Who we are
This policy is issued by Noctys Technologies, Inc. (“Noctys”, “we”, “us”), a corporation incorporated under the laws of Canada. It applies to www.noctys.com, to correspondence with us, and to personal information we handle in the course of our business.
We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, where it applies, Alberta's Personal Information Protection Act (PIPA).
What we collect
When you visit this website
Like almost every web server, ours records basic technical details of each request: your IP address, the date and time, the page or file requested, the response, your browser's user-agent string, and the referring page, if any. We use these logs only to keep the site secure and working — for example, to detect abuse, diagnose errors, and enforce rate limits.
That's all. This site:
- sets no cookies and uses no local storage;
- runs no analytics, advertising, session-recording, or social-media scripts;
- loads every font, image, and script from our own server, so your browser doesn't contact any third party when you visit.
When you email us
If you write to us, we receive your email address, your name if you include it, and whatever you choose to tell us. We use it to reply, to discuss or provide our services, and to keep a record of the conversation.
The status dashboard
The status page shows service health published by Microsoft. It contains no personal information, and your browser fetches it only from our server.
Our clients' systems
When we provide managed services, we may process personal information held in our clients' systems. We do that on our clients' behalf and only as their agreements with us allow. Those agreements, not this policy, govern that information. If you have questions about information a Noctys client holds about you, please contact that organization first.
How we use it
We use personal information only for the purposes described above: operating and securing this website, responding to you, and providing and improving our services. We don't sell personal information, rent it, or use it for advertising, and we don't make automated decisions about you.
By emailing us, you consent to our using your information to respond. You may withdraw that consent at any time, subject to legal or contractual restrictions; we'll tell you if withdrawing affects what we can do for you.
Who we share it with
We share personal information only with service providers who help us run our business, such as our hosting and email providers, and only as much as they need to provide their service. They must protect it and use it only on our instructions. We may also disclose information when the law requires it, or to protect our rights, our clients, or the public.
Where it's stored
This website is hosted on servers located in Canada. Some of our service providers, including email, may store or process information in other countries, such as the United States. Information held there is subject to the laws of that country and may be accessible to its courts, law enforcement, and national security authorities.
How long we keep it
- Web server logs are deleted automatically after about 14 days.
- Rate-limiting records (an IP address and a request count) are held in memory for about a minute.
- Correspondence is kept for as long as we need it to serve you and meet our legal, accounting, and contractual obligations. Then we delete it.
How we protect it
Protecting information is our trade. We use safeguards that match the information's sensitivity: encrypted connections (HTTPS with HSTS), a strict content security policy, least-privilege access, hardened and monitored infrastructure, and prompt patching. No system is perfectly secure, but we work hard to deserve your trust.
If a breach of security safeguards involving personal information under our control creates a real risk of significant harm, we'll notify the people affected and the appropriate privacy regulator, as the law requires.
Your rights
You may ask us:
- whether we hold personal information about you, and for a copy of it;
- how we've used it and to whom we've disclosed it;
- to correct information that is inaccurate or incomplete;
- to withdraw your consent to further use.
Write to our Privacy Officer at the address below. We'll respond within 30 days and may need to confirm your identity first. If we can't grant a request, we'll explain why.
Children
This website and our services are intended for businesses. We don't knowingly collect personal information from children.
Changes to this policy
If our practices change, we'll update this policy and the date at the top of the page. If a change significantly affects how we handle information we already hold, we'll take reasonable steps to let the affected people know.
Contact and complaints
Our Privacy Officer is responsible for our compliance with this policy. Questions, requests, and concerns go to:
If you're not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada or, where Alberta's law applies, the Office of the Information and Privacy Commissioner of Alberta.