Privacy Policy

Who We Are

Telos One Limited ("Telos One," "we," "us") is a Canadian corporation registered in the Province of Ontario. We provide payment processing consulting, technology infrastructure, development, and strategic consulting services to businesses across Canada, the United States, and the Caribbean, with select services available globally.

This policy explains what personal information we collect through this website and in the course of providing services, how we use it, and the rights you have over it. It should be read together with our Data Security & Compliance page, which describes our security program in detail.

Information We Collect

Information you provide directly:

• Contact details submitted through our contact form or by email (name, email address, company, and the content of your message)
• Email address, if you subscribe to our newsletter
• Business documents you share for service delivery, such as processing statements provided for a payment audit, which are handled under mutual NDA

Information collected automatically:

• Basic technical data when you visit this site (IP address, browser type, pages viewed) used for security and site operation
• A theme preference stored locally in your browser (localStorage). This never leaves your device

How We Use Your Information

• To respond to inquiries and provide the services you request
• To deliver the newsletter you subscribed to (you can unsubscribe at any time via the link in every email)
• To operate, secure, and improve this website
• To meet legal and regulatory obligations

We do not sell personal information, and we do not use your information for third-party advertising.

Third-Party Services

We use a small number of service providers to operate this website. Each may process limited personal data on our behalf:

• Typeform: hosts our contact form; receives the details you submit and may set cookies when the form loads
• Omnisend: delivers our newsletter; receives your email address when you subscribe
• Cloudflare: hosts and secures this website; processes visitor IP addresses as part of content delivery and threat protection
• Google Fonts: serves the site's typefaces; your browser requests font files from Google's servers

We prioritize providers holding SOC 2 Type II, ISO 27001, or equivalent certifications. A current list of subprocessors used in service delivery is available on request at [email protected], and we provide 30 days' notice before subprocessor changes affecting client data.

Some providers process data outside Canada (including in the United States). Where personal information crosses borders, it remains protected by contractual safeguards, but may be subject to the laws of the jurisdiction where it is processed.

Retention & Security

We keep personal information only as long as needed for the purpose it was collected, or as required by law, after which it is deleted or anonymized. Client engagement data follows the retention schedule in our Data Security & Compliance policy. Our security program is aligned with the NIST Cybersecurity Framework, ISO 27001, and PIPEDA requirements.

Your Rights

Under PIPEDA (and, where applicable, GDPR/UK GDPR), you may:

• Request access to the personal information we hold about you
• Request correction of inaccurate information
• Request deletion, subject to legal retention requirements
• Withdraw consent to communications at any time
• File a complaint with the Office of the Privacy Commissioner of Canada, the UK ICO, or your local supervisory authority

To exercise any of these rights, email [email protected]. We respond within 10 business days.