Privacy policy
How we handle personal information from visitors to this website and from people who contact us. For how Mandate handles data inside the product on behalf of a customer, see the trust page. If your employer uses Mandate and you ask us about your AI-use records, we refer you to your employer, who is responsible for them.
Last updated 17 October 2026 · Mandate Systems Inc., Burlington, Ontario, Canada
What this policy covers
This policy covers mandateco.ca and the personal information you send us when you get in touch.
The information we hold, and how we get it
-
Information you send us
When you email us, book a demo or connect with us on LinkedIn, we receive what you choose to share, such as your name, work email, organization and message. Messages you send through LinkedIn are also processed by LinkedIn under its own terms.
-
No cookies, analytics or trackers
This website sets no cookies and runs no analytics, advertising or third-party tracking scripts. Your browser asks our server only for the pages you open.
-
Server logs
The Canadian company hosting this website keeps standard technical logs (IP address, timestamp, requested page) for security and to keep the site running. They are kept for up to 90 days, then deleted, and are not used to profile you.
Why we use it
We use the information you send us to answer you and to meet our legal obligations.
-
To reply, and to arrange a demo or the first 30 days
Answering your question, arranging a demo and setting up your first 30 days.
-
To meet our own legal and security obligations
Keeping records of business correspondence, and protecting the site and our systems from abuse.
We do not sell personal information or use it for advertising, and we never use website contact details to train any model.
Who else can see it
-
Service providers
Service providers help us operate: email and website hosting, Calendly for demo booking on its own site (it collects your name, email and chosen time when you book), and Zoom for the demo itself. Each works under contract with us. Ask us and we will tell you which providers hold your information.
-
Legal requirements
We may disclose information where the law requires it. If we ever receive such a demand, we handle it under Canadian legal process.
-
Where the information is held
Email correspondence is held in Canada by Canadian companies, under Canadian law. Demo bookings are held by Calendly in the United States, the demo itself runs on Zoom, a US company, and LinkedIn messages are held by LinkedIn under its own terms.
How long we keep it
We delete enquiry correspondence 24 months after our last exchange, unless it led to an agreement or a legal or accounting obligation requires us to keep it longer. If a conversation does not lead anywhere, you can ask us to delete your details at any time.
If a confidentiality incident ever affects personal information we hold, we assess it and notify affected individuals and the appropriate regulator (the Office of the Privacy Commissioner of Canada, or Quebec’s Commission d’accès à l’information) as required by law.
Your rights over your information
Under PIPEDA and Quebec’s Law 25 you have rights over your personal information. To exercise any of them, email security@mandateco.ca.
-
Access and correction
Ask what personal information we hold about you, and ask us to correct it if it is wrong.
-
Deletion and withdrawal of consent
Ask us to delete your details, or tell us to stop contacting you. We will confirm when it is done.
-
Portability
Ask for a copy of the personal information we hold about you in a structured, commonly used technological format. This is a right for Quebec residents under Law 25, and we extend it to anyone who asks.
-
Raising a concern
If you are not satisfied with how we handled a request, you can contact the Office of the Privacy Commissioner of Canada, or the Commission d’accès à l’information du Québec for Quebec residents. If you are outside Canada, you may also have rights under your local law and can raise a concern with your local data-protection authority.
Reach our privacy contact
Mandate’s Privacy Officer is the person responsible for the protection of the personal information we hold. Questions about this policy, or a request about your information, go to security@mandateco.ca. We complete each request within 30 days.
Mandate Systems Inc. · Burlington, Ontario, Canada. We may update this policy as the business changes; the date at the top of the page reflects the current version.