Privacy Policy

PFGsec Consulting Services Ltd. provides cybersecurity, technology advisory, infrastructure resilience, security architecture, compliance, AI governance, training, and related consulting services.

PFGsec operates from Canada, with offices in Ontario and Abuja, supporting organizations across North America, Africa, the United Kingdom, and international markets.

PFGsec handles personal information in a manner designed to align with applicable privacy and data protection requirements, including:

• PIPEDA — Canada’s Personal Information Protection and Electronic Documents Act
• NDPR — Nigeria Data Protection Regulation
• Nigeria Data Protection Act, 2023
• Other applicable privacy, data protection, and cybersecurity requirements depending on the location of the client, user, or engagement

Where privacy requirements differ by jurisdiction, we aim to apply reasonable safeguards and privacy practices that support lawful, fair, transparent, and secure handling of personal information.

We may collect personal information when you interact with our website, request a consultation, download a resource, contact us, use our chat feature, register for training, or communicate with PFGsec.

This may include:

• Full name
• Company or organization name
• Job title or role
• Work email address
• Phone number
• Country or location
• Consultation type or service interest
• Brief description of your business need
• Meeting window preferences
• Messages submitted through contact forms or chat
• Download form details
• Event or training enquiry details
• Marketing preferences
• Website usage data such as pages visited, browser type, device type, referral source, and general analytics information

We do not intentionally collect sensitive personal information through the website. Please do not submit confidential, regulated, or sensitive information unless requested through an approved and secure engagement process.

We may collect personal information directly from you when you:

• Submit a consultation request
• Complete a contact form
• Use the website chat function
• Download a gated resource
• Subscribe to updates or insights
• Register interest in training or events
• Communicate with us by email, phone, or other channels
• Interact with our website or digital content

We may also collect limited technical information automatically through cookies, analytics tools, and similar technologies.

PFGsec may use personal information to:

• Respond to your enquiries
• Review and manage consultation requests
• Contact you about requested services
• Provide downloadable resources
• Share relevant insights, updates, or service information
• Schedule meetings or advisory calls
• Understand your organization’s needs
• Improve our website, services, content, and user experience
• Manage client or prospective client relationships
• Support sales, marketing, and business development activities
• Maintain website security and prevent misuse
• Meet legal, regulatory, contractual, or compliance obligations

We do not sell personal information.

Where required, PFGsec will collect, use, or disclose personal information with your consent.

Consent may be provided when you submit a form, request a consultation, download a resource, subscribe to communications, or otherwise provide personal information to us.

Depending on the context and applicable law, we may also process personal information where necessary to:

• Respond to your request
• Take steps before entering into a business relationship
• Perform a contract or engagement
• Meet legal or regulatory obligations
• Protect our website, systems, or business operations
• Pursue legitimate business interests in a reasonable and privacy-conscious manner

You may withdraw consent for optional communications at any time, subject to legal, contractual, or operational limitations.

When you submit a consultation request or use our website chat function, we may collect the information you provide so we can understand your enquiry and respond appropriately.

Submitting a consultation request or chat message does not create a client relationship with PFGsec. A professional services relationship is only created through a separate written agreement, proposal, engagement letter, or statement of work.

Some PFGsec resources may require you to provide your name, company, and work email before downloading.

We use this information to provide the requested resource, understand interest in our content, and follow up where appropriate.

You may unsubscribe from marketing communications at any time.

Our website may use cookies, analytics tools, and similar technologies to understand website activity, improve performance, measure content engagement, and support basic site functionality.

Cookies may help us understand:

• Which pages are visited
• How users navigate the website
• Which resources are viewed or downloaded
• General device, browser, and traffic patterns

You may adjust your browser settings to block or delete cookies, or update your choices on our cookie preferences page. Some website features may not work properly if cookies are disabled.

PFGsec may share personal information only where reasonably necessary.

This may include sharing information with:

• Authorized PFGsec personnel, consultants, or contractors
• Website hosting and technology service providers
• Email, CRM, analytics, or communication platforms
• Professional advisers where required
• Legal, regulatory, or law enforcement authorities where required by law
• Service providers supporting website operations, security, or business administration

We require service providers to handle personal information responsibly and only for authorized purposes.

Because PFGsec operates across Canada and Nigeria and supports international clients, personal information may be processed or stored in Canada, Nigeria, the United States, the United Kingdom, or other jurisdictions where our service providers operate.

Where personal information is transferred across borders, we use reasonable safeguards designed to protect the information in accordance with applicable privacy and data protection requirements.

PFGsec uses reasonable administrative, technical, and organizational safeguards to protect personal information against unauthorized access, loss, misuse, disclosure, alteration, or destruction.

These safeguards may include:

• Access controls
• Secure communication practices
• Restricted access to business systems
• Vendor and service provider review
• Security monitoring
• Data minimization
• Internal confidentiality expectations
• Reasonable retention and disposal practices

No website or online transmission is completely secure. Users should avoid submitting sensitive or confidential information through public website forms.

PFGsec keeps personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention periods may depend on:

• The nature of the enquiry
• Whether a business relationship is created
• Legal or regulatory requirements
• Contractual obligations
• Recordkeeping needs
• Security, audit, or dispute-resolution requirements

When information is no longer required, we will delete, anonymize, or securely dispose of it where appropriate.

Depending on your location and applicable law, you may have the right to:

• Request access to personal information we hold about you
• Request correction of inaccurate or incomplete information
• Withdraw consent where processing is based on consent
• Request deletion of personal information, subject to legal or operational limits
• Object to certain uses of personal information
• Request restriction of certain processing activities
• Request information about how your personal information has been used or disclosed
• Unsubscribe from marketing communications

To exercise your rights, contact us using the details in the Contact Us section below.

We may need to verify your identity before responding to a privacy request.

If you subscribe to PFGsec updates, download a resource, or engage with our content, we may send you relevant cybersecurity, compliance, AI governance, training, or advisory updates.

You may unsubscribe at any time using the unsubscribe link in our emails or by contacting us directly.

We will not continue sending optional marketing communications where you have withdrawn consent, subject to reasonable processing time.

The PFGsec website is intended for business users, professionals, and organizations.

We do not knowingly collect personal information from children. If we become aware that a child has provided personal information through the website, we will take reasonable steps to delete it.

Our website may contain links to third-party websites, tools, publications, platforms, or resources.

PFGsec is not responsible for the privacy practices, security, accuracy, or content of third-party websites. You should review the privacy policies of any third-party websites you visit.

If PFGsec becomes aware of a privacy or security incident involving personal information under our control, we will assess the incident and take appropriate steps to contain, investigate, remediate, and notify affected individuals or regulators where legally required.

We may update this Privacy Policy from time to time to reflect changes in our website, services, legal obligations, or privacy practices.

When updates are made, we will revise the “Last Updated” date. Continued use of the website after changes are posted means you accept the updated Privacy Policy.

For privacy questions, requests, or concerns, contact:

PFGsec Consulting Services Ltd.
Email: insights@pfgsec.com
Phone: +1 (613) 402-6271
Locations: Ontario, Canada and Abuja, Nigeria

Please include “Privacy Request” in the subject line where possible.

If you have a concern about how PFGsec handles your personal information, please contact us first so we can review and respond to your concern.

Where applicable, you may also have the right to contact the relevant privacy authority in your jurisdiction, including the Office of the Privacy Commissioner of Canada or the Nigeria Data Protection Commission. PIPEDA is administered by Canada’s federal privacy regulator, and Nigeria’s data protection framework is overseen by the Nigeria Data Protection Commission.