Privacy Policy

Effective date: October 24, 2026
Last updated: October 24, 2026

Mjolnir Security Inc. ("Mjolnir Security", "we", "us") is a 100% Canadian-owned cybersecurity firm. This policy explains what personal information we collect through our website and in the course of our business, why we collect it, who we share it with and the choices you have. It does not cover the confidential client data we handle during an engagement, which is governed by the engagement agreement with that client.

1. Who is responsible

Our Privacy Officer is accountable for how we handle personal information, including under the Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Act respecting the protection of personal information in the private sector.

Privacy Officer: Milind Bhargava, Founder & CEO
Email: privacy@mjolnirsecurity.com
Mail: Mjolnir Security Inc., Attn: Privacy Officer, Suite 901, 302 Bay Street, Toronto, ON M5X 1A1, Canada

2. What we collect

Information you give us

Contact form and SOC sizing calculator: your name, work email, company, phone number (optional), the topic you choose and your message. For the calculator, also the environment details, budget range and timeline you enter, and the details of any partner helping you.
Chat: messages you type into the website chat, and any contact details you share there.
Marketing consent: whether you ticked the optional box agreeing to receive email from us. When you do, we record the date and time, your IP address, the page and the exact wording you agreed to, so we can prove consent.
Careers: applications you submit through our careers site.
Business dealings: billing contacts and correspondence when you engage our services.

Information collected automatically

Website usage: pages visited, referring site, approximate location derived from your IP address, device and browser type, and time of visit.
Company identification: if you allow it in the cookie banner, our visitor-identification service uses your IP address to identify the organization whose network you are visiting from. It is designed to identify companies, not individuals.

3. Why we use it

To reply to your enquiry and to scope, propose and deliver services you ask about.
To send you insights, threat research and service updates, only if you gave express consent, or where Canada's Anti-Spam Legislation (CASL) allows implied consent, for example for six months after you make an enquiry or two years after a purchase.
To understand how the website is used and improve it.
To protect our website and systems from abuse, including spam submissions.
To meet legal, accounting and regulatory obligations.

We do not sell personal information, and we do not use it for automated decisions that have legal or similarly significant effects on you.

4. Who we share it with

We share personal information only with service providers that process it on our behalf, under contract and for the purposes above:

Provider	What it does for us	Where data may be processed
Pipedrive	Customer relationship management: stores contact form, calculator and chat enquiries; website chat	European Union or United States
Google Analytics (Google)	Website analytics, only with your consent	United States and other countries
Plausible Analytics	Privacy-focused, cookieless website analytics	European Union
Leadfeeder (Dealfront)	Identifies the organizations that visit our website, only with your consent	European Union
Cloudflare	Website hosting, delivery and security	Global network
Google Fonts and Google Maps (Google)	Website fonts, and the office map when you choose to load it; your browser connects to Google to load them	United States and other countries
BambooHR	Careers site and job applications	United States

We may also disclose information where required by law, to protect our rights or the safety of others, to partners you ask us to work with on your engagement, or as part of a merger or sale of our business, subject to confidentiality.

Transfers outside Canada. Some providers process information outside Canada, where it may be accessible to courts and authorities under local law. Before transferring information about Quebec residents outside Quebec, we assess whether it will receive adequate protection.

5. Cookies and similar technologies

Essential: needed for the site to work, to remember your cookie choice and to stop spam. Always on.
Analytics: Plausible counts visits without cookies and runs for every visitor. Google Analytics sets cookies (such as _ga) and loads only if you allow analytics.
Visitor identification: Leadfeeder sets cookies (such as _lfa) to recognize returning organizations, and loads only if you allow analytics.
Chat: the Pipedrive chat stores an identifier so a conversation continues across pages. It loads only if you allow chat, or when you click "Chat with us".

Analytics, visitor identification and chat are off until you choose in the cookie banner. You can change your choice at any time from the "Cookie settings" link in the footer, and you can also block or delete cookies in your browser.

6. How long we keep it

Enquiries and CRM records: three years after our last contact with you, unless you become a client.
Client business records: for the relationship plus the period required by law, generally seven years for financial records.
Marketing consent records: for as long as we email you, plus three years, so we can prove consent.
Google Analytics data: up to 14 months.
Job applications: 12 months after the recruitment process ends.

7. How we protect it

We apply administrative, technical and physical safeguards appropriate to the sensitivity of the information, and our controls are independently audited under SOC 2 Type II. No method of transmission or storage is completely secure. If a breach creates a real risk of significant harm, we will notify you and the Office of the Privacy Commissioner of Canada and, for Quebec residents, the Commission d'accès à l'information du Québec, as the law requires.

8. Your choices and rights

You can ask to:

access the personal information we hold about you, and receive it in a structured, commonly used format;
correct information that is inaccurate or incomplete;
delete information we no longer need, subject to legal obligations;
withdraw consent, including marketing consent, at any time; every marketing email has an unsubscribe link;
stop the dissemination of, or de-index, your information where the law allows.

Email privacy@mjolnirsecurity.com. We will verify your identity and respond within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca), to the Commission d'accès à l'information du Québec (cai.gouv.qc.ca) if you live in Quebec, or to your provincial commissioner in Alberta or British Columbia.

9. Children

Our website and services are not directed to anyone under 18, and we do not knowingly collect their information.

10. Changes

We will post any changes here and update the date above. If a change materially affects how we use information you have already given us, we will ask for your consent where required.

11. Contact

Mjolnir Security Inc., Suite 901, 302 Bay Street, Toronto, ON M5X 1A1, Canada
Privacy Officer: Milind Bhargava, privacy@mjolnirsecurity.com
General enquiries: sales@mjolnirsecurity.com · +1 833 403 5875