Privacy Policy
Last updated: April 1, 2026
1. Introduction
Qixas Group Inc. ('Qixas,' 'we,' 'us,' or 'our') is committed to protecting your privacy in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website (qixas.com), engage with our services, or otherwise interact with us. By using our website or services, you consent to the practices described in this policy. We encourage you to read this policy carefully and contact us if you have any questions.
2. Information We Collect
We collect information that you provide directly to us, including: contact information (name, email address, phone number, company name, and job title) when you fill out forms, request assessments, or contact us; project-related information you share during consultations, including business requirements, technical specifications, and operational data; and communication records including emails, meeting notes, and support tickets. We also automatically collect certain technical information when you visit our website, including your IP address, browser type and version, operating system, referring URL, pages visited, time spent on pages, and other standard web analytics data.
3. How We Use Your Information
We use the information we collect to: respond to your inquiries and provide requested services; deliver, manage, and improve our consulting engagements; send you relevant information about our services, including project updates and industry insights; analyze website usage to improve our site's functionality and user experience; comply with legal obligations and protect our legitimate business interests; process payments and manage our business relationship with you; and communicate about changes to our services or policies. We do not sell your personal information to third parties, and we do not use your information for automated decision-making or profiling.
4. Information Sharing
We may share your personal information with: Microsoft, to the extent necessary for licensing, support, and partnership requirements related to Dynamics 365 Business Central; trusted service providers who assist us in operating our website, conducting our business, or servicing our clients, provided they agree to keep your information confidential; professional advisors, including lawyers, accountants, and auditors, where necessary for the provision of their professional services; and law enforcement or regulatory authorities when required by law, regulation, legal process, or governmental request. We may also share aggregated or anonymized information that cannot reasonably be used to identify you.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls limiting data access to authorized personnel, regular security assessments and monitoring, secure data storage with reputable cloud providers, and employee training on data protection practices. While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but will notify you promptly in the event of any data breach that may affect your personal information.
6. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and understand user behavior. We use essential cookies that are necessary for the website to function properly, analytics cookies (such as Google Analytics) that help us understand how visitors interact with our site, and functional cookies that remember your preferences and settings. You can control cookie settings through your browser preferences. Most browsers allow you to refuse cookies or alert you when cookies are being sent. Please note that disabling certain cookies may affect the functionality of our website.
7. Your Rights Under PIPEDA
Under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable privacy laws, you have the following rights regarding your personal information: the right to access the personal information we hold about you; the right to request correction of inaccurate or incomplete information; the right to request deletion of your personal information, subject to certain legal exceptions; the right to restrict or object to certain processing of your information; the right to data portability, where applicable; the right to withdraw consent at any time, where processing is based on consent; and the right to file a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated. To exercise any of these rights, please contact us using the information provided below. We will respond to your request within thirty (30) days or as required by applicable law. We may need to verify your identity before processing your request.
8. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. For client engagement data, we typically retain records for seven (7) years after the conclusion of an engagement, consistent with professional and legal obligations. For website analytics data, we retain aggregated data for up to twenty-six (26) months. For marketing communications, we retain your contact information until you opt out or request deletion. When personal information is no longer needed, we securely delete or anonymize it.
9. Third-Party Links
Our website may contain links to third-party websites, including Microsoft's website and partner portals. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party websites you visit. We are not responsible for the privacy practices or content of external sites.
10. Children's Privacy
Our website and services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected information from a child under 16, we will take steps to delete that information promptly.
11. International Data Transfers
Qixas Group operates in Canada and the United States, with offices in Toronto, Boston, and Seattle. Your personal information may be transferred to and processed in countries other than your country of residence. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws, regardless of where it is processed.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the 'Last updated' date at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your information. Your continued use of our website or services after any changes constitutes acceptance of the updated policy.
13. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: Qixas Group Inc., 1 Dundas St. W., Suite 2500, Toronto, ON M5G 1Z3, Canada. Email: privacy@qixas.com. You may also contact us through the form on our website at qixas.com/contact.