations. Engagement findings are shared only with: (a) authorized personnel at your organization, (b) TIS staff directly involved in the engagement, and (c) subcontractors bound by equivalent confidentiality agreements. We do not disclose engagement findings to third parties, government agencies, or other clients except as required by law or as explicitly authorized by you in writing.

5

Legal Basis for Processing

Under PIPEDA, we collect and use your personal information based on your consent, which you provide when you submit a consultation request or enter into an engagement agreement. You may withdraw consent at any time by contacting us at info@technology-is.com. Withdrawal of consent will result in deletion of your contact data as described in Section 8.

6

Data Storage and Security

Your contact and engagement data is stored on servers in Canada and the United States under data processing agreements that require equivalent privacy protections to Canadian law. We protect your data using industry-standard security controls including encryption in transit and at rest, access controls limiting who can access engagement data, and secure file handling for sensitive findings and reports. TIS practices what it delivers. Our own systems are subject to the same security standards we apply to client environments.

7

Information Sharing

We share your information only with: Service providers: Hosting, email, and communication providers — each under data processing agreements. Subcontractors: Certified security practitioners engaged for specific disciplines on your engagement — bound by confidentiality agreements equivalent to ours. Legal requirements: We may disclose information if required by Canadian law, court order, or to protect the rights and safety of our clients and the public. We will never sell your data.

8

Your Rights Under PIPEDA

As a Canadian resident, you have the right to: Access: Request a copy of the personal information we hold about you. Correction: Ask us to correct inaccurate information. Withdrawal of consent: Stop us from using your personal information, subject to legal or contractual restrictions. Complaint: File a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca if you believe we have violated PIPEDA. To exercise these rights, email us at info@technology-is.com. We will respond within 30 days.

9

Data Retention

Contact and consultation data: Retained for 24 months from last contact, then deleted unless an engagement has commenced. Engagement data: Retained for the duration specified in your engagement agreement. Where no retention period is specified, engagement data is retained for 3 years from engagement completion. Financial records: Retained for 7 years as required by Canadian tax law. To request deletion of your data, email info@technology-is.com.

10

Breach Notification

In the event of a breach of security safeguards involving your personal information that creates a real risk of significant harm, we will notify you and the Office of the Privacy Commissioner of Canada as required by PIPEDA. As an incident response firm, we maintain our own incident response plan and will notify affected clients as quickly as possible.

11

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes by email at least 14 days before they take effect. The current version is always available at technology-is.com/privacy.

12

Contact Our Privacy Officer

For any privacy questions, requests, or concerns: Technology Integrated Solutions 1001549742 Ontario Inc. Toronto, Ontario, Canada Email: info@technology-is.com Phone: 647 247 4007 Office of the Privacy Commissioner of Canada www.priv.gc.ca · 1-800-282-1376

Privacy questions? Email us at info@technology-is.com — we respond within 2 business days.