Book A 15-Minute Meeting1-844-2-GET-TSS
It abstract

Privacy Policy

Privacy Policy

Effective Date: Aug.11, 2026
Last Updated: Aug. 11, 2026

We respect your privacy and are committed to protecting the personal information entrusted to us. As a Canadian company based in Toronto, Ontario, we handle personal information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA), where applicable.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit our website, communicate with us, or engage with our services.

1. Information We Collect

We may collect the following categories of personal information:

a. Information You Provide Directly

This may include:

  • Contact information, such as your name, company name, email address, phone number, and job title

  • Information submitted through contact forms, support requests, chat, or service tickets

  • Information about your IT or service requirements, including estimated user counts and device or infrastructure information

  • Billing or payment information when you transact directly through our website or client portal

Where we provide managed IT, cybersecurity, cloud, or related services to an organization, we may also process information on behalf of that organization in accordance with our agreements with the client.

b. Information Collected Automatically

When you visit our website, certain information may be collected automatically, including:

  • IP address

  • Browser type and version

  • Device and operating system information

  • Pages visited and time spent on the site

  • Referring and exit URLs

  • Timestamps and session information

  • Cookie and similar technology data

We use this information to maintain website functionality, understand how our website is used, improve performance, and help protect our systems.

c. Information From Third Parties

We may receive limited business or contact information from publicly available sources, business directories, technology partners, or service providers where permitted by applicable law.

2. How We Use Your Information

We may use personal information to:

  • Provide, maintain, support, and improve our services

  • Respond to inquiries, service requests, and support tickets

  • Communicate with clients about their accounts, services, security, or technical matters

  • Process transactions and administer our business relationship with you

  • Detect, investigate, prevent, and respond to cybersecurity incidents, fraud, or other unauthorized activity

  • Maintain and improve the security and performance of our systems

  • Analyze website usage and improve the user experience

  • Send marketing or promotional communications where permitted by applicable law

  • Meet legal, regulatory, contractual, and compliance obligations

  • Establish, exercise, or defend legal rights

Where consent is required, we obtain consent appropriate to the sensitivity of the information and the circumstances in which it is collected.

3. Canadian Privacy Principles and Consent

Our handling of personal information is guided by applicable Canadian privacy legislation, including PIPEDA where applicable.

We collect, use, and disclose personal information only for purposes that a reasonable person would consider appropriate in the circumstances and in accordance with applicable legal requirements.

Depending on the circumstances, consent may be express or implied. You may withdraw your consent to certain uses of your personal information, subject to legal or contractual restrictions and reasonable notice.

Withdrawal of consent may affect our ability to provide certain products or services.

EU and UK Visitors

If you are located in the European Economic Area or United Kingdom and applicable privacy legislation applies to our processing of your personal data, our legal basis for processing may include:

  • Your consent

  • Performance of a contract

  • Compliance with a legal obligation

  • Our legitimate interests or those of a third party, where those interests are not overridden by your applicable privacy rights

4. How We Share Information

We do not sell personal information.

We may disclose personal information to third parties where necessary for legitimate business purposes, including:

  • Hosting, cloud infrastructure, analytics, CRM, communications, support, security, and payment service providers

  • Authorized subcontractors and technology partners that assist us in delivering our services

  • Professional advisers, such as legal, accounting, insurance, or security professionals

  • Third-party platforms or integrations authorized by a client or required to provide requested services

  • Government agencies, regulators, courts, law enforcement, or other parties where disclosure is required or permitted by law

We take reasonable steps to ensure service providers handling personal information on our behalf provide an appropriate level of protection. Where appropriate, contractual confidentiality, security, and privacy requirements are used to protect information entrusted to third parties.

5. Data Retention

We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected and to satisfy applicable business, contractual, legal, tax, regulatory, security, and compliance requirements.

Retention periods may vary depending on the type of information and the services involved.

When personal information is no longer required, we take reasonable steps to securely delete, destroy, or anonymize it in accordance with our retention practices and applicable law.

You may contact us to request deletion of personal information, subject to any legal or contractual obligations requiring us to retain it.

6. Your Privacy Rights

Depending on where you reside and the laws applicable to your information, you may have the right to:

  • Request access to personal information we hold about you

  • Request correction of inaccurate or incomplete information

  • Withdraw consent to certain uses of your information

  • Request deletion of personal information where applicable

  • Object to or request restrictions on certain processing where applicable

  • Request data portability where applicable

  • Opt out of marketing communications

Under Canadian privacy law, you may also request information about the existence, use, and disclosure of personal information under our control, subject to applicable exceptions.

To exercise your privacy rights, please contact us using the information provided in Section 13. We may need to verify your identity before completing a request and will respond within the timeframe required by applicable law.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to support:

  • Essential website functionality

  • User preferences and session management

  • Website security and performance

  • Visitor analytics

  • Marketing and remarketing activities, where applicable and permitted

Our website may use third-party analytics technologies such as Google Analytics or Microsoft Clarity.

Depending on your location and applicable law, you may be able to decline certain non-essential cookies through our cookie controls. You can also manage cookies through your browser settings.

Disabling certain cookies may affect the functionality of the website.

8. Data Security

We use administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, loss, theft, alteration, misuse, or destruction.

Depending on the systems and services involved, these safeguards may include:

  • Encryption in transit

  • Firewalls and network security controls

  • Role-based and restricted access controls

  • Authentication and account security measures

  • Security monitoring

  • Employee security and privacy training

  • Vulnerability management and security assessments

  • Policies and procedures governing the handling of sensitive information

While we take reasonable measures to protect personal information, no electronic system, network, or method of transmission can be guaranteed to be completely secure.

If you believe personal information has been compromised or you have identified a potential security issue involving our systems, please contact us promptly.

9. Data Residency and International Transfers

As a Canadian company based in Toronto, Ontario, we recognize that data residency and cross-border processing are important considerations for our clients.

Some of our service providers, technology partners, cloud platforms, or subprocessors may process or store personal information outside Canada, including in the United States or other jurisdictions.

When personal information is transferred outside Canada, it may become subject to the laws of the jurisdiction in which it is processed or stored and may be accessible to courts, law enforcement, or government authorities in that jurisdiction in accordance with applicable law.

Where appropriate, we use contractual, organizational, and technical safeguards designed to protect personal information processed by third-party service providers.

Clients with specific Canadian data-residency, regulatory, or contractual requirements are encouraged to discuss those requirements with us so that the applicable hosting, service, and processing arrangements can be clearly established.

10. Children’s Privacy

Our website and services are intended for businesses and are not directed toward children.

We do not knowingly collect personal information from children through our website. If you believe a child has provided personal information to us without appropriate authorization, please contact us so that we can review and, where appropriate, delete the information.

11. Third-Party Websites and Services

Our website may contain links to third-party websites, applications, support portals, or technology platforms.

These third parties operate independently and may have their own privacy practices and policies. We are not responsible for the privacy practices, security, or content of third-party services that we do not control.

We encourage you to review the applicable privacy policies before providing personal information to a third party.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our practices, services, technology, or legal and regulatory requirements.

When we make changes, we will post the revised Privacy Policy on this page and update the “Last Updated” date at the top of the policy.

Where required by law, we will provide additional notice or obtain consent before making material changes affecting how personal information is collected, used, or disclosed.

13. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how we handle personal information, please contact us:

The Support Source
Toronto, Ontario, Canada
Email: info@thesupportsource.com
Phone: 1-844-2-GET-TSS

We will review privacy inquiries and complaints and respond in accordance with applicable privacy laws.