Last updated 18 September 2026
Unisystech Consulting Inc. operates unisystechconsulting.com. This policy explains what personal information the site collects, how we use it, who processes it for us, and the choices you have.
It covers the public website only. Information we handle for clients during a consulting engagement is governed by the contract for that engagement.
Who we are and what this policy covers
Unisystech Consulting Inc. is responsible for the personal information described here. Where privacy law uses the term, we are the controller. Our offices are in Toronto and Warsaw. The address for privacy matters is 4789 Yonge Street, Suite 416, Toronto, ON M2N 0G3, Canada.
Where you live determines which laws may apply. They include Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and the EU General Data Protection Regulation (GDPR). The GDPR is relevant because of our Warsaw office and our visitors in the European Union. The UK GDPR may apply if you visit from the United Kingdom. Where those laws give you specific rights, we set them out below.
Information we collect
We collect information in two ways: automatically when you visit, and directly when you fill in one of the three forms on the site. There is no account to create and nothing to buy.
Visiting the site. Vercel, our hosting provider, processes your IP address and request details to deliver the pages you ask for. We also use Vercel Web Analytics to see which pages are read. It records the page path, the referring site, the country or region derived from your IP address, and a coarse device, operating system, and browser class. It sets no cookies. Visitors are told apart by a hash that changes every day, so we cannot follow one person over time.
Contact form. When you write to us, we store your name, work email address, company, the topic you chose, and whether you prefer a reply by email or phone. If you ask for a call, we store the phone number you give. We store your message and any “Regarding” label carried from the page you came from. We also record which page and button brought you to the form, so we know what you were reading.
Event updates. When you ask to be told about the next event date, we store your email address, a note that it was given for event updates, and the page you submitted the form from. That is all this form collects.
Job applications. When you apply for a role, we store your name, email address, and phone number if you give one. We also store the role and experience level you applied for, the page you applied from, your message, and your résumé. The résumé is kept in a private file store and can be opened only by signed-in members of our team. Accepted formats are PDF, Word, and plain text. When your application is saved, the site sends one automated email to the address you gave. It thanks you, confirms that your details have entered our candidate pool, and repeats that we do not release them to third parties. It is the only email the careers form sends.
Spam protection. All three forms use Google reCAPTCHA Enterprise. Google’s script loads only when you submit a form, not when you view a page. It reads signals from your browser and device, including your IP address, and returns a score that tells us whether the submission looks automated. We send Google the token it issued, our site key, and the name of the action. We do not send Google the contents of your form. Google’s own processing is described in its Privacy Policy at https://policies.google.com/privacy and its Terms of Service at https://policies.google.com/terms.
Retry protection. Each submission carries a one-way fingerprint of its contents so that a retry after a network error is not stored twice.
How we use information
We use the information you give us to answer your enquiry, to send the single event notice you asked for, and to consider your application for a role. We also use it to keep the site running and free of abuse, and we use analytics to understand which pages are useful.
A form submission may notify our team internally. That notice carries a reference to the record, not your name, message, or attachment.
We do not sell personal information. We do not share it with third parties for their own marketing, and we do not use it to build advertising profiles.
Where the GDPR or UK GDPR applies, our lawful bases are:
- Contact enquiries: steps taken at your request before entering into a contract, and our legitimate interest in answering people who write to us.
- Job applications: steps taken at your request before entering into a contract, and our legitimate interest in recruiting.
- Event updates: your consent, which you can withdraw at any time through the contact form.
- Analytics and spam protection: our legitimate interest in understanding how the site is used and in keeping it secure.
Service providers and international transfers
We rely on a small number of service providers to run the site:
- Vercel hosts the site, runs its server code, optimizes images, and provides Web Analytics. A separate private Vercel store holds résumés.
- MongoDB Atlas hosts the database that holds form submissions, applications, résumé details, and staff accounts.
- Google provides reCAPTCHA Enterprise, described above, and the sign-in our own team uses to reach the editing area.
- Resend delivers internal notification emails to our team. Those emails carry a link to the record only, so nothing you wrote and no file you sent passes through them.
Our service providers store and process this data primarily in the United States. Our staff access it from Canada and Poland. Your information may therefore be processed in a country other than the one you live in, and the laws there may differ from your own. We take reasonable steps to keep it protected wherever it is processed. Where information leaves the European Economic Area or the United Kingdom, we rely on the standard contractual clauses that form part of our providers’ data processing terms.
Legal disclosure
We may disclose information when the law requires or permits it, for example to comply with a court order or a lawful request from a public authority. We may also disclose it when we believe in good faith that doing so is necessary to protect our rights, your safety, or the safety of others, or to investigate fraud.
How long we keep information
We keep enquiries, event-update requests, applications, and résumés for as long as we need them for the purpose they were sent for, and we delete them when that purpose has passed. Records are deleted by hand rather than on a timer, so there is no fixed retention period.
If you ask us to delete your information, we will do so unless the law requires us to keep it. Deleting a résumé record removes the file with it.
Analytics data is held by Vercel in aggregate form and is not linked to anything you submit through a form.
Information security
We take reasonable administrative, technical, and physical steps to protect the information in our care. Forms are submitted over encrypted connections. Records and résumés can be read only by signed-in members of our team, and résumé downloads go through an authenticated route that does not cache the file.
No transmission over the internet and no storage system is fully secure, so we cannot guarantee absolute security.
Your rights and choices
You can read the site without giving us any personal information. If you prefer not to use a form, you can write to us by post at the Toronto address above.
If you are in Canada, PIPEDA may give you the right to see the personal information we hold about you, to have it corrected, and to withdraw consent to its use. You may also complain to the Office of the Privacy Commissioner of Canada at https://www.priv.gc.ca.
If you are in the European Union or the United Kingdom, the GDPR or UK GDPR may give you the right to access, correct, or erase your personal information. You may also have the right to restrict or object to its processing, to receive a copy in a portable format, and to withdraw consent where consent is the basis. You may complain to the supervisory authority in the country where you live.
To make a request, use the contact form linked below, which opens with the topic already set, or write to us at 4789 Yonge Street, Suite 416, Toronto, ON M2N 0G3, Canada. If you are not writing on behalf of an organization, enter your own name in the Company field. We may ask you to confirm your identity before we act on a request.
If you asked for an event notice and no longer want it, tell us through the contact form and we will remove your address.
Children
The site is not directed at anyone under 16, and we do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.
Links to other websites
The site links to websites we do not control, such as LinkedIn and Google Maps. Their privacy practices are their own. Read their privacy statements before you share information with them.
Changes to this policy
We may update this policy as the site or the law changes. We will post the new version on this page with a new “Last updated” date. The date at the top tells you when it last changed.
Contact information
Questions about this policy and requests about your personal information go to the person responsible for privacy at Unisystech Consulting Inc. Use the contact form linked below, which opens with the topic already set, or write to 4789 Yonge Street, Suite 416, Toronto, ON M2N 0G3, Canada.