Privacy Policy

Informatica Corporation d.b.a. Datarisk Canada

Datarisk.ca  ·  Last updated November 6, 2026

1. Who is responsible for your information

Datarisk Canada is a trade name of Informatica Corporation. The website provides information about cybersecurity assessments, risk assurance, audit services and related professional work.

Informatica Corporation is responsible for personal information under its control, including information handled on its behalf by suppliers. The operating names Managed Privacy Canada, Datarisk Canada and WorkLife Learning are trade names of Informatica Corporation, not separate legal entities.

This policy covers information collected through Datarisk.ca and the related activities described below. Other Informatica-operated websites and distinct services may publish their own service-specific notices.

2. Personal information we collect

The information involved depends on how you use the website or communicate with us. It may include:

• Contact and inquiry information: first and last name, email address, telephone number, country, and any subject, referral source or message you choose to submit.
• Business and service information: your organization, role, information relevant to your request, and records needed to administer a professional or commercial relationship.
• Newsletter information: the email address you provide through an optional Ghost subscription form and your subscription status.
• Website and security information: IP address and other technical connection data, page views, pseudonymous browser or session identifiers, browser/device details, and anti-spam signals generated by the technologies described below.
• Engagement information: where a client engagement is established, assessment, audit, security and compliance information reasonably necessary for the contracted service.

Please do not place sensitive personal information or confidential third-party records in ordinary website inquiry forms. Where such records are needed for a contracted service, we will identify an appropriate submission process.

3. How we use information

We use information to respond to requests; prepare and administer services or purchases; communicate about your inquiry or an existing relationship; operate and protect our websites; deliver newsletters you request; and meet applicable business, contractual and legal obligations.

Professional cybersecurity or risk engagements can involve technical evidence, confidential documentation and records that contain personal information. These materials are handled according to the agreed scope and engagement arrangements and should not be transmitted through ordinary public inquiry forms.

We do not sell personal information or newsletter mailing lists. Submitting an inquiry does not automatically subscribe you to unrelated promotional messages.

4. Contact forms and website hosting

Our contact forms use the Gravity Forms plugin within a WordPress website hosted by IONOS. Website submissions are stored in the website’s WordPress database on IONOS-hosted infrastructure. People with authorized WordPress Editor or Administrator access can view these entries.

According to our current setup, Gravity Forms provides the form functionality but its developer does not receive the submitted form entries merely because that plugin is used. IONOS provides hosting infrastructure. The forms typically ask for first name, last name, email address, telephone number and country; individual forms may request additional information relevant to the inquiry.

Website form entries are not presently subject to automatic deletion. They remain stored until manually deleted, subject to our applicable records and legal obligations. You may contact our Privacy Officer to request access, correction or a review of continued retention.

5. Cookies, analytics and anti-spam technologies

The following technologies are currently used on this website. Some start operating when a page loads, before you open this privacy policy or submit a form.

Technology / storage	Function and information	Typical lifetime
Google Analytics 4 (_ga, _ga_*)	Page views, approximate location reporting and pseudonymous visitor/session measurement; loads automatically.	Approximately 13 months; browser controls only.
Google reCAPTCHA (_GRECAPTCHA, rc::a, rc::c)	Bot and spam protection; browser, network and interaction signals; loads on all pages.	Approx. 6 months for _GRECAPTCHA; persistent/session for other storage.
WordPress (wpEmojiSettingsSupports)	Checks browser emoji-display support.	Session.

Google Analytics 4 runs automatically when pages load. We use it to measure website visits and report on usage, including page views and geographic information such as country. Google may also receive the page URL, referrer, technical connection information and pseudonymous browser/session identifiers used to deliver the analytics service. We do not use Google Signals or Google Analytics advertising personalization.

We currently do not provide an on-site control to reject Google Analytics cookies or subsequently change an analytics preference. Browser settings can block or delete cookies, but blocking cookies may not stop every analytics request or technical data transmission. We are reviewing a more privacy-preserving configuration.

