Privacy Policy
for Nexsate Technologies Inc.
About This Privacy Policy
This Privacy Policy explains how Nexsate Technologies Inc. (“Nexsate”, “we”, “us” or “our”) collects, uses, discloses, protects and retains personal information when you visit our website, communicate with us, interact with us as a business contact, apply for an employment opportunity, or otherwise engage with Nexsate in circumstances where this Privacy Policy applies.
This Privacy Policy applies to personal information that Nexsate handles for its own business purposes, including information relating to website visitors, prospective customers, business contacts, partners, suppliers, job applicants and other individuals who communicate or interact with us.
It does not generally govern personal information that Nexsate processes solely on behalf of a customer while providing managed IT, cloud, cybersecurity, software, systems integration or other contracted services. In those circumstances, Nexsate’s handling of the information is governed by the applicable customer agreement, data-processing terms, service documentation, customer instructions and applicable law.
Where another privacy notice or agreement applies to a particular interaction or processing activity, that document will apply to the extent relevant.
Applicable Canadian Privacy Framework
Nexsate is based in Alberta, Canada. Our privacy practices are designed to reflect applicable Canadian private-sector privacy requirements, including Alberta’s Personal Information Protection Act (“PIPA”) and, where applicable, the federal Personal Information Protection and Electronic Documents Act (“PIPEDA”). Other provincial or territorial privacy laws may apply depending on the activity, location and nature of the information.
We collect, use and disclose personal information only for purposes that are reasonable and appropriate in the circumstances and only to the extent reasonably necessary for those purposes. Where consent is required, we seek a form of consent appropriate to the sensitivity of the information and the circumstances.
What “Personal Information” Means
“Personal information” generally means information about an identifiable individual, subject to exclusions and definitions under applicable law. It may include information that directly identifies a person and information that can reasonably be linked to a person when combined with other information.
Business contact information may be subject to different treatment under applicable law when used solely for business communications. Nexsate nevertheless seeks to handle business contact information responsibly and in accordance with this Policy where appropriate.
Personal Information We May Collect
The personal information we collect depends on how you interact with us. We seek to limit collection to information reasonably needed for the identified purpose.
Category | Examples |
Contact and identity information | Name, business email, telephone number, company, job title, mailing details and other identifiers you choose to provide. |
Inquiry and relationship information | Messages, support or sales inquiries submitted through public channels, meeting requests, business interests, proposal-related information, feedback and correspondence. |
Appointment information | Requested meeting date/time, attendees, business contact details, scheduling preferences and information you place in a booking request. |
Recruitment information | Resume/CV, employment and education history, qualifications, professional profile information, references and other information you choose to provide in connection with a job application. |
Device and usage information | IP address, browser/device type, operating system, referring page, pages viewed, timestamps, approximate region derived from IP, diagnostic information and similar website-use data. |
Cookie and preference information | Cookie identifiers, consent choices, language or site preferences and analytics or performance information where enabled. |
Marketing preferences | Subscription status, communication preferences, consent records and unsubscribe history. |
Security and compliance information | Information reasonably necessary to protect the Website, detect misuse, investigate incidents, enforce legal rights or comply with legal obligations. |
Nexsate does not ask users to provide passwords, multi-factor authentication codes, private keys, recovery codes, payment-card information, patient health information or other highly sensitive or regulated information through ordinary email, appointment-booking fields or other general-purpose communication channels. If sensitive information is required for a legitimate purpose, Nexsate will provide or identify an appropriate secure channel where reasonably practicable.
How We Collect Personal Information
Nexsate may collect personal information:
- directly from you when you contact us by email or telephone, book a meeting, apply for a role, request or consent to communications, speak with us or otherwise provide information;
- automatically when you use the Website, through server logs, cookies and similar technologies where enabled;
- from your employer or organization when you act as its representative or business contact;
- from referrals, partners, events, professional networks, social-media platforms or publicly available sources where collection is reasonable and permitted by law; and
- from service providers that support our Website, communications, security, scheduling, analytics, recruiting or business operations, where permitted by law.
Why We Use Personal Information
Nexsate may collect, use and disclose personal information for purposes such as:
- responding to inquiries, requests, complaints and other communications;
- scheduling meetings, demonstrations, consultations and follow-up communications;
- understanding business requirements and preparing quotes, proposals or potential service arrangements;
- administering and improving the Website, content, user experience and business processes;
- maintaining Website security, detecting fraud or misuse, troubleshooting and protecting Nexsate, clients and users;
- managing business contacts, suppliers, partners and professional relationships;
- recruiting, assessing candidates and administering employment-related processes;
- sending service, transactional or administrative communications;
- sending marketing communications where consent exists or another lawful basis permits the communication;
- maintaining records, demonstrating consent, meeting legal or contractual obligations and exercising or defending legal rights;
- supporting a prospective or completed business transaction, reorganization, financing, merger or sale where permitted by law; and
- other purposes identified at or before collection, or otherwise permitted or required by law.
Consent and Your Choices
Where consent is required, Nexsate will provide information reasonably sufficient for you to understand the nature, purpose and consequences of the collection, use or disclosure. Consent may be express or implied where permitted by law and appropriate to the sensitivity of the information and your reasonable expectations.
