Privacy Policy

Privacy Policy

Canadian Cybersecurity Network

Effective: November 26th, 2025

 

1. Who we are

The Canadian Cybersecurity Network CCN is a national community and business ecosystem focused on cybersecurity talent, business growth, research, and collaboration in Canada.

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our websites, join our community, use our apps and tools, or interact with us in any way.

By using our services you agree to the terms of this Privacy Policy.

2. Which privacy laws apply

CCN is a private sector organization based in Canada. We comply with

  1. The federal Personal Information Protection and Electronic Documents Act PIPEDA which sets out ten fair information principles for accountability, purpose identification, consent, limiting collection, use and disclosure, accuracy, safeguards, openness, individual access, and challenging compliance Privacy Commissioner Canada+1
  2. Applicable provincial private sector privacy laws where they provide equal or greater protection, including in Quebec, British Columbia, and Alberta BLG+1
  3. Quebec Law 25 for personal information of residents of Quebec which requires clear privacy notices, designated privacy governance, consent rules, and transparency regarding technological collection Légis Québec+1
  4. Canada Anti Spam Legislation CASL for consent and information obligations related to commercial electronic messages CRTC+2ISED Canada+2

If you are in a province or country with stricter rules, we will respect those requirements where they apply to our activities.

3. Personal information we collect

The information we collect depends on how you interact with CCN.

3.1 Information you provide

For example

  1. Membership and community forms
    1. Name and contact details
    2. Role, employer, and region
    3. Career interests, skills, and areas of focus
  2. Business membership and marketplace forms
    1. Company name, size, and sector
    2. Key contacts and functional roles such as marketing, HR, leadership, technical
    3. Areas of interest such as talent, marketplace, events, research and reports
  3. Event registrations, surveys, and research participation
    1. Registration details
    2. Feedback and survey responses
    3. Demographic or contextual information you choose to provide
  4. Job and career tools
    1. Resume and profile content that you upload
    2. Skills, certifications, and career goals
    3. Training and role preferences
  5. Communications
    1. Email inquiries and support requests
    2. Messages and comments on our community platforms

You can always choose not to provide certain information, but this may limit your ability to use some CCN services.

3.2 Information we collect automatically

When you visit our websites or apps, we may automatically collect

  1. Browser type, device type, and operating system
  2. IP address and general location information
  3. Pages viewed, links clicked, and time spent on our sites
  4. Referring and exit pages
  5. Basic event data related to forms and campaigns

We use this information to improve our websites, understand usage patterns, enhance security, and measure engagement.

3.3 Cookies and similar technologies

CCN uses cookies and similar technologies to

  1. Maintain secure sessions
  2. Remember preferences such as language and location
  3. Analyze traffic and usage trends
  4. Support marketing and outreach where permitted by law

You can manage cookie preferences through your browser settings and through any consent tools we provide, subject to applicable law such as Quebec Law 25 requirements for clear and specific consent for certain technologies. McCarthy Tétrault+1

4. How we use personal information

We use personal information to

  1. Operate and improve our websites, apps, and services
  2. Create and manage member and business accounts
  3. Provide community, networking, talent, training, and marketplace services
  4. Deliver reports, newsletters, event updates, and educational content
  5. Match individuals and organizations with relevant opportunities where they request this
  6. Conduct national and regional surveys, research, and analytics to inform CCN Insights, reports, and community products
  7. Communicate with you, respond to your requests, and provide support
  8. Meet legal and regulatory obligations and maintain the security of our systems

We never sell your personal information or membership data lists to third parties.

We may use aggregated and anonymized information that does not identify you to understand trends, produce statistics, and improve our services.

5. Legal basis and consent

In most cases we rely on your consent to collect, use, and disclose personal information. Consent may be express such as when you submit a form or agree to receive communications, or implied, where permitted by Canadian law and consistent with the context of your relationship with us. Privacy Commissioner Canada+1

Under CASL, we obtain consent before sending commercial electronic messages and always include clear identification and an easy unsubscribe option. CRTC+1

You can withdraw your consent at any time, subject to legal and contractual restrictions, by contacting us or using the unsubscribe options in our messages.

