Privacy policy

Who we are

Hosmak Solutions (Hosmak Solutions Canada Inc.) is a Toronto-based advisory practice providing AI governance, technology governance, risk and compliance, and internal controls services. For the purposes of Canadian privacy law, the person accountable for our privacy practices is:

Privacy contact: Bunmi Makinde · hello@hosmaksolutions.ca · Toronto, Ontario, Canada

What this policy covers

This policy covers personal information we collect through this website and general business correspondence. Information we receive in the course of a client engagement is governed by the engagement agreement and our professional confidentiality obligations, which are stricter than this policy.

What we collect, and why

Contact form and email enquiries. Name, work email, organization, and whatever you choose to tell us about your enquiry. Used solely to respond to you. We deliberately ask you not to include sensitive details at the enquiry stage.

Consultation bookings. Booking details (name, email, chosen time, and anything you add to the booking notes) are collected through Microsoft Bookings and stored within our Microsoft 365 environment. Used to schedule and hold the consultation.

Checklist and resource downloads. Name and work email, used to deliver the resource and, only if you opt in, to follow up about it. Downloads never add you to a mailing list beyond that follow-up, and the opt-in checkbox is unchecked by default.

Website analytics. We do not currently run website analytics. If we add an analytics tool in future, we’ll update this section to name it and describe what it collects, including whether it sets cookies.

We do not sell personal information, share it with third parties for their marketing, or use it to train AI models.

We collect, use and disclose personal information with consent and for purposes a reasonable person would consider appropriate in the circumstances, consistent with PIPEDA. Providing information through the site is voluntary; the consequence of not providing it is simply that we can’t respond or schedule the call.

Who has access

Personal information is accessible to Hosmak Solutions and to the service providers that operate our infrastructure — principally Microsoft 365 (email, calendar, file storage) and our website hosting provider. Service providers process information on our behalf under their own contractual and security commitments. Some service providers may store or process information outside Canada, in which case it is subject to the laws of those jurisdictions.

We may disclose personal information where required by law.

Retention

Enquiry and booking information is retained for 24 months after our last interaction, then deleted, unless the enquiry becomes a client engagement (in which case engagement records are retained per our professional and legal obligations) or law requires longer.

Safeguards

Information is protected by access controls, multi-factor authentication, and encryption in transit and at rest within our Microsoft 365 environment. No internet transmission is perfectly secure, but we apply to our own systems the same control disciplines we advise clients on.

Your rights

You may ask what personal information we hold about you, request corrections, or withdraw consent to further contact at any time, using the privacy contact above. We’ll respond within 30 days. If you’re unsatisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).

Changes

We’ll post any changes here with a new effective date. Material changes will be flagged on this page.