Legal

Privacy Policy.

Canadian Cybersecurity Network

Effective September 15, 2026

Last updated September 9, 2026

1. Who we are

The Canadian Cybersecurity Network, referred to as CCN, is a Canadian community and business ecosystem focused on cybersecurity, technology, digital trust, talent, business growth, research and collaboration.

This Privacy Policy explains how CCN collects, uses, discloses, retains and protects personal information when you visit our websites, register for or use the CCN Intelligence Platform, become a member, create a profile, contribute content or research, attend an event, communicate with us or otherwise interact with CCN.

This policy is intended to provide clear information about our privacy practices. Consent for a particular collection, use or disclosure will be requested separately where required.

Back to top

2. Privacy laws and accountability

CCN handles personal information in accordance with applicable Canadian privacy laws. These may include the Personal Information Protection and Electronic Documents Act and applicable private sector privacy legislation in Quebec, British Columbia and Alberta.

CCN has designated a Privacy Officer who is responsible for overseeing our privacy practices and responding to questions, requests and complaints. Contact information appears at the end of this policy.

Back to top

3. Personal information we collect

The information we collect depends on how you interact with CCN.

3.1 Contact, account and identity information

We may collect your name, email address, telephone number, region, language preference, professional title, employer, account identifiers and authentication related information.

3.2 Membership and organization information

If you apply for or manage a membership, we may collect your membership type and status, organization name, organization size, sector, role, professional interests and information needed to administer the membership relationship.

3.3 Success Profile and professional information

If you create an individual or business Success Profile, we may collect information about goals, interests, skills, capabilities, hiring needs, learning priorities, contribution preferences, desired connections and other responses you choose to provide.

Your identity information and your profile responses are managed as distinct information. Where privacy controls are available, those settings determine which profile responses may be visible to other members or used for matching and recommendations.

3.4 Expert, contributor and public profile information

If you apply to become an Expert, contribute a signal, article, interview, podcast, research response or other material, we may collect your professional biography, photograph, credentials, areas of expertise, organization, social profile links and submitted content.

We will identify when information is intended for publication. Approved public profiles and attributed contributions may be visible to anyone. Private contact information, authentication information, payment information, internal notes and administrative fields are not included in public profiles.

3.5 Events, surveys and research

We may collect event registration information, attendance, feedback, survey responses and demographic or contextual information that you choose to provide. We will explain when responses will be attributed, shared with a partner or used in aggregated research.

3.6 Career and opportunity information

Where CCN offers career, hiring, mentoring or opportunity tools, we may collect information such as employment interests, skills, certifications, availability, role preferences, resumes or profile content that you choose to provide.

3.7 Communications

We may collect information contained in emails, support requests, meeting requests, comments and other communications with CCN.

3.8 Technical and usage information

When you use our websites or platform, we may collect IP address, browser and device information, operating system, general location derived from IP address, pages viewed, links selected, referring pages, session information and basic form or campaign events.

We use this information to operate and secure our services, troubleshoot problems, understand usage and improve performance.

Back to top

4. Cookies and similar technologies

CCN may use cookies and similar technologies to maintain secure sessions, remember language and other preferences, understand website usage, protect our services and measure engagement.

Cookies that are necessary for security or core functionality may operate automatically. Where required, optional analytics or marketing technologies will not be activated without appropriate consent. You may manage available choices through our consent tools or your browser settings. Disabling necessary cookies may affect website or platform functionality.

Back to top

5. How we use personal information

CCN may use personal information to:

  1. Operate, secure and improve our websites, platform, accounts and services.
  2. Process registrations and administer individual, business, Expert and other relationships.
  3. Provide community, learning, networking, mentoring, talent, hiring, marketplace and event services.
  4. Create and manage Success Profiles and provide requested connections, content and opportunity recommendations.
  5. Review, validate, edit and publish approved profiles, signals, articles, interviews, research and other contributions.
  6. Conduct surveys, research and analysis and produce reports, briefs and aggregate insights.
  7. Deliver service messages, newsletters, event information and other communications you requested or consented to receive.
  8. Respond to inquiries, provide support and manage meetings or relationships.
  9. Detect, investigate and prevent fraud, abuse, security threats and unauthorized activity.
  10. Meet legal, regulatory, accounting and contractual obligations.

CCN does not sell personal information or membership lists.

CCN does not disclose personal or business information to members, partners, sponsors, advertisers or other outside organizations for their own use without consent, except where disclosure is required or permitted by law.

CCN never sells, rents, distributes or provides access to its membership lists. Membership lists are for CCN use only to administer member relationships, improve services and inform members about information, services and opportunities available to them.

CCN may use information that has been aggregated or anonymized so that it no longer identifies an individual to understand trends, produce statistics, conduct research and improve our services.

Back to top

6. Matching and automated recommendations

The CCN Intelligence Platform may use rules based tools to suggest relevant connections, learning, content, opportunities or ways to contribute based on information you provide and the privacy choices associated with that information.

These suggestions are intended to support your decisions. They are not decisions about employment, credit, insurance, legal rights or membership eligibility. CCN does not use Success Profile responses to make decisions based exclusively on automated processing that produce legal or similarly significant effects.

Where applicable law provides rights concerning a decision based exclusively on automated processing, CCN will provide the required information and opportunity for review.

Back to top

7. Consent and choices

CCN seeks meaningful consent for the collection, use and disclosure of personal information where consent is required. The form of consent depends on the sensitivity of the information and the reasonable expectations associated with the interaction.

We may rely on express consent, such as when you submit a form, activate a profile, select a visibility setting or agree to receive communications. We may rely on implied consent only where permitted by law and appropriate in the circumstances.

You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawal may limit our ability to provide a service that depends on the information.

