Privacy Policy

This Privacy Policy describes the information collection, use and disclosure practices of GRC Management Advisory Services Inc. and its affiliates (“GRCMAS”, “we”, “us”, or “our”). This Privacy Policy applies to prospects, customers, suppliers, business partners and other individuals and their relationships with us relating to the services and solutions that you may request or receive from us, including through our website (“Our Services”).

1.   How We May Collect and Use Personal Data

We may from time to time collect personal information or data about you. Personal data is information about an identifiable individual and includes, but is not limited to, information such as a name, address, email address, identification number, location data, and online identifier such as your IP address.

The following are ways in which we may collect and use personal data:

1. We collect your personal data required to provide Our Services to you, which includes responding to your queries, identification, account creation and management, security measures, account servicing, customer support and for marketing purposes.
2. We may on occasion obtain information about you and other individuals directly from you when you use Our Services, specifically when you provide and upload the necessary files and data (“Service-Related Data”) to our secured website as part of using the GRCMAS solution, or other of Our Services that we may offer from time to time. In such cases, we act as a “data processor” for you under applicable privacy laws. Personal data may be collected as a corollary result of your upload and submission of Service-Related Data if it contains personal data. Such personal data is generally not used by us for the purposes of providing Our Services.
3. Occasionally, we may also collect information about you online using “cookies” (small pieces of data stored by your Internet browser on your computer) or other tracking technology that may be used to remember passwords for you, speed up your future activities when accessing Our Services, and to provide you with customized content among other things. You may choose to decline cookies if your browser permits but doing so may affect your use of the website and your ability to access certain features of the website.

2.   Your Consent

Your provision of personal data to us means that you agree and consent that we may collect, use, disclose and process such data that you provide in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, we will not be able to offer you Our Services and you will not be able to access any of Our Services.

3.   How We May Share Personal Data

We will use personal data collected from you for internal purposes only. We may share personal data with organizations that perform services on our behalf (“Service Providers”). Service Providers include sub-processors and authorized resellers of Our Services. We take reasonable and appropriate steps to ensure that personal data provided to Service Providers is processed only for the purposes of providing services to us and in a manner consistent with this Privacy Policy.

We will not sell your personal data, nor will we sell or share any personal data that was consequently collected from your submission or uploads of Service-Related Data when using Our Services.

Please note that there are circumstances where the use or disclosure of personal data may be justified or permitted by law. Such circumstances may include:

• Where we believe in good faith that the law requires it;
• Where we believe, upon reasonable grounds, that it is necessary to protect the rights, privacy, safety or property of an identifiable person or group;
• Where it is necessary to protect our rights or property;
• When you have consented to the disclosure;
• Where the information is public; or
• If we are acquired by or merged with another entity (in which case, we will require such entity to assume obligations under this Privacy Policy).

4.   Anonymized and Summarized Data

We may also from time to time collect and share summarized, combined, generic, aggregated, and/or anonymized information derived from personal data with our Service Providers and trusted partners for any of the purposes outlined in this Privacy Policy. In doing so, we will take steps to ensure that the summarized, combined, generic, aggregated, and/or anonymized information cannot be identifiable to you or to any person.

5.   Our Security Procedures

We maintain commercially reasonable physical, technical and procedural safeguards to secure information about you. Once we receive information that is entered into our website, it is encrypted and stored in a secure repository and accessible only through unique user credentials. We limit the access of personal data to those employees, service providers, and agents who assist us in providing Our Services.

6.   Your Access to Information

You may update personal data either by accessing Our Services or by contacting us. If you would like for us to return, remove or make any additional corrections to any personal data or exercise any other data rights available to you under the European Union’s GDPR or from certain jurisdictions, please reach out to us (see “Contact Us” below).

7.   Updates and Amendments to Privacy Policy

We may amend this Privacy Policy from time to time. Your continued use of Our Services following a change to this Privacy Policy means that you provide your consent to the collection, use and disclosure of your personal information as set out in the updated Privacy Policy. Please check back periodically for updates.

8.   Retaining Your Information

We keep your information as long as reasonably required to complete our dealings with you, to provide you Our Services, or as required by law, whichever is longer.

9.   Contact Us

If you have any questions, concerns or complaints about this Privacy Policy, please contact us by emailing info@grcmanagement.ca. If you no longer wish to use Our Services, you may request that the account you have created to use Our Services be closed.