Effective date: November 4, 2025
Website: https://www.threatunknown.com/
This Privacy Policy explains how Threat Unknown ("Threat Unknown," "we," "us," or "our") collects, uses, discloses, and safeguards personal information when you visit our website or contact us about cybersecurity services. It also describes your privacy rights and how you can exercise them.
Scope. This policy covers personal information we collect through our public website, contact forms, email, and phone inquiries from prospective or existing clients. If we process data on behalf of a client as part of a services engagement, that processing is governed by our services agreement and (if applicable) a Data Processing Addendum (DPA) rather than this website policy.
If you have questions or wish to exercise a privacy right, contact us at the email above.
We collect the following categories of personal information when you provide it or when it is collected automatically from your device:
We do not intentionally collect sensitive personal information through our website.
We use personal information for the following purposes:
We use personal information only for purposes a reasonable person would consider appropriate in the circumstances. If we intend to use it for a materially different purpose, we will explain and seek consent where required by law.
When required, we obtain your consent to collect, use, and disclose personal information. Consent may be express (e.g., you submit a form) or implied (e.g., you contact us about services). We rely on recognized privacy principles such as identifying purposes, limiting collection, limiting use/disclosure/retention, accuracy, safeguards, openness, individual access, and accountability.
If you subscribe to marketing communications, you may opt out at any time using the unsubscribe link in the message or by emailing us. We comply with Canada's Anti‑Spam Legislation (CASL) where it applies.
You can adjust your browser settings to refuse or delete cookies. If we use non‑essential cookies, we will provide a consent banner where legally required.
We share personal information only as needed, including with:
We do not sell personal information.
We are based in Canada and may store or process information in Canada, the United States, or other locations where our service providers operate. We implement appropriate safeguards for cross‑border transfers where required by law.
We use reasonable physical, organizational, and technical safeguards designed to protect personal information against loss, theft, and unauthorized access, disclosure, copying, use, or modification. No method of transmission or storage is perfectly secure; we cannot guarantee absolute security.
We retain personal information only as long as necessary to fulfill the purposes outlined in this policy and to comply with legal, tax, or accounting requirements. When information is no longer needed, we will delete or de‑identify it.
Your rights depend on where you live. We will make reasonable efforts to honor requests consistent with applicable law.
You may request access to your personal information, correction of inaccuracies, and information about our handling of your data. To submit a request, email privacy@threatunknown.com.
Your rights vary by state. If you are a California resident, you may have rights to know/access, correct, delete, opt out of certain processing (e.g., sale or sharing for cross‑context behavioral advertising), and limit use of sensitive personal information (if applicable), subject to legal conditions. We do not sell personal information. To submit a request, email privacy@threatunknown.com and indicate you are a California resident.
We will verify your identity before responding and may refuse requests where an exemption applies or where verification is not possible.
Our website and services are intended for business audiences and are not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child provided us personal information, contact us so we can delete it.
Our site may link to third‑party websites or services we do not control. This policy does not apply to those third parties.
We may update this Privacy Policy from time to time. The Effective date above indicates when it was last revised. If we make material changes, we will take reasonable steps to provide notice as required by law.
If you have questions or complaints about this policy or our privacy practices, contact us at privacy@threatunknown.com. You may also have the right to contact the Office of the Privacy Commissioner of Canada or your local privacy regulator.