Commercial electronic messages are sent in accordance with Canada’s anti spam legislation. Messages include sender identification and an unsubscribe mechanism where required. Service, security, membership and transactional messages may still be sent when necessary to manage an existing relationship or request.

Back to top

8. When we disclose personal information

CCN may disclose personal information in the following circumstances.

8.1 Service providers

We may use providers for hosting, authentication, website operation, analytics, email delivery, customer relationship management, community services, event services, scheduling, file storage and payment processing. Providers receive only the information reasonably required to perform their services and are expected to protect it and use it only for authorized purposes.

These providers process information on behalf of CCN and do not receive membership lists for their own purposes. Their limited processing does not permit them to market independently to CCN members or use member information for unrelated activities.

8.2 Program, event and research partners

Where you register for a joint event, program or research initiative, CCN will disclose personal or business information to an identified partner only with your consent or where required by law. Research information will be aggregated or anonymized where attribution is not part of the stated purpose.

8.3 Information you choose to publish or share

Information in an approved public profile or attributed contribution may be accessible to the public. Information you choose to make visible to other members may be accessible according to the selected visibility setting.

8.4 Legal, safety and security purposes

CCN may disclose information where permitted or required by law, legal process or regulatory authority, or where reasonably necessary to protect the rights, safety and security of CCN, our members, users, partners or systems.

8.5 Organizational transactions

If CCN enters a reorganization, financing, merger, sale or transfer of some or all of its operations, relevant information may be disclosed subject to applicable law, confidentiality obligations and continued protection.

CCN does not permit third parties to use member information for their own unrelated marketing lists.

Back to top

9. Business membership payments

Business membership payments are processed by an external payment provider. CCN does not receive or store complete payment card details.

The CCN platform verifies qualifying purchases using payment and order information obtained securely from the payment provider. It may retain provider payment or order identifiers, membership level, confirmation date, purchaser and organization information, and membership start and end dates. The platform does not retain payment amounts, currency, card details or complete provider transaction payloads as part of the membership record.

The payment provider handles information under its own privacy policy and legal obligations.

Back to top

10. Processing outside your province or Canada

Some service providers may process or store personal information outside your province or outside Canada. Information processed in another jurisdiction may be subject to the laws of that jurisdiction and may be accessible to courts, governments, law enforcement or regulatory authorities in accordance with those laws.

CCN uses contractual, organizational and technical measures appropriate to the information and service involved. Where required by applicable law, CCN assesses privacy factors before communicating personal information outside Quebec or engaging a provider that will process it there.

You may contact the Privacy Officer to request information about relevant service providers or jurisdictions.

Back to top

11. How we protect personal information

CCN uses administrative, technical and physical safeguards appropriate to the sensitivity, amount, format and location of the information. Measures may include access controls, role based permissions, encryption in transit, secure authentication, logging, vendor review, restricted administrative access, policies and staff awareness.

No method of transmission or storage is completely secure. CCN regularly reviews its safeguards and adjusts them as risks and services evolve.

If a privacy or security incident occurs, CCN will investigate, take reasonable steps to reduce harm, maintain required records and notify affected individuals and regulators when required by law.

Back to top

12. Retention and deletion

CCN retains personal information only for as long as reasonably necessary for the purposes identified in this policy, to manage an ongoing relationship, resolve disputes, enforce agreements or meet legal, accounting, security and regulatory requirements.

Retention periods vary according to the type and sensitivity of the information. When personal information is no longer required, CCN will securely delete, destroy or anonymize it in accordance with applicable requirements.

Anonymized information that can no longer identify an individual may be retained for research, statistical and service improvement purposes.

Back to top

13. Access, correction and other privacy rights

Subject to applicable law and limited exceptions, you may request:

  1. Access to personal information CCN holds about you.
  2. Correction of inaccurate or incomplete personal information.
  3. Withdrawal of consent for particular uses or disclosures.
  4. Deletion or anonymization where the information is no longer required or where another legal basis does not apply.
  5. Information about how CCN has collected, used or disclosed your personal information.
  6. Review of a privacy concern or complaint.
  7. Information or review rights associated with an exclusively automated decision where applicable.

CCN may need to verify your identity before completing a request. We will respond within the period required by applicable law and will explain any lawful limitation or refusal.

Where available, you may also update certain account, profile and visibility information directly through the platform.

If you are not satisfied with CCN’s response, you may contact the Office of the Privacy Commissioner of Canada or the privacy regulator in your province.

Back to top

14. Children and youth

CCN’s websites, memberships and professional platform are primarily intended for adults. CCN may offer specific educational, career or community initiatives that include students or youth.

We do not knowingly collect personal information from a child where parental or guardian consent is required unless that consent has been obtained or another legal exception applies. A parent or guardian who believes a child has provided personal information without appropriate consent may contact the Privacy Officer.

Back to top

15. Third party websites and services

Our websites and platform may contain links to or integrate services operated by third parties. Their privacy practices are governed by their own policies. CCN is not responsible for how an independent third party collects, uses or protects information after you leave our services or choose to interact directly with that provider.

Back to top

16. Changes to this policy

CCN may update this Privacy Policy when our services, practices or legal obligations change. We will post the revised policy and update the date at the top.

Where a change is material, CCN will provide additional notice and seek new consent where required. A policy update does not authorize CCN to use previously collected personal information for a materially different purpose without any consent required by law.

Back to top

17. Contact the Privacy Officer

For questions, access or correction requests, consent withdrawal, complaints or other privacy concerns, contact:

Privacy Officer

Canadian Cybersecurity Network

francois@canadiancybersecuritynetwork.com

Please write Privacy Request in the subject line. Do not send sensitive identity documents by ordinary email unless CCN provides secure instructions.

Back to top