Effective Date: February 01, 2023
Last Updated: January 01, 2026
Ermitsgroup IT Solutions ("Ermitsgroup", "we", "us", or "our") respects the privacy of individuals and is committed to protecting personal information in our possession or under our control.
This Privacy Policy explains how we collect, use, disclose, retain, safeguard, and otherwise handle personal information when you visit our website, contact us, request our services, communicate with us, or otherwise interact with Ermitsgroup.
This Privacy Policy is intended to reflect applicable Canadian privacy requirements, including the Personal Information Protection and Electronic Documents Act (PIPEDA) where applicable and applicable provincial privacy legislation.
Where provincial privacy legislation applies to our activities, we will comply with the requirements applicable to those activities.
For the purposes of this Privacy Policy, personal information generally means information about an identifiable individual.
Depending on how you interact with us, this may include your name, contact information, business information associated with you, communications with us, and technical information that may identify or be associated with you.
We may collect personal information that you voluntarily provide to us, including when you:
Depending on the circumstances, information we collect may include:
We may also automatically collect limited technical information when you use our website, such as browser type, device information, IP address, approximate location, pages visited, and information about how you interact with our website.
We will limit the collection of personal information to information that is necessary for identified and appropriate purposes.
We collect personal information for purposes that a reasonable person would consider appropriate in the circumstances, including:
We will identify the purposes for collecting personal information at or before the time of collection where required by applicable law.
Where required by applicable privacy law, we will obtain meaningful consent before collecting, using, or disclosing personal information.
Consent may be express or implied where permitted by applicable law and depending on the sensitivity of the information and the circumstances.
You may withdraw your consent to certain uses or disclosures of your personal information by contacting our Privacy Officer. Withdrawal of consent will not affect the lawfulness of processing that occurred before consent was withdrawn.
In some circumstances, withdrawing consent may prevent us from providing certain services or responding to certain requests.
There may also be circumstances where we may collect, use, or disclose personal information without consent where permitted or required by applicable law.
We will collect only the personal information that is reasonably necessary for the purposes identified in this Privacy Policy or otherwise communicated to you.
We will collect personal information by fair and lawful means.
We will use personal information only for the purposes for which it was collected, for purposes otherwise permitted or required by law, or with your consent where required.
We may disclose personal information to service providers who perform services on our behalf, such as website hosting, technology services, communications, IT systems, security services, payment processing, professional services, or other business-support functions.
Where we use third-party service providers, we take reasonable steps to ensure that personal information is handled in accordance with applicable privacy requirements.
We may also disclose personal information:
We do not sell or rent personal information.
Some of our service providers may store or process information outside Canada.
When personal information is transferred to or processed in another country, it may be subject to the laws of that jurisdiction and may be accessible to courts, law enforcement agencies, or regulatory authorities in accordance with those laws.
Where required by applicable privacy legislation, we will take appropriate measures and provide applicable information regarding such transfers.
Our website may use cookies and similar technologies to operate the website, remember preferences, understand website usage, improve performance, and maintain security.
We may use analytics or other third-party technologies for website functionality and measurement.
You can configure your browser to refuse or delete cookies. However, disabling certain cookies may affect the functionality of the website.
Where applicable, we will obtain consent for cookies or similar technologies when required by law.
We take reasonable steps to ensure that personal information in our possession or under our control is accurate, complete, and up to date when it is necessary for the purposes for which it is used.
If you believe that personal information we hold about you is inaccurate or incomplete, you may contact our Privacy Officer and request a correction.
We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, provide our services, maintain appropriate business and financial records, resolve disputes, enforce agreements, or meet legal and regulatory requirements.
When personal information is no longer required, we will take reasonable steps to securely destroy, delete, or anonymize it in accordance with our retention practices and applicable law.
We use reasonable physical, technical, and administrative safeguards appropriate to the sensitivity of personal information to protect it against unauthorized access, collection, use, disclosure, copying, modification, loss, theft, or destruction.
Security measures may include access controls, authentication, secure systems, monitoring, employee practices, and other safeguards appropriate to the circumstances.
No electronic transmission or storage system can be guaranteed to be completely secure.
If we experience a security breach involving personal information, we will assess the incident and take reasonable steps to contain, investigate, and address the breach.
Where required by applicable privacy legislation, we will notify affected individuals, regulators, and/or other organizations of a breach of security safeguards.
Under PIPEDA, notification requirements may apply where a breach creates a real risk of significant harm. We will comply with applicable legal requirements concerning breach reporting and notification.
Subject to applicable legal exceptions, you may request access to personal information about you that is under our control.
You may request information about:
We will respond to access requests in accordance with applicable privacy legislation.
If you believe that personal information we hold about you is inaccurate, incomplete, or out of date, you may request that it be corrected.
We will review and address correction requests in accordance with applicable law.
Where our collection, use, or disclosure of personal information is based on your consent, you may withdraw your consent by contacting our Privacy Officer.
Depending on the circumstances, withdrawing consent may affect our ability to provide certain services or respond to certain requests.
Withdrawal of consent does not affect information that we are permitted or required to retain or process under applicable law.
If you provide your contact information, we may contact you regarding services, consultations, assessments, or other business communications where permitted by law.
Where Canada's anti-spam legislation applies, including the Canada Anti-Spam Legislation (CASL), we will comply with applicable requirements concerning commercial electronic messages, including consent and identification/unsubscribe requirements where applicable.
You may unsubscribe from commercial electronic communications by using the unsubscribe mechanism provided in the message or by contacting us.
Our website and services are intended primarily for businesses and general audiences.
We do not knowingly collect personal information from children through our website for purposes that are contrary to applicable law.
If you believe that a child has provided personal information to us, please contact our Privacy Officer.
Our website may contain links to websites or services operated by third parties.
This Privacy Policy does not apply to those third-party websites or services. We encourage you to review the privacy policies of third parties before providing them with personal information.
Ermitsgroup has designated a person responsible for privacy matters and compliance with applicable privacy requirements.
Privacy Officer: Eya Elmadhun
Email: ermitsgroup@outlook.com
You may contact our Privacy Officer regarding:
If you have a concern about how we have handled your personal information, please contact our Privacy Officer first so that we can investigate and attempt to resolve the concern.
We will review privacy complaints and respond within a reasonable period, subject to applicable legal requirements.
If you are not satisfied with our response, you may have the right to contact the privacy regulator with jurisdiction over your matter.
For matters subject to PIPEDA, you may contact the Office of the Privacy Commissioner of Canada.
For matters subject to Quebec's private-sector privacy legislation, you may contact the Commission d'accès à l'information du Québec.
For matters subject to Alberta or British Columbia private-sector privacy legislation, you may contact the applicable provincial privacy commissioner.
We may update this Privacy Policy from time to time to reflect changes in our services, business practices, technology, or applicable privacy requirements.
When we make changes, we will update the "Last Updated" date at the top of this Privacy Policy.
We encourage you to review this Privacy Policy periodically.
If you have questions about this Privacy Policy or how Ermitsgroup handles personal information, please contact our team.