Last Updated: November 20, 2025
Xanadu Technologies Ltd. (“Xanadu,” “we,” “our,” or “us”) is committed to protecting the privacy, confidentiality, and security of personal information entrusted to us. This Privacy Policy describes how we collect, use, disclose, store, and safeguard personal information in connection with our IT consulting, cloud architecture, systems integration, and software development services.
1. Scope of This Policy
This Privacy Policy applies to:
- Information collected through our website and digital platforms
- Information provided by clients during consulting engagements
- Information processed in connection with cloud, analytics, and integration solutions
- Communications, inquiries, proposals, and contracting activities
This policy does not apply to third-party services that we integrate with or recommend. In such cases, their respective privacy policies govern their data handling practices.
2. Information We Collect
We collect only the information necessary to deliver our services effectively and securely.
2.1 Information Provided Directly by Clients
- Contact details (name, email, phone number)
- Business information (company name, role, project requirements)
- Technical documentation, architecture diagrams, integration requirements
- Project and support communications
2.2 Automatically Collected Information
When using our website or cloud-hosted tools, we may collect:
- IP address
- Browser type and device identifiers
- Usage logs and analytics
- Access timestamps This data is used to improve system security, performance, and usability.
2.3 Information Processed on Behalf of Clients
In our role as an IT consulting and systems-integration provider, we may process:
- Application data
- Cloud infrastructure metadata
- Configuration files and API definitions
- Non-production data provided for testing or analysis
We do not require or request end-user personal information unless explicitly needed and contractually authorized.
3. How We Use Personal Information
We use personal information for the following purposes:
- Delivering IT consulting, architecture, and systems-integration services
- Responding to inquiries, proposals, and support requests
- Project execution, documentation, and communication
- Securing and maintaining cloud environments and development platforms
- Improving our services, methodologies, and technical solutions
- Fulfilling legal, regulatory, and contractual obligations
We do not sell personal information.
4. Legal Basis for Processing (Applicable to GDPR Regions)
When applicable, Xanadu processes personal information under the following legal bases:
- Contractual necessity: to deliver requested services
- Legitimate interests: improving services, infrastructure security
- Consent: when voluntarily provided for communication
- Compliance: meeting legal or regulatory requirements
5. Data Sharing and Disclosure
Xanadu limits data disclosure to what is necessary for service delivery and support.
We may share information with:
- Cloud providers (AWS, Azure, Oracle, IBM)
- Integration platforms (e.g., MuleSoft)
- Subcontractors or partner consulting firms under NDA
- Legal or regulatory bodies when required by law
All third-party partners are bound by confidentiality and data-protection agreements.
We do not share data with advertisers, data brokers, or unrelated third parties.
6. Data Retention
We retain personal information only for:
- The duration of service delivery, and
- Any legally required retention periods
Documentation and project artifacts may be securely archived for internal reference unless a client requests deletion.
7. Data Security
Xanadu implements administrative, technical, and physical safeguards appropriate for IT consulting environments, including:
- Secure cloud-hosting practices
- Encryption of data in transit and at rest
- Role-based access control
- Multi-factor authentication
- Regular security reviews, patching, and vulnerability mitigation
No system is fully immune to risk; however, we maintain industry-standard protections.
8. International Data Transfers
Where applicable, data may be processed in cloud regions selected by clients (e.g., Canada, US, EU).
Xanadu complies with cross-border data-transfer requirements, including contractual clauses and region-specific regulations.
9. Your Rights
Depending on jurisdiction, individuals may have rights to:
- Access personal information
- Correct inaccuracies
- Request deletion
- Withdraw consent
- Restrict processing
- Lodge complaints with relevant authorities
Requests can be made by contacting us at the address below.
10. Cookies and Tracking
Our website may use cookies and analytics tools to improve performance.
Users may adjust browser settings to decline cookies without affecting access.
11. Links to Third-Party Websites
Our site or documentation may include links to external services.
We are not responsible for the privacy practices of those organizations.
12. Changes to This Policy
We may update this policy periodically to reflect changes in practices, regulations, or services.
Revisions will be posted with an updated “Last Updated” date.
13. Contact Information
For questions, requests, or privacy-related concerns, contact:
Xanadu Technologies Ltd.
Email: mlebedinski@xanadu-technologies.com
Address: 506-827 Fairfield Rd. Victoria BC, V8V 5B2, Canada
Attention: Michael Lebedinski