PRIVACY POLICY Effective Date: September, 2026

1. Introduction & B2B Scope

Sigma Cor Inc. ("we," "our," or "us") is committed to protecting the privacy and security of your personal and corporate information. This Privacy Policy governs the collection, use, and disclosure of data when you visit our website (www.sigmacor.net) and utilize our enterprise consulting, auditing, and implementation services.

B2B Context: Sigma Cor Inc. operates strictly in the Business-to-Business (B2B) sector. Our website and services are intended for corporate executives, managers, and enterprise representatives. We do not target or intentionally collect data from individual consumers or minors.

This policy complies with the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA) and applies international standards aligned with the General Data Protection Regulation (GDPR) for our EU and UK clients.

2. Information We Collect

We only collect information that is strictly necessary to deliver our consulting services and facilitate business operations.

  • Identity & Contact Data: First name, last name, corporate title, business email address, and direct business phone numbers.

  • Corporate Intake Data: Facility addresses, headcount, current certification status, and high-level operational pain points submitted through our scheduling or triage forms.

  • Financial & Transaction Data: Billing addresses and payment histories. We use third-party enterprise payment processors (e.g., Stripe) to handle all transactions. We do not collect, process, or store raw credit card numbers or bank routing data on our internal servers.

  • Technical & Usage Data: IP addresses, browser types, time zone settings, and operating systems collected automatically via website analytics to optimize site performance.

3. How We Collect Information

We collect data through the following direct and automated channels:

  • Direct Interactions: When you book a Discovery Call, submit a facility intake form, sign an SOW, or correspond with us via email or the SuiteDash Client Portal.

  • Automated Technologies: Through standard cookies and web beacons utilized by our website hosting provider (Squarespace) to monitor site traffic.

4. How We Use Your Information

Your data is never used for consumer-grade marketing or sold to data brokers. We use your information exclusively to:

  • Qualify leads and prepare for initial Discovery Calls.

  • Deliver the consulting, auditing, and QMS implementation services outlined in your executed Statement of Work (SOW).

  • Manage client relationships, including billing, invoicing, and Kanban portal administration.

  • Comply with legal, tax, and accounting obligations under Canadian and international law.

5. Information Sharing & Disclosure

We enforce a strict policy of confidentiality. We do not sell, rent, or trade your personal or corporate data. We only share information under the following circumstances:

  • Vetted Sub-Contractors: We may share necessary operational data with Exemplar Global-certified sub-contractors (e.g., Lead Auditors) retained by Sigma Cor Inc. All sub-contractors are bound by strict, legally enforceable NDAs.

  • Essential Service Providers: We utilize enterprise-grade SaaS providers to operate our business, including Google Workspace, SuiteDash, and Stripe. These processors are contractually obligated to protect your data.

  • Legal Compliance: We may disclose information if legally required to do so by a court of competent jurisdiction, or to protect the rights, property, and safety of Sigma Cor Inc. or our clients.

6. Security Disclaimer & Limitation of Liability

We employ enterprise-grade security protocols to protect your data from unauthorized access or disclosure. All proprietary QMS data is vaulted behind encrypted, password-protected client portals.

No Absolute Guarantee: While we use commercially acceptable means to protect your data, no method of transmission over the internet or method of electronic storage is 100% secure. Sigma Cor Inc. cannot and does not guarantee absolute security. By using our website and services, you acknowledge and accept this inherent risk. Sigma Cor Inc. assumes no liability for unauthorized access, data breaches, or cyberattacks that occur outside of our reasonable control, including breaches originating from our third-party SaaS providers.

Client Credential Responsibility: Clients are strictly responsible for safeguarding their login credentials to the Sigma Cor Inc. Client Portal. Sigma Cor Inc. holds no liability for data exposure resulting from compromised client passwords or internal client negligence.

7. Third-Party Links & Integrations

Our website contains links to third-party integrations (e.g., Calendly, Stripe, LinkedIn). Once you leave our website or are redirected to a third-party application, you are no longer governed by this Privacy Policy. We are not responsible for the privacy practices, data collection, or security of these external sites and encourage you to read their respective privacy statements.

8. International Data Transfers

Sigma Cor Inc. is headquartered in Ontario, Canada. If you access our site or services from the United States, the European Union, the United Kingdom, or Mexico, your information will be transferred to and processed in Canada and the United States (where our SaaS servers are located). Canada has been recognized by the European Commission as providing adequate data protection.

9. Your Data Privacy Rights

Depending on your jurisdiction, you hold specific rights regarding your personal data:

  • The right to access the personal data we hold about you.

  • The right to rectification if your data is inaccurate.

  • The right to erasure ("right to be forgotten"), subject to our legal, tax, and contractual retention obligations (typically 7 years for financial records).

  • The right to restrict or object to the processing of your data.

To exercise any of these rights, please contact us. We will respond to all legitimate requests within 30 days.

10. Policy Updates

Sigma Cor Inc. reserves the right to update or modify this Privacy Policy at any time to reflect changes in our legal or operational practices. Any changes will be posted on this page with an updated "Effective Date." Continued use of our website or services following any such changes constitutes your acceptance of the revised policy.

11. Contact Information

If you have any questions about this Privacy Policy or our data handling practices, please contact:

Sigma Cor Inc. Attention: SAM, 8005 Financial Drive, Unit: A4-120 Brampton, ON L6Y 6A1, Canada

Email: sam@sigmacor.net

Website: www.sigmacor.net