Legal
Privacy notice
CySecWall (“we”, “us”, “CySecWall”) is a managed cybersecurity service for small and mid-sized businesses across the United States and Canada. This notice explains how we handle information collected through cysecwall.com and related contact channels such as email.
1. Who is responsible
CySecWall is a service of DDR Solutions Inc., which is the contracting party and the organization responsible for personal information collected through this site. Contact for privacy questions: hello@cysecwall.com · (647) 857-9005.
Operator: DDR Solutions Inc. (Ontario, Canada).
Registered office: 120 Adelaide St W, Suite 2500, Toronto, Ontario M5H 3V1, Canada.
Business number (BN): 850129776
GST/HST account: 850129776 RT0001
2. Which laws apply
We operate from Canada and serve businesses in the United States and Canada. Under Canadian federal privacy law (PIPEDA) and applicable provincial rules, we handle personal information for identified purposes with appropriate consent or another lawful basis. Where a U.S. state privacy statute applies to a visitor or prospect, we do not sell or share personal information for cross-context behavioral advertising, and we run no advertising trackers on this marketing site.
This notice is written to PIPEDA. If you are outside Canada and have a question about how it applies to you, contact us and we will answer it directly.
3. What we collect on this website
Security review and contact form
When you submit the form we collect only what the form asks for:
- Name, work email, and company (required)
- Phone (optional)
- Employee range and what prompted the inquiry (required selections)
- Free-text notes you choose to share
The form handler may also record submission time, connecting IP address, and a country code derived from the request, for abuse prevention and operational context. A hidden honeypot field deters bots; it is not a tracking identifier for people.
Email and other direct contact
If you write to hello@cysecwall.com or another published CySecWall address, we keep the correspondence needed to reply and follow up.
Technical logs
Hosting and security tooling may generate request logs (for example IP address, user agent, timestamps, and paths) for reliability, rate-limiting, abuse prevention, and troubleshooting.
What we do not do
- We do not sell contact details.
- We do not add inquiry addresses to promotional mailing lists.
- We do not run third-party advertising or behavioral tracking pixels on this marketing site.
4. How we use it
- To respond to your security review request and discuss whether our services are a fit.
- To operate, secure, and improve the website (including rate-limiting the contact form).
- To meet legal or contractual obligations when they apply.
Client environments under a signed managed-service engagement are governed by that contract and any related data processing terms, not solely by this website notice.
5. Where it is processed
The website uses the following processors. The public site is hosted on Cloudflare Pages, and contact submissions are handled by a Cloudflare Pages Function.
| Provider | Purpose | Notes |
|---|---|---|
| Cloudflare | Hosting, edge delivery, Turnstile bot checks, key-value storage for rate limits and lead copies, and Web Analytics | Global network; processing may occur outside your country, including Canada and the United States |
| Resend | Transactional email delivering form notifications to our inbox | Lead notifications only, not a marketing list |
Subprocessor lists and data processing agreements for our managed services are provided to clients and prospective clients on request. Email hello@cysecwall.com.
6. Cookies and analytics
We use Cloudflare Web Analytics to understand aggregate site usage, such as page views, referring sites, and page load performance. It is cookieless: it does not set cookies, does not use local storage, and does not build profiles or track individual visitors across sites. We see totals, not people.
Essential security mechanisms may still apply, including Cloudflare Turnstile on the contact form, which checks that a submission comes from a person. CMS editors signing in at /admin use a separate authentication flow on auth.cysecwall.com. We do not use advertising or cross-site tracking cookies.
7. Retention
Inquiry records are kept only as long as needed to handle the conversation and ordinary business follow-up, unless a longer period is required for security, dispute, or legal reasons. Where a backup copy of a form submission is stored, it is kept for up to one year so a mail-provider outage does not lose your request.
You can ask us to delete or correct contact details we hold about you by emailinghello@cysecwall.com.
8. Your choices
Depending on where you live, you may have rights to access, correct, or delete personal information we hold, and to complain to a regulator (for example the Office of the Privacy Commissioner of Canada or a provincial or state authority). Contact us and we will work through the request in good faith.
Do not use this channel for suspected security incidents involving client environments. Use theresponsible disclosure page or the incident contact documented for active clients.
9. Breach notification
We maintain awareness of security incidents affecting personal information and will notify regulators and affected individuals where the law requires it, including under PIPEDA where there is a real risk of significant harm.
10. Changes
Material changes to this notice will be published on this page with an updated date. Clients under a separate master services agreement will be notified as that agreement requires.
11. Contact
Privacy questions: hello@cysecwall.com · Phone: (647) 857-9005. Coverage: Businesses across the United States and Canada.