Privacy, Cookies, Marketing & CASL Compliance Package

​

Toronto & GTA / Ontario / Canada

​

Last Updated: August 3, 2026

Important: This package is drafted as a practical privacy and marketing compliance template for a Canadian private-sector business. It is designed around PIPEDA and Canada's AntiSpam Legislation (CASL), with provinciallaw considerations. It is not legal advice and should be reviewed by qualified Canadian counsel before publication, especially if the business expands into provinces with substantially similar privatesector privacy statutes.

​

Company: Tecnomax Security Canada
Privacy / General Contact: contact@tecnomaxsecurity.ca
Telephone: +1-437-999-6325
Website: www.tecnomaxsecurity.ca
Public business address: intentionally omitted from this policy, as requested.

​

Contents

1.    Website Privacy Policy
2.    Marketing & Communications Consent
3.    Cookie & Tracking Notice
4.    Lead Generation & Advertising Privacy Notice
5.    CASL-Compliant Email Footer
6.    Consent Language for Forms, SMS & WhatsApp
7.    Unsubscribe & Consent Management Procedures
8.    Data Retention, Security & Privacy Breach Procedures
9.    Implementation Checklist and Official References

1.    WEBSITE PRIVACY POLICY
Last Updated: August 3, 2026

​

1.1.     Who We Are
This Privacy Policy explains how Tecnomax Security Canada ("Tecnomax", "we", "us" or "our") collects, uses, discloses, protects and retains personal information in connection with our website, forms, advertising campaigns, quote requests, communications and services.
Tecnomax is primarily based in Toronto and the Greater Toronto Area, Ontario, and may serve customers and prospects in other cities and provinces across Canada. Our business address is intentionally not published in this policy.
Privacy and general contact: tecnomaxsecuritycanada@gmail.com. Telephone: +1-437-999-6325. Website: www.tecnomaxsecurity.ca.

​

1.2.    Applicable Privacy Framework
Tecnomax seeks to comply with Canadian privacy laws that apply to its activities. For private-sector commercial activities, this may include the Personal Information Protection and Electronic Documents Act (PIPEDA), as well as applicable provincial privacy legislation. Requirements may vary depending on the province, the nature of the activity and the information involved.
This Policy is not intended to create rights or obligations beyond those required by applicable law. Where a substantially similar provincial private-sector privacy law applies to a particular activity, Tecnomax will seek to follow the applicable requirements.

​

1.3.    Personal Information We May Collect
Name and contact details.
Address, city, province and postal code.
Telephone number and email address.
Company name, position or other professional information voluntarily provided.
Property information, location, security needs, quote requests and requested services.
Messages, inquiries, forms, calls and other communications with Tecnomax.
Account, contracting, billing or payment information where applicable.
IP address, device type, browser, operating system, language, pages viewed, dates/times and technicalbrowsing information.
Information received through Meta Lead Ads, Google Ads or other advertising lead forms.
Cookie, pixel, advertising identifier and similar technology information where enabled and permitted.
Communication preferences, consent records and unsubscribe requests.

​

1.4.    How We Use Personal Information
Respond to inquiries and quote requests.
Contact individuals about requested services.
Schedule visits, demonstrations, installations, maintenance and other services.
Manage customers, prospects, contracts, payments and business relationships.
Send operational and administrative communications.
Send marketing, promotions, news and offers where consent exists or another legally permitted basis applies.
Analyse and improve our website, campaigns and user experience.
Perform advertising measurement, attribution and remarketing where applicable.
Prevent fraud, abuse, unauthorized access and security threats.
Meet legal, regulatory, accounting and contractual obligations.
Establish, exercise or defend legal rights.

​

1.5.    Consent
Tecnomax seeks meaningful consent where required. Consent may be express or, where legally permitted and appropriate, implied. For commercial electronic messages, Tecnomax will follow CASL requirements, including consent, identification and an unsubscribe mechanism.
Where a collection, use or disclosure is not necessary to provide a requested service, such as certain advertising, analytics or remarketing activities, Tecnomax will provide separate choices where required so individuals can make an informed decision.
Consent may be withdrawn, subject to legal or contractual restrictions and reasonable consequences. Withdrawing marketing consent does not necessarily stop transactional or administrative communications that are necessary to provide a requested service.

