Privacy Policy

Last updated: 7 July 2026

This policy explains what information Intelligent IT Consulting collects when you use this website or contact us, why we collect it, and the choices you have. We keep it plain because we’d rather you actually read it.

Who we are

IITCON is the trading name of Intelligent IT Consulting Inc. (Calgary, Alberta, Canada) and Intelligent IT Consulting Group LLC (Cheyenne, Wyoming, USA). For any privacy question, email [email protected] or call +1 877 347 8147.

What we collect

• When you contact us — the details you choose to send through our contact form or by email: your name, email address, and, if you provide them, your organisation, phone number, and the contents of your message.
• Technical data — like any website, our infrastructure logs basic request data (IP address, browser type, pages requested, timestamps) to keep the site running and secure. This is handled by our hosting and network provider (Cloudflare).

We do not use advertising or analytics tracking cookies, and we do not build marketing profiles. Our content-delivery and security provider may set essential cookies needed to serve the site securely.

Why we use it

• To respond to your enquiry and provide the services you ask about.
• To operate, secure, and troubleshoot the website.
• To meet legal, accounting, and record-keeping obligations.

We rely on your consent when you contact us, and on our legitimate interest in running a secure website and answering the people who reach out.

Where your information lives

We keep a deliberately small data footprint. We do not store your information in any standalone or proprietary database. What you send us is handled entirely within our Microsoft 365 infrastructure — your enquiry arrives in our Microsoft-hosted email, and, if a conversation progresses, relevant contact details may be recorded in our Microsoft Dynamics 365 CRM. That is the whole of it.

Service providers we use

We keep the list of third parties short and name them:

• Microsoft 365 — our email (Exchange / Outlook) and CRM (Dynamics 365), where your correspondence and contact details are held.
• Cloudflare — hosting, content delivery, and security (including the “Turnstile” check on our form that tells humans from bots).
• A transactional email provider — to deliver contact-form messages into our mailbox.
• Google Fonts — the website loads typefaces from Google, which means Google receives your IP address when a page loads. No cookies are set by this.

These providers process data on our behalf and only for the purposes above. We do not sell your personal information to anyone, and we do not use it for advertising.

How long we keep it — and destroying it on request

We keep enquiry correspondence only for as long as needed to answer you and to maintain a reasonable business record. Security and server logs are retained only briefly, for operational and security purposes.

You can ask us at any time to unsubscribe you and destroy the data we hold about you. When you do, we will delete it from our active systems within one week of the request and, if you ask, provide written confirmation that it has been destroyed. The one exception is routine, encrypted system backups: these are not used day-to-day and are overwritten on their normal rotation, so any residual copy is purged as that cycle completes rather than on the same day.

Where your data is handled

We operate across Canada and the United States, and our providers — principally Microsoft — may process data in those or other regions under their own compliance frameworks. For any transfer that requires it, we rely on recognised safeguards such as the EU Standard Contractual Clauses (SCCs) and our providers’ own certified transfer mechanisms.

Your rights

Wherever you are, you can ask us to access, correct, delete, or export the personal information we hold about you, or to stop using it — and we will honour the request. Different regions name these rights differently: PIPEDA in Canada, the GDPR and UK GDPR in Europe and the UK, the CCPA / CPRA in California, and comparable laws elsewhere. Where more than one applies, we apply the stronger standard. To make a request, email [email protected]. If you are in the EU or UK and believe we have mishandled your data, you also have the right to lodge a complaint with your local data-protection supervisory authority — though we’d appreciate the chance to put it right first.

Regulatory compliance

This policy, and the way we handle data, are designed to meet the major privacy and data-protection regulations worldwide — not one jurisdiction’s alone. Anything relating to an active client engagement is additionally governed by the terms of the signed contract for that engagement. Where we process personal data on a client’s behalf, that engagement includes a data-processing agreement (DPA) setting out our obligations as a processor under laws such as the GDPR. Those terms are drafted to comply with the data-protection law that applies wherever the client operates, and in no case does our handling breach applicable regulation.

Security

We take reasonable technical and organisational measures to protect your information — encrypted connections (HTTPS), access controls, and a deliberately small data footprint. No method of transmission is perfectly secure, but we design to keep what we hold minimal and protected.

Changes

If we change this policy we’ll update the date above. Material changes will be reflected here before they take effect.