Privacy Policy

Who we are

Fortium Group is the operating name of 1000538650 Ontario Inc., a recruiting firm based in Ontario, Canada, placing Cyber Security and AI Security professionals ("we", "us"). We are responsible for the personal information we collect, including information submitted through this website, under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). Contact us about anything in this policy at info@fortiumgroup.co.

Our Privacy Officer is accountable for our compliance with this policy and can be reached at info@fortiumgroup.co.

What we collect

• Information you submit through our forms: your name, email address, and message, plus — depending on the form — your current title, LinkedIn or portfolio link, the role you are hiring for, and hiring urgency.
• Information you share later in the process: for candidates, this may include your résumé, career history, compensation expectations, and references you authorize us to contact.
• Technical data: our hosting provider receives standard request data such as your IP address and browser type when you load the site. Fonts are served from this site itself, not a third party. We do not run analytics, advertising, or tracking cookies.
• Local preferences: your light/dark theme choice is stored in your own browser (localStorage). It never leaves your device.

How we use it

• To reply to your inquiry and schedule conversations.
• For candidates: to assess fit and, only with your explicit consent for each opportunity, to introduce you to a hiring company.
• For employers: to understand and deliver your search.
• To meet legal, accounting, and record-keeping obligations.

We collect, use, and disclose personal information only with your consent, or where the law permits it without consent. Where GDPR or UK GDPR applies, our legal bases are your consent, steps taken at your request before entering into an engagement, and our legitimate interest in running a recruiting business. We never sell your personal information, and we never use it for automated decision-making or profiling.

Who we share it with

• Hiring companies — candidate details are shared only after you approve a specific introduction.
• Formspree — processes website form submissions and delivers them to us by email.
• GitHub Pages — hosts this website.
• Microsoft 365 — our company email and file storage.
• Our recruiting software — an applicant tracking system and an email outreach tool that store candidate and client records.
• Authorities — only where required by law.

Some of these providers are located in the United States or other countries, so your information may be stored and processed outside Canada and may be accessible to courts, law enforcement, and national security authorities there. Where GDPR or UK GDPR applies, transfers rely on appropriate safeguards such as Standard Contractual Clauses.

How long we keep it

Candidate profiles are kept for up to 24 months after our last contact so we can tell you about relevant new roles, then deleted. Inquiries that do not lead to an engagement are deleted once they are resolved. You can ask us to delete your information sooner at any time.

How we protect it

All traffic to this site and to our form provider is encrypted in transit (HTTPS/TLS). Access to candidate and client information is limited to the people working on your search.

Your rights

Under PIPEDA, you have the right to access the personal information we hold about you, ask us to correct it, and withdraw your consent, subject to legal or contractual limits. Depending on where you live (for example under the GDPR, UK GDPR, or California CCPA/CPRA), you may have additional rights, including to:

• access the personal information we hold about you;
• correct or update it;
• have it deleted;
• withdraw consent or object to processing;
• receive a portable copy;
• complain to your local data protection authority — in Canada, the Office of the Privacy Commissioner of Canada (priv.gc.ca).

To exercise any of these, email info@fortiumgroup.co. We respond within 30 days and will never discriminate against you for exercising a right.

Children

This site and our services are intended for working professionals and are not directed at anyone under 16.

Changes

If we change this policy, we will update the date at the top of this page. Questions? Get in touch.