​

1.6.    Service Providers and Third Parties
We may disclose personal information to service providers that support our business, including web hosting, forms, CRM, marketing automation, email, messaging, appointment scheduling, analytics, advertising, security, payment and technical support providers.
Depending on the service or campaign, Tecnomax may use Wix, Brevo, Meta/Facebook, Google Ads, Google Analytics, Google Tag Manager, Meta Pixel, Google reCAPTCHA, GoHighLevel, HubSpot, Zoho, Microsoft, WordPress, WhatsApp, Calendly and other CRM or marketing providers.
These providers may process information in Canada or other countries. Tecnomax seeks to use appropriate providers and contractual arrangements and limits access to what is reasonably necessary.

​

1.7.    Processing Outside Canada
Some technology providers may store or process information outside Canada. Information may therefore be subject to the laws of the country where the provider or infrastructure is located. Tecnomax takes reasonable steps to assess providers, limit access and protect personal information.

​

1.8.    Cookies and Tracking
The website may use cookies, pixels, tags, local storage and similar technologies for operation, security, analytics, advertising measurement and remarketing. Details are provided in Section C.

​

1.9.    Advertising and Remarketing
Tecnomax may use Meta and Google, among other providers, to measure campaigns, build advertising audiences, display relevant advertising and perform remarketing. These technologies may receive technical information or identifiers associated with a browser or device, subject to applicable consent and platform controls.

​

1.10.    Security
Tecnomax uses reasonable physical, technical and organizational safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, copying, use or modification. Safeguards may include access controls, passwords, authentication, updates, firewalls, encryption where appropriate, training and internal controls.

No method of transmission or storage is completely secure. Tecnomax will periodically review safeguards and seek to adjust them to the sensitivity and risk of the information.

​

1.11.    Retention and Disposal
We retain personal information only as long as reasonably necessary for the purposes for which it was collected, to maintain business records, resolve disputes, enforce agreements and meet legal or regulatory obligations. When information is no longer required, it will be deleted, destroyed or anonymized using reasonable procedures.

​

1.12.    Access and Correction
Individuals may request information about personal information Tecnomax holds about them and, where applicable, request access, correction or updates. Requests may be sent to tecnomaxsecuritycanada@gmail.com. We may request reasonable information to verify identity before processing a request.

​

1.13.    Privacy Complaints
If you believe Tecnomax has not handled your personal information appropriately, you may contact us at tecnomaxsecuritycanada@gmail.com. We will investigate and respond in accordance with applicable law. Where applicable, an individual may also contact the appropriate privacy regulator.

 

1.14.    Changes
We may update this Policy to reflect legal, technological, business or operational changes. The current version will be posted on the website with the applicable update date.

​

1.15.    Contact
Tecnomax Security Canada
Privacy & General Contact: tecnomaxsecuritycanada@gmail.com
Phone: +1-437-999-6325
Website: www.tecnomaxsecurity.ca
Last Updated: August 3, 2026

​

2.    Marketing & Communications Consent

Consent required to process the request: I understand that Tecnomax Security Canada may collect, use and retain the information I provide to respond to my request, prepare a quote, provide or coordinate the services I request, and manage my relationship with Tecnomax, in accordance with its Privacy Policy.
Optional email marketing consent: Yes, I would like to receive commercial emails from Tecnomax Security Canada, including promotions, offers, updates and information about its products and services. I understand that I can withdraw my consent at any time.
Optional SMS marketing consent: Yes, I consent to receiving commercial text messages from Tecnomax Security Canada at the number I provided, including offers, promotions, updates and information about its services. Message/data rates may apply. I can withdraw my consent at any time by replying STOP or using another method provided in the message.
Optional WhatsApp consent: Yes, I consent to receiving commercial communications from Tecnomax Security Canada through WhatsApp. I understand that WhatsApp is a third-party service and that I can withdraw my consent at any time.
Implementation note: Optional marketing consents should be separate from any consent necessary to provide the requested service and should not be pre-selected.

​

3.    Cookie & Tracking Notice

Tecnomax Security Canada may use cookies and similar technologies to operate the website, maintain security, remember preferences, analyse traffic, measure campaigns, improve user experience, and support advertising and remarketing activities.

