Privacy Policy

PIPEDA Compliant | Last Updated: March 18, 2026

1. Data Processor Status

Tower Guard operates as a "Data Processor" under the Personal Information Protection and Electronic Documents Act (PIPEDA). We process business contact information solely for the delivery of security simulations and compliance reporting.

2. International Data Transfers

As part of our cloud-based infrastructure, data may be processed or stored outside of Canada (including the United States). In such cases, data remains subject to the privacy laws of those jurisdictions, in addition to our internal security standards.

3. Data Security & Retention

We use industry-standard encryption to protect simulation results. Behavioral data is retained for a period of 12 months for historical reporting purposes, after which it is anonymized or securely destroyed.