Privacy Policy

How IT Compliance Jobs Canada handles your personal data

Last updated: 18 March 2026

1. Data Controller

IT Compliance Jobs Canada is the data controller responsible for processing personal data as described in this privacy policy. You can contact us at [email protected].

2. Data We Collect

We collect the following data:

  • Job Alert subscriptions: email address and preferences for specialisations.
  • Contact form: name, email address and your message.
  • Vacancy postings: company name, contact details and vacancy information from employers.
  • Automatically collected data: IP address (pseudonymised where applicable), browser type, operating system, pages visited and referring URLs.

3. Purposes of Processing

We process your data for the following purposes:

  • Providing and improving our services (job board platform).
  • Sending Job Alerts based on your preferences.
  • Handling contact requests.
  • Website analytics and performance improvement.

The lawful basis for processing is your consent or our legitimate interest in operating the platform, in accordance with PIPEDA and applicable privacy laws.

4. Cookies and analytics

Necessary cookies are used for the basic operation of the website. Google Analytics (property ID G-NK5FJ2832B) and Microsoft Clarity are loaded only after you consent to the Analytics category. No analytics scripts are loaded without that consent.

After you consent, we also record first-party pseudonymous event data: visited URL, referrer, device type, search term, vacancy or organisation context, and a shortened hash of the IP address.

You can change your choice at any time using the Cookie preferences button.

  • _ga, _ga_*: Google Analytics cookies for aggregated website statistics (maximum lifetime: 2 years).
  • _clck, _clsk: Microsoft Clarity cookies for aggregated usage and performance analysis.

5. Supabase

We use Supabase as our database provider for storing vacancies, organisation data and Job Alert subscriptions. The processing location follows the configured Supabase project region. Data is stored encrypted and transferred via HTTPS.

6. Sharing of Data

We do not share your personal data with third parties, except:

  • Google LLC (Analytics), processing after consent, with anonymised IP addresses.
  • Microsoft Corporation (Clarity), usage and performance analysis after consent.
  • Cloudflare Inc. (Turnstile), abuse prevention on the contact form.
  • Resend Inc., delivery and handling of contact messages.
  • Supabase Inc., database storage in the configured project region under a data processing agreement.

7. Retention Periods

We do not retain your data longer than necessary:

  • Job Alert subscriptions: until you unsubscribe.
  • Contact details: maximum 12 months after resolution.
  • Analytics data: maximum 26 months (Google Analytics default).

8. Your Rights

Under PIPEDA and applicable privacy laws, you have the right to:

  • Access: request which data we process about you.
  • Rectification: have inaccurate data corrected.
  • Erasure: request deletion of your data.
  • Restriction: temporarily restrict processing.
  • Data portability: receive your data in a structured format.
  • Objection: object to processing based on legitimate interest.
  • Withdraw consent: withdraw previously given consent.

You can exercise your rights by contacting us at [email protected]. We will respond within 30 days.

9. Security

We take appropriate technical and organisational measures to protect your data, including HTTPS encryption, secured database access and regular security updates.

10. Complaints

If you have a complaint about how we handle your data, please contact us first at [email protected]. You also have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca.

11. Changes

We reserve the right to amend this privacy policy. The most recent version is always available on this page. In case of material changes, we will inform you via the website.