Mercury IT LTD ("Mercury IT", "we", "us") is an information technology company based in Calgary, Alberta. This policy explains how we collect, use, disclose and protect personal information when you visit mercuryit.ca, contact us, or use our services.
We follow the Personal Information Protection and Electronic Documents Act (PIPEDA), Alberta's Personal Information Protection Act (PIPA) and, for people in Québec, the Act respecting the protection of personal information in the private sector as amended by Law 25.
Who is responsible
Our Privacy Officer, Akram Mahmoud, is responsible for this policy and for how we handle personal information.
- Email: info@mercuryit.ca (subject: "Privacy Officer")
- Phone: +1 (587) 578-2356
- Mail: Privacy Officer, Mercury IT LTD, 2500–500 4 Avenue SW, Calgary, AB T2P 2V6
What we collect
Information you give us — when you use our contact form, email or call us, book a meeting online, or become a client: your name, job title, company, email address, phone number and the details of your request. With a contact-form message we also receive the first page you visited and the website that sent you to us (for example a search engine), so we know how you found us. For clients, we also keep billing contacts and the records needed to deliver and invoice our services.
Information we handle for clients — when we manage a client's systems, we may have access to that client's data (for example user accounts, devices and email). We process it only on the client's instructions and under our service agreement; the client remains responsible for it.
Information collected automatically — we keep this to the minimum needed to run the website:
- No advertising or analytics cookies. We do not track you across websites or build advertising profiles. To count visits we may use cookieless, aggregate statistics (Cloudflare Web Analytics): no cookies, no personal profile, and your IP address is not stored.
- Preferences in your browser. Your chosen language and light/dark mode, and your approximate country (used to pick the right site and currency), are stored in your own browser (local storage). They are not sent to us, and you can clear them at any time in your browser settings.
- Location lookup. To show the right site and currency, your browser asks a location service (geojs.io, and if unavailable ipapi.co or freeipapi.com) for the country linked to your IP address. Those services receive your IP address under their own privacy policies.
- Hosting logs. Our website is hosted on Microsoft Azure, which records technical data such as IP address, browser type and pages requested, for security and reliability.
- Fonts and maps. Pages load fonts from Google Fonts and, on the contact section, an embedded Google Map. Google receives your IP address when these load.
Why we use it
- To answer your questions and prepare quotes.
- To provide, support, bill and improve our services.
- To keep our website and systems secure.
- To meet legal, tax and accounting obligations.
- To send you news or offers only if you have agreed — every message includes a way to unsubscribe, as required by Canada's Anti-Spam Legislation (CASL).
We do not sell or rent personal information, and we do not use it for automated decisions about you.
Consent
By contacting us or using our services, you consent to the uses described above. You may withdraw your consent at any time, subject to legal or contractual limits; if you do, we may not be able to provide some services.
Who we share it with
Only with service providers who help us operate, under contracts that require them to protect it — for example Microsoft (Azure hosting, Microsoft 365 email, sign-in, Microsoft Entra External ID for client-portal accounts, Azure SQL Database in Canada for client-portal records, and Microsoft Bookings for online appointments), Google (only if you choose to sign in to the client portal with Google), Resend (which delivers contact-form messages to our inbox), our accounting and payment providers, and vendors or carriers when we order equipment for you. We may also disclose information when required by law.
Where it is stored
We store information in Canada where possible. Some of our providers (such as Microsoft and Google) may process data in other countries, including the United States, where it may be accessible to authorities under local law. Before communicating personal information of Québec residents outside Québec, we assess whether it will receive adequate protection.
How long we keep it
- Inquiries that do not become a project: up to 24 months after our last contact.
- Client and billing records: as long as the relationship lasts, then as long as tax and legal rules require (generally six years in Canada).
- Hosting logs: according to our hosting provider's retention settings, usually no more than 90 days.
We then delete or anonymize the information.
How we protect it
We use administrative, technical and physical safeguards appropriate to the sensitivity of the information, including multi-factor authentication, encryption in transit, least-privilege access and staff confidentiality obligations. If a privacy breach creates a real risk of significant harm, we will notify you and the relevant privacy commissioner as required by law.
Your rights
You may ask to access or correct your personal information, withdraw consent, or ask how it was used and disclosed. Québec residents may also ask for their information in a structured, commonly used technological format and ask us to stop disseminating it. Send your request to our Privacy Officer; we reply within 30 days.
If you are not satisfied, you may contact the Office of the Privacy Commissioner of Canada (priv.gc.ca), the Office of the Information and Privacy Commissioner of Alberta (oipc.ab.ca) or, in Québec, the Commission d'accès à l'information (cai.gouv.qc.ca).
Children
Our website and services are intended for businesses. We do not knowingly collect personal information from children.
Changes
We may update this policy. The date at the top shows the latest version; significant changes will be highlighted on this page.