6. When we share personal information

We do not resell personal information.

We may share personal information in the following limited situations

  1. Service providers and partners
    1. Vendors who provide technology, hosting, analytics, email distribution, community platforms, payment processing, or similar services
    2. These providers are given only the information they need to perform their services and are required to protect it and use it only for CCN purposes
  2. Program and research partners
    1. Where you register for a joint event, initiative, or research project, we may share necessary details with the partner organization
    2. When possible, information is shared in aggregated or de identified form
  3. Legal, regulatory, and security purposes
    1. To comply with applicable law, regulation, or legal process
    2. To protect the rights, safety, and security of our members, partners, and systems
  4. Business transitions
    1. If CCN restructures or transfers part of its operations, personal information may be transferred as part of that process, subject to continued protection consistent with this policy and applicable law

We do not grant third parties the right to use CCN member data for their own unrelated marketing lists.

7. International transfers

Some of our service providers may be located outside your province or outside Canada. This means your personal information may be processed in other jurisdictions, where local laws may permit government and regulatory access in some circumstances.

We take reasonable steps to ensure that any such transfers comply with applicable Canadian requirements and that personal information remains subject to appropriate safeguards. OneTrust+1

8. How we protect personal information

We use a combination of physical, administrative, and technical safeguards appropriate to the sensitivity of the information to protect against loss, theft, and unauthorized access, disclosure, copying, use, or modification as required under Canadian privacy laws. Privacy Commissioner Canada+1

Examples include

  1. Access controls and role based permissions
  2. Encryption and secure transmission where appropriate
  3. Vendor due diligence and contractual protections
  4. Internal policies, training, and oversight

No method of storage or transmission is perfectly secure, but we work continuously to improve our safeguards.

9. How long we retain personal information

We keep personal information only as long as necessary to fulfill the purposes described in this policy or as required by law. Privacy Commissioner Canada+1

Retention periods depend on the type of information and context, including

  1. Membership and business records to manage relationships and comply with legal obligations
  2. Event and survey data to support research, analytics, and reporting
  3. Technical logs for security and troubleshooting

When information is no longer required, we securely delete it or anonymize it.

10. Your rights

Subject to applicable law, you have the right to

  1. Request access to the personal information we hold about you
  2. Request correction of inaccurate or incomplete information
  3. Withdraw consent to certain uses of your information
  4. Request deletion or anonymization of your information where appropriate
  5. Request information about our practices relating to personal information, including how it is collected, used, disclosed, and safeguarded Privacy Commissioner Canada+1

We will respond to requests within the time limits set out in applicable privacy laws and may request verification of identity.

You also have the right to complain to the Office of the Privacy Commissioner of Canada or to a provincial privacy regulator if you are not satisfied with our response.

11. Children and youth

Our services are primarily designed for adults and professionals. Some programs and tools may be suitable for students and youth.

Where required by law such as in Quebec for individuals under a certain age we will seek appropriate consent from a parent or guardian. Didomi

If we become aware that we have collected personal information from a child without required consent, we will take steps to delete or appropriately manage that information.

12. Third party sites and platforms

Our websites and apps may contain links to third party sites or may integrate third party platforms such as community tools, virtual event platforms, or payment providers.

These third parties have their own privacy practices and policies. We encourage you to review them, as we are not responsible for their handling of personal information.

13. Updates to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal obligations.

When we make significant changes, we will update the Effective date at the top of this page and, when appropriate, provide additional notice such as a banner on our site or a direct communication, consistent with Quebec Law 25 requirements for updated confidentiality notices. Légis Québec+1

Your continued use of our services after any update signifies your acceptance of the revised policy.

14. How to contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of personal information, please contact

Privacy Officer
Canadian Cybersecurity Network

Email: francois@canadiancybersecuritynetwork.com

We will make every reasonable effort to address your request or concern.

Privacy policy

Join the CCN Circle Community Today

network - learn - grow.

Join Circle