Alphabyte Solutions Inc. 155 Winges Road, Unit 1, Vaughan, Ontario, L4L 6C7, Canada

Effective date: June 12, 2026

Last updated: June 12, 2026

This Privacy Policy describes how Alphabyte Solutions Inc. (“Alphabyte”, “we”, “us”, “our”) collects, uses, discloses, and protects personal information when you visit alphabytesolutions.com (the “Site”), contact us, use our products, or engage our consulting services. It also covers information we collect offline, such as when you telephone us, meet us in person, or interact with us at a demo, webinar, or event. It also describes your rights and choices regarding your personal information.

We process personal information in accordance with the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality.

We operate from Canada and serve clients in Canada, the United States, Europe, and the Middle East. We comply with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, the EU and UK General Data Protection Regulation (GDPR), and applicable US state privacy laws.

A note on client data. This policy covers personal information Alphabyte collects for its own purposes — site visitors, prospects, business contacts, and applicants. It does not govern data contained in the systems, data platforms, and applications we build and manage for clients. For that data, we act as a service provider (a “processor” under the GDPR): the client controls the data, chooses where it is hosted, and their privacy policy governs it. Our handling of client solution data is set out in our agreements with each client.

 

1. Personal Information We Collect

Information you provide to us:

• Contact and inquiry information. When you complete a contact form, book a demo, or subscribe to our communications, we collect your name, company name, email address, phone number, website, and area of interest.
• Business relationship information. When you or your organization engages our services, we collect information needed to deliver and administer the engagement, such as names, job titles, business contact details, and billing information.
• Recruitment information. If you apply for a position, we collect the information in your application, such as your resume, contact details, and work history.
• Correspondence. Records of your communications with us by email, phone, or other channels.

Information collected automatically:

• Usage and device data. When you visit the Site, we and our service providers collect information through cookies and similar technologies, including IP address, browser type, device identifiers, pages viewed, and referring URLs. We use Google Tag Manager and related analytics services for this purpose. For details, see our Cookies Policy.

Information from third parties:

• Partner directories and referrals. If you contact us or are referred to us through a partner directory or marketplace (for example, the Microsoft Marketplace partner directory), we receive the information you or the referring party provide, such as your name, company, contact details, and a description of your business need.
• Publicly available and business sources. We may receive business contact information from publicly available sources or business partners for legitimate business development purposes.

We do not intentionally collect sensitive personal information (such as health, biometric, or financial account information) through the Site, and we ask that you do not submit it through our forms.

 

2. How We Use Personal Information

We use personal information to:

• Respond to inquiries and provide information you request;
• Deliver, administer, and improve our products and consulting services, and manage our relationship and any account with you or your organization;
• Send service communications related to an engagement or account;
• Send marketing communications, such as newsletters and information about our products and services, where permitted by law and subject to your right to opt out (see Section 7);
• Operate, secure, and improve the Site, including analytics and performance measurement;
• Evaluate job applications and manage recruitment;
• Comply with legal and regulatory obligations; and
• Establish, exercise, or defend legal claims, and prevent fraud or misuse.

Legal bases (GDPR). Where the GDPR applies, we process personal information on the following bases: performance of a contract (delivering services you or your organization requested); our legitimate interests (operating and securing the Site, business development, responding to inquiries, improving services), balanced against your rights; your consent (certain marketing communications and non-essential cookies); and compliance with legal obligations.

 

3. How We Disclose Personal Information

We do not sell personal information, and we have not sold personal information in the preceding 12 months. We disclose personal information only as follows:

• Service providers. We use third-party providers who process personal information on our behalf to operate our business, such as website hosting, analytics (including Google Tag Manager), cloud infrastructure (including Microsoft Azure), customer relationship management, and email delivery. Service providers are contractually limited to using personal information only to provide services to us and are required to protect it.
• Partner programs. If our relationship with you arises through a partner program (such as the Microsoft AI Cloud Partner Program), we may share limited deal and contact information with the program operator as required to manage the referral or co-sell process.
• Event co-hosts and sponsors. If you register for a demo, webinar, or event we run with a named partner (for example, Microsoft or a distributor), we may share your registration contact information (name, company, email) with that partner for purposes identified at registration, or where you opt in to hear from them. Partners use your information under their own privacy policies.
• Professional advisors. Lawyers, accountants, auditors, and insurers where reasonably necessary.
• Legal and safety. Where required or permitted by applicable law, such as responding to a subpoena, court order, or lawful request by authorities; protecting against fraud; or protecting our rights, property, or safety or that of others.
• Business transactions. In connection with a merger, acquisition, financing, or sale of all or part of our business, personal information may be disclosed to the parties involved, subject to confidentiality obligations and applicable law.

