ZenithBlox Privacy Policy

ZenithBlox Inc. (“ZenithBlox”, “we”, “us”) is a Canadian company incorporated under the Canada Business Corporations Act. Our registered office is at 100 King Street West, Suite 5700, Toronto, Ontario M5X 1A9, Canada.

This policy explains how we collect, use, disclose and protect personal information when you visit zenithblox.com, request one of our documents, book a call with us or correspond with us.

It does not cover personal information that an institution entrusts to us under a contract, for example during a sandbox engagement or a production deployment. That processing is governed by our contract with the institution.

Fodé Touré, Founder & CEO, is responsible for protecting personal information at ZenithBlox. He oversees our compliance with this policy and with applicable laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where it applies, Quebec’s Act respecting the protection of personal information in the private sector.

Contact: fode@zenithblox.com, or by mail to the address above, marked “Attention: Privacy Officer”.

When you visit our website. Our hosting servers receive the technical information your browser sends, such as your IP address, browser and device type, the pages requested and the date and time of your visit. We use it to operate and secure the site and to fix problems.

When you request a document through a LinkedIn Lead Gen Form. LinkedIn may prefill the form from your profile. LinkedIn shares with us the information you submit — first name, last name, business email address and institution — with the form and campaign details. We use it to give you access to the document you requested. If you tick the separate, optional consent box, we may also email you about the subject of the document, including an invitation to a conversation. Requesting a document does not subscribe you to our general communications. We keep a record of your choice: date, campaign, language and form version.

When you book a call. We receive your name, business email address, institution, the time you choose and any notes you add. We use them to organize and prepare the call. Please do not include confidential information or client data; none is needed.

When you request a demonstration, write to us or meet with us. We keep your name, contact details (including a telephone number if you provide one), institution, role, the subject of your request and the content of our exchanges, to respond to you and manage our professional relationship.

Business contact information from professional sources. We may obtain business contact information — name, title, employer, business email address and telephone number — from public sources and professional databases. We use it to identify the people responsible for relevant activities at financial institutions, and only to communicate with them in their professional capacity. We record the source where practicable.

We do not ask for sensitive information, and we do not sell or rent personal information.

We collect, use and disclose personal information with your consent, express or implied as the law allows, or as otherwise permitted or required by law. You may withdraw your consent at any time, subject to legal or contractual restrictions. We will tell you if withdrawing it prevents us from responding to a request.

We send commercial electronic messages in accordance with Canada’s Anti-Spam Legislation (CASL). Each message identifies us and includes a simple way to unsubscribe. We act on unsubscribe requests without delay, and within 10 business days at the latest. A business email address that appears in a directory or contact database does not, by itself, sign you up for our messages.

• Our team, including our engineering subsidiary in Casablanca, Morocco, when people need the information for the purposes above. They are bound by confidentiality obligations.
• Service providers that act on our behalf: website hosting, email and productivity tools, scheduling (Calendly), and contact-management and prospecting tools. They may use the information only to provide their services to us, and they must protect it.
• LinkedIn, which processes the information you enter in a LinkedIn Lead Gen Form under its own privacy policy.
• Others when the law requires it, or in connection with a merger, an acquisition or a financing, under confidentiality undertakings.

Our website uses only the cookies it needs to work, such as the one that remembers your language choice. We do not activate technologies that identify, locate or profile you unless you choose to turn them on.

Our team and service providers may store or access personal information outside Canada, including in Morocco and the United States. There, it may be subject to local laws, including access by local authorities. Before communicating personal information outside Quebec or Canada, we assess whether it will be adequately protected and put contractual safeguards in place.

We keep personal information only as long as needed for the purposes for which it was collected, or as the law requires. Request and contact information with no follow-up is kept for up to 24 months after our last exchange. Technical logs are kept for [number] days, unless a security investigation requires longer. Consent records are kept as long as needed to demonstrate compliance, and we keep a minimal record of unsubscribe requests so that we can honour them. We then destroy or anonymize the information securely.

We protect personal information with administrative, technical and physical safeguards suited to its sensitivity, including access limited to the people who need it and encrypted connections to our website. If a confidentiality incident involving your information presents a risk of serious harm, we will notify you and the competent authorities as the law requires.

You may ask to access the personal information we hold about you, have it corrected or withdraw your consent. Depending on where you live, you may have other rights. For example, Quebec residents may ask that their information be communicated to them in a structured, commonly used technological format. We respond within 30 days and may ask you to confirm your identity. Write to the person in charge of privacy (section 2).

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or, where a provincial law applies, the provincial privacy authority, such as, in Quebec, the Commission d’accès à l’information.

Our website and services are intended for professionals. We do not knowingly collect personal information from minors.

We may update this policy. The current version and its effective date are posted on this page, and we will highlight material changes.