Iron Shield Systems Inc. ("Iron Shield," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information in connection with this website (the "Site"), and describes the rights available to individuals in Canada and the United States. This Site is an informational corporate website, and we aim to collect as little personal information as reasonably necessary. By using the Site or contacting us through it, you acknowledge the practices described in this policy.

1. Who We Are & Scope

Iron Shield Systems Inc. is a company based in Ontario, Canada, and is the organization responsible for the personal information handled through this Site (the "controller" or "business" under applicable laws). This policy applies to personal information we collect through the Site and related business communications. It does not apply to information governed by a separate written agreement or by the terms of a specific platform (see the Platform Disclaimers).

2. Personal Information We Collect

We collect the following categories of personal information:

• Identifiers and contact information you provide, such as your name, organization or agency, and business email address.
• Professional information: your role or stated area of interest, and any professional details you choose to include.
• Inquiry content: the contents of the messages, requests, and correspondence you send us.
• Technical and usage information collected automatically, such as IP address, browser and device type, referring pages, and the dates and times of your visits, used to keep the Site secure and operational.

We do not intentionally collect sensitive personal information through this Site, and we ask that you not submit controlled, classified, or export-restricted information, or sensitive personal data, through the Site.

3. Sources of Information

We collect personal information directly from you when you contact us or complete a form, and automatically from your device and browser when you visit the Site. We do not purchase personal information for marketing.

4. How & Why We Use Information

We use personal information to respond to and manage your inquiry; to evaluate potential business, procurement, or partnership relationships; to operate, secure, maintain, and improve the Site; to communicate with you; and to comply with our legal, regulatory, contractual, and export-control obligations. We do not use your information to carry out automated decision-making that produces legal or similarly significant effects about you.

Consent and legal authority. Canadian private-sector privacy law, the Personal Information Protection and Electronic Documents Act (PIPEDA) and, in Quebec, the Act respecting the protection of personal information in the private sector (Law 25), is primarily consent-based. We rely on your consent, express or implied, when you contact us or submit information through the Site, and we collect, use, and disclose personal information only for the purposes identified in this policy or as otherwise permitted or required by law. Where an applicable law provides a statutory exception to consent, for example, to detect or prevent fraud, to meet a legal or regulatory obligation, or in the course of a business transaction, we may rely on that exception. We obtain fresh consent where a new purpose requires it.

5. Cookies, Analytics & Do-Not-Track

The Site uses only cookies and similar technologies that are necessary for it to function and to keep it secure; it does not use them for advertising. Because we do not sell or "share" personal information or use it for cross-context behavioural advertising, there is currently no such activity for a browser-based opt-out signal to apply to. If we later enable optional analytics or measurement (for example, a web-analytics service), we will update this policy, obtain consent where required, and honour recognized opt-out preference signals, including the Global Privacy Control (GPC), where applicable law requires us to treat them as a valid opt-out and our systems technically support them.

6. How We Disclose Information

We disclose personal information only as follows: to service providers and processors that host the Site or help us manage communications, under confidentiality and data-protection obligations and only as needed to provide their services; where required by law, regulation, legal process, or lawful governmental request, including in connection with export-control, sanctions, and end-user verification requirements; in connection with a corporate transaction such as a financing, merger, acquisition, or reorganization, subject to appropriate confidentiality protections; and to protect the rights, safety, and security of Iron Shield, our partners, and the public. We do not disclose personal information for third-party advertising.

7. We Do Not Sell or "Share" Personal Information

Iron Shield does not sell personal information, and does not "share" it for cross-context behavioural advertising, as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA) and similar U.S. state laws. We have not sold or shared personal information in the preceding twelve months, and we do not knowingly sell or share the personal information of individuals under 16 years of age.

8. International Data Transfers

Iron Shield operates from Canada and works with partners and service providers in allied jurisdictions, including the United States. Personal information may be processed in, or accessible from, Canada, the United States, or other countries whose data-protection laws may differ from those of your jurisdiction, and may be accessible to the courts, law-enforcement, and regulatory authorities of those countries. Where required, we take steps designed to ensure your information continues to receive an appropriate level of protection.

9. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes described in this policy, to maintain a record of our business communications, and to meet our legal, regulatory, and export-control obligations, after which it is securely deleted or anonymized.

10. Security

We apply reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, theft, and unauthorized access, disclosure, alteration, and destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your Privacy Rights: Canada

Under the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws (including British Columbia's and Alberta's Personal Information Protection Acts), you may request access to and correction of the personal information we hold about you, and you may withdraw consent, subject to legal and contractual restrictions. Under Quebec's Law 25, eligible individuals additionally have rights of access, rectification, portability of computerized personal information, de-indexing, and the right to be informed about and to submit observations regarding decisions based solely on automated processing. To exercise these rights, contact our Privacy Officer at info@ironshieldsystems.com. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada, the Commission d'accès à l'information du Québec (CAI), or your applicable provincial commissioner.

12. Your Privacy Rights: United States

California (CCPA/CPRA). California residents have the right to know and access the categories and specific pieces of personal information we collect, use, and disclose; to request deletion; to request correction; to opt out of the sale or sharing of personal information; to limit the use of sensitive personal information; and not to receive discriminatory treatment for exercising these rights. As stated above, we do not sell or share personal information. You may use an authorized agent to submit a request.

Other U.S. states. Residents of states with comprehensive consumer-privacy laws, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, and others as they take effect, may have the rights to confirm and access their personal data; to correct inaccuracies; to delete personal data; to obtain a portable copy; and to opt out of targeted advertising, the sale of personal data, and certain profiling. Where a request is denied, you have the right to appeal by replying to our response.

How to exercise your rights. Submit a request to info@ironshieldsystems.com. We will verify your request using the information we hold, respond within the timeframes required by applicable law, and will not charge a fee except as permitted by law. We will not discriminate against you for exercising your rights.

13. Children's Privacy

The Site is intended for business and professional audiences and is not directed to children. We do not knowingly collect personal information from children under 13 (or the minimum age in your jurisdiction). If you believe a child has provided us personal information, contact us and we will delete it.

14. Third-Party Links

The Site may link to, or embed content from, third-party websites and services that we do not control. We are not responsible for their privacy practices, and we encourage you to review their policies.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by the "last updated" date above, and, where required by law, we will provide additional notice. Your continued use of the Site after an update constitutes acknowledgement of the revised policy.

16. Contact & Complaints

To reach our Privacy Officer, or for any question about this policy or our handling of personal information, contact us at info@ironshieldsystems.com. You may also lodge a complaint with the privacy regulator in your jurisdiction, including the Office of the Privacy Commissioner of Canada, the Commission d'accès à l'information du Québec, your provincial commissioner, or your state Attorney General.