Effective Date: June 1st, 2024

Canyera is committed to protecting the privacy and security of your personal information. This Privacy Act Statement outlines our practices and your rights regarding any personal information we collect when you engage with us for cybersecurity governance, risk, and compliance assessments.

Information We Collect

We collect information that you provide to us directly, such as your name, contact information, and details related to your cybersecurity needs. Additionally, we may gather data from your interaction with our services through digital means, which helps us tailor and improve our offerings.

Use of Information

The information we collect is used to:

• Conduct and manage our assessments effectively.

• Communicate with you regarding your cybersecurity needs and our services.

• Enhance our services and develop new solutions.

• Comply with applicable legal and regulatory requirements.

Sharing of Information

Canyera does not sell, rent, or lease your personal information. We may share your information with trusted third-party service providers as necessary to provide our services. These providers are contractually obligated to keep your information confidential and secure.

Data Security

We employ industry-standard security measures to protect your information from unauthorized access, alteration, or destruction. Our security practices include, but are not limited to, encryption, access controls, secure storage, and privacy training for our employees.

Your Rights

You have the right to:

• Access the personal information we hold about you.

• Request correction of any inaccurate information.

• Request deletion of your personal information, subject to certain exceptions prescribed by law.

• Object to or restrict the processing of your information.

• Request the transfer of your information to another service provider.

• To exercise these rights, please contact us at info@canyera.com.

Changes to This Privacy Statement

We may update this Privacy Statement periodically to reflect changes in our practices or applicable regulations. We will post any changes on our website with an updated effective date.