You may withdraw consent to future collection, use or disclosure where consent is the applicable basis, subject to legal or contractual restrictions and reasonable notice. Withdrawal may affect Nexsate’s ability to provide a requested communication, meeting, service or other interaction. Withdrawal does not invalidate processing that was lawful before the withdrawal.
Where a collection, use or disclosure is not necessary to provide a requested function or service, Nexsate will provide choice where required by applicable law.
Business Inquiries and Appointments
Information you provide when you contact Nexsate by email, telephone, an appointment-scheduling service, a meeting or another direct communication is used to understand and respond to your request, schedule and administer the interaction, maintain an appropriate business record and carry out reasonable follow-up. A request or booking does not by itself create a client relationship.
Where appointment scheduling is provided through a third-party service, that provider may process the scheduling information under its own privacy terms in addition to Nexsate’s applicable privacy practices.
Do not send confidential customer data, credentials, security secrets, regulated records or other highly sensitive information through ordinary email, appointment-booking fields or other general-purpose communication channels unless Nexsate expressly directs you to a designated secure method.
Recruitment and Applicant Information
If you apply for employment or another work opportunity, Nexsate may collect and use information reasonably related to recruiting, assessing suitability, communicating with you, verifying information where appropriate, maintaining recruitment records and, if an offer is made, establishing the employment or contractor relationship.
Recruitment information may be shared internally with personnel involved in hiring and with approved recruitment, background-screening or professional service providers where appropriate and permitted by law. Nexsate will not use applicant information for unrelated purposes without appropriate authority.
Customer-Controlled Data and Managed Services
In providing managed IT, cloud, cybersecurity, software, integration or other services, Nexsate may process personal information under the direction or authority of a customer. In those circumstances, the customer may determine the purposes for which the information is collected and used, and Nexsate’s processing may be governed by the applicable customer agreement, statement of work, data-processing terms, security requirements and customer instructions.
This public Privacy Policy does not expand Nexsate’s rights to use customer-controlled data for its own unrelated purposes and does not replace a customer’s obligation to provide its own privacy notices or obtain any authorization required for the customer’s collection and use of personal information.
Cookies and Similar Technologies
The Website may use cookies and similar technologies to operate core functionality, remember preferences, protect the Website, understand performance and usage, and support analytics or other disclosed purposes. Cookies may be session-based or persistent and may be set by Nexsate or approved third-party service providers.
Where required by applicable law, Nexsate will provide notice and choice before using non-essential cookies or similar technologies for analytics, advertising or other non-essential purposes. You may also be able to manage cookies through your browser or any consent-management controls made available on the Website. Blocking some cookies may affect Website functionality.
Additional details about cookie categories, providers, purposes and retention may be provided in a separate Cookie Notice or consent-management interface.
Electronic Communications and Marketing
When you initiate a request, booking, application or other inquiry, Nexsate may send electronic communications reasonably necessary to respond to, administer or complete that interaction. Such communications are distinct from unrelated marketing communications.
Nexsate will send commercial electronic messages in accordance with applicable law, including Canada’s anti-spam legislation (“CASL”) where it applies. Where consent is required, Nexsate will obtain and retain appropriate evidence of consent. Marketing messages will include applicable identification and unsubscribe mechanisms, and unsubscribe requests will be processed as required by law.
How We Share Personal Information
Nexsate does not disclose personal information indiscriminately. Depending on the circumstances, personal information may be disclosed to:
- service providers supporting website hosting, cloud productivity, communications, scheduling, analytics, cybersecurity, customer relationship management, recruitment, document management or other business functions;
- professional advisers such as legal counsel, accountants, insurers, auditors and consultants where reasonably necessary;
- business partners or technology providers when you request or authorize an interaction involving them;
- a purchaser, investor, lender or other party in connection with a proposed or completed business transaction where permitted by law and subject to appropriate safeguards;
- law enforcement, regulators, courts, government authorities or other parties where disclosure is required or permitted by law; and
- other parties with your consent or where otherwise permitted by applicable law.
Service providers are expected to handle personal information only for authorized purposes and to use safeguards appropriate to the nature of the information and service.
Cross-Border Processing and Service Providers Outside Canada
Nexsate may use approved service providers whose systems or personnel process or store personal information outside Canada. Depending on the service and configuration, this may include processing in the United States. Outside-Canada processing may support functions such as cloud productivity and communications, appointment scheduling, website hosting and security, analytics and diagnostics, recruitment, customer relationship management, document management and other business operations. Personal information processed outside Canada may be subject to the laws of the foreign jurisdiction and may be accessible to courts, law-enforcement or governmental authorities in accordance with those laws.
Where applicable law requires Nexsate to identify the country in which an outside-Canada service provider may collect, use or disclose personal information and the purpose for which the provider is authorized to handle that information, Nexsate will make that information available through this Policy, an applicable collection notice, a Cookie Notice or other readily accessible privacy-practices documentation. The Privacy Officer can answer questions about Nexsate’s use of service providers outside Canada.