 

4. International Transfers and Data Residency

We are headquartered in Canada. Personal information we collect for our own business purposes (such as inquiries, marketing contacts, and business records) is stored primarily in Canada or the United States with our service providers.

Client solution data is different. When we build or manage data platforms, applications, or analytics solutions for clients, the client’s data is hosted in the cloud region the client chooses — for example, Microsoft Azure regions in Europe for European clients — and we process that data as a service provider under the client’s instructions and our agreement with the client. Data residency for client engagements is determined by the client, not by this policy.

Where we transfer personal information out of the European Economic Area, the United Kingdom, or Switzerland for our own purposes, we rely on appropriate safeguards, such as adequacy decisions (the European Commission has recognized Canada’s commercial privacy law as providing adequate protection for data subject to PIPEDA) or standard contractual clauses with our service providers.

 

5. Retention

We retain personal information only as long as reasonably necessary for the purposes described in this policy, including to maintain business records, comply with legal, tax, and accounting obligations, and resolve disputes. Retention periods vary by the type of information and the purpose: for example, client engagement records are retained for the duration of the engagement plus the period required by law or our professional obligations, and marketing contact information is retained until you opt out or the information becomes inactive. When personal information is no longer required, we securely delete or anonymize it.

 

6. Security

We maintain physical, organizational, and technological safeguards designed to protect personal information against loss, theft, misuse, and unauthorized access, disclosure, alteration, or destruction. These include access controls limiting personal information to authorized personnel, encryption of information in transit where appropriate, network monitoring, vulnerability management, and security training for our personnel. Privacy and security are also part of our professional practice: we conduct privacy impact assessments and cybersecurity audits as client services, and we apply the same disciplines internally. No method of transmission or storage is completely secure; if a breach affecting your personal information creates a real risk of significant harm, we will notify you and the relevant authorities as required by applicable law.

 

7. Marketing Communications

Where required by law (including Canada’s Anti-Spam Legislation), we obtain your consent before sending commercial electronic messages. You may opt out of marketing communications at any time by using the unsubscribe link in any marketing email or by contacting us at the address in Section 11. Opting out of marketing does not affect service communications related to an active engagement or account.

 

8. Your Rights and Choices

Subject to applicable law, you have the right to:

• Access the personal information we hold about you and information about how we have used and disclosed it;
• Correct inaccurate or incomplete personal information;
• Delete your personal information;
• Withdraw consent where processing is based on consent, without affecting prior processing;
• Object to or restrict certain processing, including processing based on legitimate interests and direct marketing (GDPR);
• Data portability of information you provided to us, in a structured, machine-readable format (GDPR); and
• Non-discrimination for exercising your privacy rights (applicable US state laws).

To exercise any of these rights, contact us using the details in Section 11. We may need to verify your identity before acting on a request. We will respond within the timelines required by applicable law, free of charge except where the law permits a reasonable fee.

Canadian provincial laws. If you are in Quebec, Alberta, or British Columbia, provincial private-sector privacy laws apply to our handling of your personal information. In particular, under Quebec’s Act respecting the protection of personal information in the private sector (as amended by Law 25), you have rights of access, rectification, and data portability, and the right to be informed of and have reviewed certain decisions based exclusively on automated processing. The person in charge of the protection of personal information at Alphabyte is our Privacy Officer (Section 11).

California. If you are a California resident, you may request disclosure of the categories and specific pieces of personal information we have collected about you, the purposes of collection, and the categories of third parties to whom it was disclosed, and you may request deletion or correction, subject to legal exceptions. We do not sell or share personal information as defined by the CCPA/CPRA. To make a request, contact us per Section 11 with the subject line “California Privacy Rights.”

If you are not satisfied with our response, you may complain to the relevant supervisory authority: in Canada, the Office of the Privacy Commissioner of Canada (priv.gc.ca) or your provincial commissioner (including the Commission d’accès à l’information du Québec); in the EEA or UK, your local data protection authority or the UK Information Commissioner’s Office.

 

9. Cookies

The Site uses cookies and similar technologies for site functionality, analytics, and measurement. You can manage cookies through your browser settings and, where presented, our cookie consent controls. For a full description of the cookies we use and your choices, see our Cookies Policy.

 

10. Children

The Site and our services are intended for business audiences and are not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

 

11. Contact Us

To ask questions about this policy, exercise your rights, or make a complaint, contact our Privacy Officer. The Privacy Officer is responsible for our compliance with privacy laws, oversees how personal information is handled across the company, and is the designated person in charge of the protection of personal information for the purposes of Quebec’s Law 25:

 

Privacy Officer Alphabyte Solutions Inc. 155 Winges Road, Unit 1 Vaughan, Ontario, L4L 6C7, Canada Email: [email protected]

 

12. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. The revised policy will be posted on this page with an updated effective date, and material changes will be highlighted or otherwise communicated where required by law.