Google reCAPTCHA loads on the website’s pages to help identify bots and protect forms. It may transmit network, device, browser and interaction data to Google. It is used for security, not for our advertising.

Google Privacy Policy  https://policies.google.com/privacy

6. Informational newsletters

An optional Ghost subscription form is available on this website. When you subscribe, we provide your email address to Ghost to manage the subscription and deliver nonpromotional newsletters containing educational articles, research, professional commentary and other informational updates.

Newsletter open tracking and click tracking are disabled in our Ghost configuration. We do not use subscriber information to profile readers or for unrelated promotional marketing.

Each newsletter includes an unsubscribe link. Unsubscribing changes your subscription status to unsubscribed; it does not automatically delete your email address from the Ghost member record. Authorized personnel may access subscriber records for newsletter administration.

Ghost Privacy Policy  https://ghost.org/privacy/

7. Professional risk and assurance engagements

Where you engage Datarisk Canada, the information needed for a cybersecurity or risk assessment may include system details, assessment evidence or personal information contained in client-provided records. The scope and handling arrangements are determined for each engagement.

We ask that sensitive client documentation be provided through an authorized engagement channel rather than a public website form.

8. Service providers and independent organizations

Our service providers include IONOS for website hosting, Google for Analytics and reCAPTCHA, and Ghost for newsletter management. Information is shared with them as needed for these functions. We remain responsible for personal information under our control processed on our behalf.

Other service providers may be used where necessary for a specifically agreed professional service, subject to the relevant engagement arrangements and appropriate disclosure. We may also disclose information where required or permitted by law.

Links to independent websites do not make those organizations part of Informatica Corporation. Their practices are governed by their own privacy notices.

9. Processing outside Canada

Google, Ghost and other technology suppliers may process information outside Canada. Information processed in another country may be accessible under that country’s laws. We do not claim that all website or newsletter information remains in Canada.

10. Retention and deletion

Retention depends on the purpose and nature of the record. Inquiries and service records may be retained while a request or relationship is active and for applicable business, contractual or legal requirements. As noted above, form entries stored on our websites do not currently have automated deletion periods and require manual deletion.

Ghost maintains a subscriber record after unsubscribe, with the status changed to unsubscribed. Other records, including transaction, client and technical information, are retained for periods appropriate to their purposes and applicable obligations. We take steps to delete or de-identify information when it is no longer required, subject to lawful exceptions and the practical limitations of the relevant systems.

You may contact our Privacy Officer if you believe information is no longer needed or wish to request an appropriate correction or deletion.

11. Security safeguards

We use administrative, organizational and technical measures appropriate to the nature and sensitivity of the information. Website inquiry records are accessible to authorized personnel with Editor or Administrator roles. Additional safeguards for confidential professional engagements may be addressed in the relevant engagement arrangements.

No internet-connected system is entirely free of risk. We do not guarantee absolute security.

12. Your choices, access and correction

You may contact our Privacy Officer to ask what personal information we hold about you, request access or correction, ask questions about consent or request withdrawal of applicable consent. Certain exceptions and record-retention obligations may apply.

Where PIPEDA applies, we generally respond to written access requests within 30 days, subject to permitted extensions and exceptions. We may need to verify identity before providing access.

You may unsubscribe from newsletters using the link in a message. You may also control or clear some website cookies through your browser; this is not a complete substitute for an on-site consent control.

13. Privacy questions and complaints

Please direct privacy questions or complaints to our Privacy Officer using the address or website contact link below. We will consider concerns and respond in accordance with applicable privacy law. If a concern remains unresolved, you may contact the Office of the Privacy Commissioner of Canada, where appropriate.

Office of the Privacy Commissioner of Canada  https://www.priv.gc.ca/

14. Changes to this policy

We review this policy when our services, technology, suppliers or relevant legal requirements change. We update the revision date when substantive changes are published and provide additional notice or seek consent where required.

15. Contact the Privacy Officer

Privacy Officer, Informatica Corporation

18 King Street East, Suite 1400
Toronto, Ontario M5C 1C4
Canada

Contact us through Datarisk.ca  https://www.datarisk.ca/contact-us/