​

Cookie categories

​

•    Essential cookies: required for certain functions, security, forms or core website operation.
•    Analytics: help us understand website use and measure performance.
•    Advertising: may be used to measure campaigns and create or manage advertising audiences.
•    Remarketing: may allow advertising to be shown to people who have interacted with the website or relatedcontent.

​

Technologies may include Google Analytics, Google Tag Manager, Meta Pixel, Google Ads, Meta/Facebook and equivalent tools. The technologies actually active may change based on the pages, campaigns and providers in use.

Where required, Tecnomax will provide mechanisms to accept, reject or manage non-essential technologies. Disabling certain technologies may affect some website functions or personalization.

4.    Lead Generation & Advertising Privacy Notice

Tecnomax Security Canada may receive personal information from people who interact with advertisements, Meta Lead Ads forms, Google Ads, landing pages, website forms or other lead-generation tools.
Information may include name, email, phone number, location, company, property information, security needs, form content and technical information associated with the interaction.
We use this information to respond to leads, prepare quotes, provide services, measure campaigns, improve advertising and, where consent or another permitted basis exists, send commercial communications.
Meta, Google and other providers may process information under their own terms and privacy policies. Tecnomax does not control the privacy practices of third parties and recommends reviewing the policies of the platforms used.
Where advertising platforms provide controls for personalized advertising, individuals may manage those settings through the relevant platform. Privacy requests to Tecnomax may be sent to tecnomaxsecuritycanada@gmail.com.
    
5.    CASL-Compliant Email Footer

Tecnomax Security Canada 
Toronto & GTA, Ontario, Canada
+1-437-999-6325 | tecnomaxsecuritycanada@gmail.com www.tecnomaxsecurity.ca 
You are receiving this commercial electronic message because you provided consent or because Tecnomax Security Canada is relying on a permitted form of implied consent under Canada's Anti-Spam Legislation (CASL).
To stop receiving commercial emails, unsubscribe here. Your unsubscribe request will be processed as required by applicable law. You may also contact tecnomaxsecuritycanada@gmail.com. 
For privacy questions, please contact tecnomaxsecuritycanada@gmail.com.  Our Privacy Policy is available on our website.

6.    Consent Language for Forms, SMS & WhatsApp

SMS footer / SMS compliance text
Recommended: Tecnomax Security Canada: [message]. Msg & data rates may apply. Reply STOP to unsubscribe or HELP for help.

El mecanismo de baja debe ser funcional y sencillo. CASL contempla que un mensaje SMS pueda utilizar STOP como mecanismo de unsubscribe.

​

•    Checkbox de Privacy Policy 
I have read and understand the Privacy Policy and consent to Tecnomax Security Canada collecting, using and disclosing my personal information as described in it for the purposes necessary to respond to my request and provide the services I request.

​

•    Marketing checkbox - English
Yes, I would like to receive marketing communications from Tecnomax Security Canada by email. I understand that I can withdraw my consent at any time.

​

•    SMS checkbox - English
Yes, I consent to receiving commercial text messages from Tecnomax Security Canada. Message/data rates may apply. I can withdraw my consent at any time by replying STOP.

​

•    Lead Ads short privacy statement - English
Your information will be used by Tecnomax Security Canada to respond to your request, provide a quote and manage related communications. See our Privacy Policy for details.

​

7.    Unsubscribe & Consent Management Procedures

​

7.1.    Consent Records
For each marketing contact, Tecnomax should retain, where technically feasible: the contact’s identity or identifier, date and time, source of consent, form/campaign, version of the consent language presented, type of consent (email/SMS/WhatsApp), opt-in method, and current consent status.

7.2.    Unsubscribe
Every commercial message subject to CASL must include a functional unsubscribe mechanism. For email, the unsubscribe link must be clear and easy to use. For SMS, a mechanism such as STOP or another permitted method must be available. Unsubscribe requests must be reflected in sending platforms and synchronized lists to prevent further commercial messages from being sent.

7.3.    No Automatic Re-Subscription
A person who has withdrawn their marketing consent should not receive commercial messages again simply because they submit another form, unless there is a valid and documented basis for doing so or they provide new consent when required.

7.4.    Third-Party Lists
Sending mass campaigns to purchased, rented, or third-party-provided lists is not recommended without a specific review of consent and traceability. A third party’s ability to claim that an individual provided consent does not eliminate Tecnomax’s responsibility to demonstrate the basis on which it relies.

