Privacy policy
Last updated 2 November 2026
This policy explains what personal information Bison IT Services collects, why, and what we do with it. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL).
What we collect
- When you use the contact form: your name, business name, email address, the service you're interested in, and your message.
- When you ask for the Microsoft 365 Security Checkup: your first name, work email, and a record of your consent (when you agreed and on which page).
- When you email or call us: your contact details and whatever you choose to tell us.
- When you visit the site: basic technical information such as your IP address and browser type, which our hosting provider records to keep the site running and secure.
We don't ask for more than we need, and we never ask for passwords through this website.
How we use it
- To reply to your enquiry and book your discovery call.
- To prepare quotes and deliver the services you sign up for.
- To send invoices and keep the records the law requires us to keep.
We only send you marketing email if you've agreed to it or the law allows it, and every email has an easy way to unsubscribe. We never sell or rent your personal information.
Analytics and cookies
We use Cloudflare Web Analytics to count visits and see which pages are useful. It doesn't use cookies, doesn't build a profile of you, and doesn't track you across other websites. This site doesn't set any tracking or advertising cookies.
Who we share it with
We use a small number of trusted providers to run the business. They only get what they need to do their job:
- Microsoft (Azure and Microsoft 365) hosts this website and our email, where contact form messages are delivered.
- Cloudflare provides the visitor counts described above.
- Brevo runs the email list for people who ask for the Microsoft 365 Security Checkup. You're only added after you confirm through a link we email you (double opt in), and you can unsubscribe from any email.
- Our accountant and accounting software handle invoices and tax records.
Some of these providers may store or process information outside Canada, including in the United States, where it may be accessible to authorities under local law. We may also disclose information when the law requires it.
How long we keep it
If you contact us but don't become a client, we delete your enquiry within 2 years of our last conversation. If you're on the checkup email list, you stay on it until you unsubscribe. Client records are kept for as long as you're a client, plus the time tax and business laws require (generally 6 years in Canada).
How we protect it
Our accounts use multi factor sign in, our devices are encrypted and kept up to date, and access to your information is limited to the people who need it to serve you. The contact form is sent over an encrypted connection.
Your choices and rights
You can ask us at any time to:
- tell you what personal information we hold about you,
- correct anything that's wrong,
- stop sending you email, or delete your information where we're not required to keep it.
We'll reply within 30 days.
Information in client systems
When we manage IT for a client, we may see information stored in their systems. We treat that information as confidential, use it only to deliver the service, and handle it under our agreement with that client.
Contact us
The owner of Bison IT Services is responsible for privacy. For questions, requests or concerns, emailhello@bisonitservices.ca.
If you're not satisfied with our answer, you can contact theOffice of the Privacy Commissioner of Canada.
Changes to this policy
If we change this policy, we'll post the new version here and update the date at the top.