Privacy Policy

Last updated: 2026-05-07 · Compliant with Quebec Law 25 principles.

1. Privacy Officer & Data Controller

Tyberion Technologies Inc.("Tyberion", "we", "us") is the controller of personal information collected through this website and through our advisory engagements.

The designated Privacy Officer responsible for compliance under Quebec's Law 25 (Act respecting the protection of personal information in the private sector) is:

Joseph Polgrabia, Senior Technical Architect & Privacy Officer
Email: jpolgrabia@yahoo.ca
Phone: +1 (289) 407-9446
Mailing: 102 Rykert St., St. Catharines, ON, Canada, L2S 2B2

2. Scope

This policy describes how Tyberion collects, uses, retains, and protects personal information in connection with our website and our consulting engagements. Where engagements involve protected health information (PHI), we operate under additional contractual and regulatory obligations including HIPAA.

3. Information We Collect

We minimize collection by design. Categories may include:

Contact information you voluntarily provide (name, email, phone, organization) when reaching out for consultation.
Engagement materials shared by clients under written agreement, handled per the relevant data processing terms.
Technical telemetry (IP address, user agent, referring page) collected by hosting infrastructure for security and reliability.

We do not deploy advertising trackers or third-party profiling cookies on this website.

4. Purposes of Collection

To respond to inquiries and deliver requested consultation services.
To execute contracted engagements and meet obligations to clients.
To secure our infrastructure and prevent abuse.
To comply with applicable legal and regulatory obligations.

6. Retention & Destruction

Personal information is retained only as long as necessary to fulfill the purposes for which it was collected, or as required by law. Engagement records are retained per contractual terms and destroyed or anonymized once retention obligations expire.

7. Cross-Border Transfers

Tyberion operates from Ontario, Canada, and engages cloud infrastructure providers that may store or process information in Canada, the United States, or other jurisdictions. Where applicable under Quebec Law 25, we conduct privacy impact assessments before transferring personal information outside Quebec.

8. Your Rights

You have the right to:

Access the personal information we hold about you.
Request correction of inaccurate information.
Request deletion or de-indexing where legally applicable.
Withdraw consent for non-essential processing.
Lodge a complaint with the Commission d'accès à l'information du Québec.

Submit requests to jpolgrabia@yahoo.ca. We respond within 30 days.

9. Security Measures

We apply privacy-by-design and defence-in-depth principles, including access controls, encryption in transit and at rest, audit logging, and SRE-driven incident response. Engagements involving PHI follow HIPAA Safeguards (Administrative, Physical, Technical).

10. Confidentiality Incidents

In the event of a confidentiality incident posing risk of serious injury, Tyberion will notify affected individuals and the relevant regulator without undue delay, and will maintain a confidentiality incident register as required by Quebec Law 25.

11. Changes to this Policy

We may update this policy as our services or legal obligations evolve. Material changes will be reflected in the "Last updated" date below.