Privacy Policy
Written to be read. If anything here is unclear, ask us and we will explain it in plain terms — that is a fair test of whether a policy is honest.
- Last revised
- 25 July 2026
- Applies to
- virtusinfotech.com
- Clauses
- 12
1.Scope of this policy
This policy explains what personal information Virtus Infotech collects when you use virtusinfotech.com or engage us for services, why we collect it, and what you can ask us to do with it.
It covers this website and our commercial relationships. Where we process data on behalf of a client as part of a delivery engagement, that processing is governed by the data processing terms in the relevant contract rather than by this policy.
2.Information we collect
- Information you give us
- Your name, work email, telephone number, company and the content of your enquiry, when you submit a form or email us.
- Technical information
- IP address, browser and operating system, referring page and the pages you view, collected automatically when you visit.
- Recruitment information
- Your CV and application details, where you apply for a role with us.
We do not ask for, and ask that you do not send us, payment card numbers, government identifiers or other sensitive personal data through this website.
3.How we use it
- Responding to you
- To answer an enquiry, prepare a proposal, or arrange a conversation.
- Delivering services
- To administer a contract and communicate with you during an engagement.
- Running the website
- To keep the site secure and available, and to understand which pages are useful.
- Recruitment
- To assess an application and to contact you about the outcome.
We do not sell personal information, and we do not use the information you submit through an enquiry form to add you to a marketing list without asking you first.
4.Legal basis for processing
Where the UK GDPR, EU GDPR or comparable legislation applies, we rely on: your consent, where you have given it; the performance of a contract, where we are delivering services to you; our legitimate interests in operating and securing our business, where those interests do not override your rights; and compliance with a legal obligation, where one applies.
Where we rely on consent, you can withdraw it at any time by contacting us using the details in clause 11.
6.How long we keep it
Enquiry correspondence is kept for two years from our last exchange. Contract and engagement records are kept for seven years after the engagement ends, to meet accounting and limitation-period obligations. Unsuccessful job applications are kept for twelve months, unless you ask us to delete them sooner.
Technical logs are retained for a maximum of ninety days.
7.International transfers
We are based in Canada and use service providers located in Canada, the United States, the United Kingdom and the European Economic Area. Where personal information is transferred outside your jurisdiction, we rely on the receiving country's adequacy status or on standard contractual clauses with the provider.
8.How we protect it
Access to personal information is limited to the people who need it, protected by single sign-on and multi-factor authentication. Data is encrypted in transit and at rest with our providers, and administrative access is logged.
No system is perfectly secure. If a breach affects your personal information and presents a real risk to you, we will notify you and the relevant regulator as required by law.
9.Your rights
- Access
- Ask for a copy of the personal information we hold about you.
- Correction
- Ask us to correct information that is wrong or incomplete.
- Deletion
- Ask us to delete information we no longer have a reason to keep.
- Restriction and objection
- Ask us to pause processing, or object to processing we base on legitimate interests.
- Portability
- Ask for the information you gave us in a machine-readable form.
- Complain
- Complain to your data protection authority. In Canada, that is the Office of the Privacy Commissioner.
We respond to requests within thirty days. We may ask you to confirm your identity before we act on one.
11.Children
This website is intended for business audiences. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, contact us and we will delete it.
12.Contact and changes
If you have a question about this policy or want to exercise a right, email contact@virtusinfotech.com or write to Virtus Infotech, 223 Martindale Boulevard NE, Calgary, Alberta, Canada.
We update this policy when our practices change. The revision date at the top of this page tells you when it last changed; material changes will be flagged on this page for thirty days.