Privacy Policy

Who we are

Deoryx is a technology consultancy based in Canada. “Deoryx”, “we” and “us” in this policy mean the business operating this website, deoryx.com. We are responsible for the personal information described here.

Our privacy contact is responsible for how we handle personal information and can be reached at hello@deoryx.com. Write to that address with any question, request or complaint about privacy.

What we collect

When you send us a message

The contact form asks for your name, email address and a description of what you need, and depending on the option you choose, your company, the systems involved, the process you want reviewed and how often it runs. We receive exactly what you type. Please don’t include sensitive information, such as health or financial details, that we don’t need to reply to you.

When you book a discovery call

Bookings are made through Cal.com. To book, you give your name, email address, the time you choose and anything you add to the booking. The booking is copied to our calendar so we can hold the call.

When you email us directly

We receive your email address, your message and anything you attach.

When you visit the website

Like any website, our server receives technical information with each request, such as your IP address, browser type and the page requested. The contact form also uses a verification check (Cloudflare Turnstile) that reads technical signals from your browser to tell people from automated spam.

We don’t use analytics, advertising or tracking tools on this website, and we don’t build profiles of visitors. See our Cookie Policy for details.

Why we use it

• To reply to your enquiry and continue the conversation you started.
• To arrange, hold and follow up on calls you book.
• To prepare a proposal or start work, if you ask us to.
• To keep the website and contact form secure, and to stop spam and abuse.
• To keep the business records we are required to keep by law.

By sending a message or booking a call, you consent to us using your information for these purposes. We don’t use it for anything else without asking you first. We don’t add you to a mailing list, and we will only send you marketing emails if you have clearly agreed to receive them.

We don’t sell or rent personal information, and we don’t use it to make automated decisions about you.

Who handles it for us

We use a small number of service providers to run the website and the business. They process personal information on our behalf, only to provide their service to us:

• Amazon Web Services receives contact form submissions and passes them on to us by email.
• Zoho provides our email and calendar, where your messages and bookings are kept.
• Cal.com runs the booking calendar and stores your booking.
• Cloudflare runs the spam check on the contact form.
• Our website hosting provider serves the website and keeps short-term server logs.

Some of these providers store or process information outside Canada, including in the United States and Singapore. While it is there, it may be accessible to courts, law enforcement and national security authorities of those countries under their laws. We choose providers that protect information to a standard comparable to Canadian law.

We may also disclose personal information where the law requires it, or to a successor if the business is sold or reorganised, in which case this policy continues to apply to it.

How long we keep it

• Enquiries and discovery-call bookings that don’t lead to work together: deleted 2 years after our last contact with you.
• Client correspondence and project records: kept for 7 years after the engagement ends, the period we need to meet Canadian tax and record-keeping requirements.
• Spam-protection data: the contact form stores only a scrambled (hashed) version of your IP address, and only for up to a day. Its service logs contain no personal information and are deleted after 30 days.
• Website server logs: kept for a short period for security and troubleshooting, then deleted.

You can ask us to delete your information sooner; see below.

How we protect it

The website is served only over encrypted connections (HTTPS). Access to our email, calendar and service accounts is limited to the people who need it and protected with strong authentication. No method of storage or transmission is perfectly secure, but if a breach ever created a real risk of significant harm to you, we would tell you and report it as the law requires.

Your choices and rights

You can ask us to:

• tell you what personal information we hold about you and how we have used it;
• correct information that is inaccurate or incomplete;
• delete your information, unless we have to keep it by law; and
• stop using your information for a purpose you previously agreed to.

Email hello@deoryx.com. We may need to confirm your identity first, and we will reply within 30 days. If you aren’t satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada, or, if you live in Quebec, the Commission d’accès à l’information du Québec.

Children

This website is for businesses. It isn’t directed at children, and we don’t knowingly collect information from anyone under 16.

Changes to this policy

We will update this page if our practices change, and change the date at the top. If a change affects how we use information we already hold, we will ask for your consent where the law requires it.