7.5.    Differentiate Messages
Transactional, administrative, or service-related messages required to respond to a request should be distinguished from messages intended to promote products, services, or commercial opportunities. When a message is commercial in nature, the applicable CASL requirements must be followed.

​

8.    Data Retention, Security & Privacy Breach Procedures

•    Security
Tecnomax should maintain access controls based on a need-to-know basis, strong passwords and MFA where available, software updates, reasonable backups, vendor account controls, periodic access reviews, and basic training for personnel who handle personal information.

•    Incidents
In the event of suspected unauthorized access, loss, theft, disclosure, or use of personal information, Tecnomax should preserve evidence, contain the incident, identify the information affected, assess the risk of harm, document the assessment, and provide any notifications required under applicable legislation.
Under PIPEDA, breach obligations may include reporting to the Office of the Privacy Commissioner of Canada and notifying affected individuals when there is a real risk of significant harm, as well as maintaining breach records as required.

•    Retention
An internal retention schedule should specify how long leads, customers, consent records, unsubscribe records, invoices, contracts, and technical records are retained. The public-facing privacy policy describes the principle; the internal retention schedule should establish specific retention periods based on legal and business requirements.

•    Access to Information
Access or correction requests should be directed to tecnomaxsecuritycanada@gmail.com. Tecnomax should reasonably verify the individual’s identity, locate the relevant information, assess any applicable legal exceptions, respond within the required timeframes, and document the request.

​

9.    Implementation Checklist and Official References

•    Publish the Website Privacy Policy on a dedicated URL such as /privacy-policy.
•    Link the Privacy Policy from every website form and the website footer.
•    Use separate, unticked marketing checkboxes for email and SMS where consent is required.
•    Configure Brevo/Wix unsubscribe links and suppress unsubscribed contacts across synchronized lists.
•    Configure SMS STOP handling and maintain a suppression list.
•    Document the source, date/time and wording of each marketing consent.
•    Do not upload or use purchased lists for CASL campaigns without a documented legal basis and consentassessment.
•    Review Meta Lead Ads and Google Ads lead-form privacy disclosures before launch.
•    Review every active Meta Pixel, Google tag, Analytics and remarketing tag and document its purpose.
•    Implement cookie controls appropriate to the actual technologies and jurisdictions involved.
•    Maintain a vendor list and identify which vendors may process data outside Canada.
•    Create an internal retention schedule for leads, customers, consent records and unsubscribe records.
•    Create an internal privacy-breach response procedure and breach log.
•    Provide a privacy contact process for access and correction requests.
•    Review the package whenever the business launches a new province, platform, data type or marketingchannel.

​

Official Sources Consulted
Office of the Privacy Commissioner of Canada - PIPEDA: https://www.priv.gc.ca/en/privacy-topics/privacy-lawsin-canada/the-personal-information-protection-and-electronic-documents-act-pipeda/
Office of the Privacy Commissioner - PIPEDA Fair Information Principles: https://www.priv.gc.ca/en/privacy-topi cs/privacy-laws-in-canada/the-personal-information-protection-and-electronic-documents-act-pipeda/p_princip le/
Office of the Privacy Commissioner - Consent: https://www.priv.gc.ca/en/privacy-topics/privacy-laws-in-canada
/the-personal-information-protection-and-electronic-documents-act-pipeda/p_principle/principles/p_consent/
Office of the Privacy Commissioner - Safeguards: https://www.priv.gc.ca/en/privacy-topics/privacy-laws-in-can ada/the-personal-information-protection-and-electronic-documents-act-pipeda/p_principle/principles/p_safegu ards/
CRTC - CASL FAQ: https://www.crtc.gc.ca/eng/com500/faq500.htm
CRTC - CASL Guidance on Implied Consent: https://crtc.gc.ca/eng/com500/guide.htm
CRTC - CASL Act, Regulations and Guidelines: https://crtc.gc.ca/eng/internet/anti/reg.htm

​

Legal review recommendation: Before publication, Tecnomax should have Canadian counsel confirm the final document against the company's actual corporate structure, active technology stack, data flows, consent records, advertising practices and any provincial expansion. This document intentionally does not publish the company's commercial address.