Nexsate will review material changes to outside-Canada processing arrangements and update its privacy information when a new country, processing purpose or service-provider arrangement creates a material change or where additional notice or consent is required by law.
Current provider categories and potential outside-Canada processing purposes are summarized below. Exact providers and configurations may change; Nexsate will update this notice when required by law.
Service-provider category | Typical purpose | Potential processing location |
Cloud productivity, communications and scheduling | Email, business communications, meeting and appointment administration, collaboration and related records. | Canada and the United States, depending on the service and configuration. |
Website infrastructure, security, analytics and diagnostics | Hosting or delivering Website functions, protecting the Website, troubleshooting, measuring performance and understanding usage where enabled. | Canada and the United States, depending on the provider and configuration. |
Recruitment and business operations | Candidate communications, recruiting workflows, document management, customer relationship management and related business administration where used. | Canada and the United States, depending on the provider and configuration. |
No Sale or Rental of Personal Information
Nexsate does not sell or rent personal information. Nexsate does not disclose personal information to third parties for their own unrelated direct-marketing purposes unless the individual has provided appropriate authorization or the disclosure is otherwise permitted by law.
Accuracy
Nexsate will make reasonable efforts to keep personal information as accurate, complete and current as is reasonably necessary for the purposes for which it is used. Individuals are encouraged to provide updated information when material details change.
Retention and Secure Disposal
Nexsate retains personal information only for as long as reasonably necessary to fulfil the identified business or legal purposes, satisfy contractual or statutory obligations, maintain appropriate business records, resolve disputes and enforce agreements. Retention periods may differ by record type and context and are governed by applicable retention requirements and Nexsate’s records-management practices.
When personal information is no longer required, Nexsate will securely destroy, delete or effectively anonymize it in a manner appropriate to the sensitivity, format and storage technology, subject to legal holds, backup lifecycle constraints and other lawful retention requirements.
Safeguards
Nexsate uses administrative, technical and physical safeguards appropriate to the sensitivity, amount, format, location and risks associated with personal information. Depending on the environment and information involved, safeguards may include access controls, least privilege, multi-factor authentication, encryption, secure configuration, logging and monitoring, backup and recovery controls, endpoint and network security, vendor oversight, personnel confidentiality obligations, security awareness and secure disposal practices.
No method of transmission, storage or Internet security is risk-free. Nexsate cannot guarantee absolute security, but it maintains processes intended to prevent, detect, respond to and recover from unauthorized access, loss, misuse, alteration or disclosure.
Privacy and Security Incidents
Nexsate maintains processes to investigate suspected or confirmed privacy and security incidents, contain and remediate issues, assess potential harm and determine applicable notification and recordkeeping obligations. Nexsate will maintain breach or incident records where required by applicable law and will notify the appropriate privacy regulator and/or affected individuals when the applicable legal threshold for notification is met.
If you believe personal information provided to Nexsate has been lost, misused, accessed without authorization or otherwise compromised, please contact the Privacy Officer promptly through the contact method described below.
Access, Correction and Other Privacy Requests
Subject to applicable law and permitted exceptions, you may request access to personal information Nexsate holds about you and request correction of information that is inaccurate or incomplete. Nexsate may need to verify your identity before responding and may request sufficient detail to locate the relevant records.
Where permitted by law, Nexsate may refuse or limit access to certain information, including information protected by privilege, information about another individual, confidential commercial information or information subject to another statutory exception. Any fee permitted by law will be communicated before the request is processed.
You may also ask questions about our privacy practices, withdraw consent where applicable, update communication preferences or raise a privacy concern. Nexsate will respond in accordance with applicable legal requirements and its privacy procedures.
Children and Young People
The Website is intended for business and general informational use and is not directed to children or young people. Nexsate does not knowingly seek to collect personal information from minors through general Website features. Where consent from a parent, guardian or other authorized person is required by applicable law, Nexsate will obtain that consent or otherwise take appropriate steps regarding the information.
Third-Party Websites, Social Media and Integrations
The Website may link to or interact with third-party websites, social-media platforms, scheduling services, maps, embedded content or other external services. Those third parties operate under their own privacy practices and terms. Nexsate is not responsible for the privacy practices of a third party merely because the Website contains a link or integration.
You should review the applicable third-party privacy notice before providing personal information directly to that third party.
Changes to This Privacy Policy
Nexsate may update this Privacy Policy from time to time to reflect changes in law, technology, Website features, service providers or business practices. The current version will be posted with an updated “Last Updated” date. Where a material change requires additional notice or consent under applicable law, Nexsate will provide that notice or obtain consent as required.
Questions, Requests and Complaints
Questions, access or correction requests, consent-withdrawal requests and privacy complaints may be directed to:
Privacy Officer
Nexsate Technologies Inc.
Edmonton, Alberta, Canada
Contact: by email using the privacy or corporate contact address published on the Website. Please use the subject line “Privacy Request.”
Nexsate will review privacy concerns and make reasonable efforts to resolve them. Depending on the applicable law and circumstances, you may also have the right to contact the Office of the Information and Privacy Commissioner of Alberta, the Office of the Privacy Commissioner of Canada, or another privacy regulator with jurisdiction over the matter.