Privacy notice
Your details, and what we do with them
Effective 8 October 2026
This notice covers the toolkit-sec.com website and its contact form. Toolkit Security operates in Canada and Israel, and handles personal information under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Israel's Protection of Privacy Law, 5741-1981, as amended (including Amendment 13), and its regulations.
The IT Sentinel product
IT Sentinel is installed on a customer's own premises. Everything it collects, stores and produces stays on the customer's servers. It does not send data to us or to any AI service, and we don't host, receive or process it. This notice is only about the website.
What we collect
- What you type into the contact form: your name, work email address, and, if you choose to add them, your company, your role, the tools you run and your message.
- Your country, as Cloudflare works it out from your connection, added to your message so we know where enquiries come from. Not your IP address.
- Spam protection. Your IP address is used for a moment to limit how many messages one visitor can send, and the form may use Cloudflare Turnstile to check that a person, not a bot, sent it. Neither is stored with your message. Cloudflare processes these checks under its own privacy policy.
- Visit statistics. Cloudflare Web Analytics counts page views without cookies and without identifying you.
The website sets no advertising or tracking cookies, and we don't buy, sell or rent personal information.
Why we collect it
Giving us your details is voluntary: you're under no legal obligation to, and without them we simply can't reply. We use them only to reply to your message and to continue the conversation you started. You give your consent with the checkbox on the form, and you can withdraw it at any time (see below). We don't add you to a mailing list.
Where it's kept, and for how long
- The website doesn't store your message. Cloudflare passes it on as an email to our own mailbox, and that's the only copy.
- We keep that correspondence for up to 12 months after our last exchange with you, then delete it, unless you become a customer.
- Cloudflare and our email provider may process and store data on servers outside Canada and Israel, including in the United States. There it is subject to local law, but it's used only to provide those services to us.
Your rights
You can ask to see the personal information we hold about you, to correct it, or to delete it, and you can withdraw your consent. Write to us at the address below and we'll answer within 30 days. If you're not satisfied, you can complain to the Office of the Privacy Commissioner of Canada or to Israel's Privacy Protection Authority.
Contact
Privacy questions and requests: privacy [at] toolkit-sec.com, or the contact form.
Changes
If we change this notice, we'll update the date at the top. We won't use information already collected for a new purpose without asking you first.