Privacy Policy

Secure. Sustainable. Responsible.

Integrated security, sustainability, and circular packaging solutions safeguarding information, materials, and communities across Canada.

1. About PULP Canada

PULP Canada is the brand representing an integrated suite of services across information security, data lifecycle management, sustainability, and physical security.

Services are delivered through affiliated legal entities, including Pulp Ltd. and Pulp Shred Ltd., depending on the nature of the engagement. All contractual, legal, and billing obligations remain with the applicable entity providing the service.

2. Our Approach to Privacy

PULP is committed to protecting information responsibly.

We recognize that information exists across both physical and digital environments, and our approach reflects the need to protect it throughout its lifecycle.

3. Scope of Information We Handle

In delivering our services, PULP may collect, access, or process:

  • Business and contact information
  • Operational and service-related data
  • Physical records and documents
  • Digital data within systems, platforms, or environments

This occurs across services including:

  • Secure information destruction
  • Records storage and lifecycle management
  • Cybersecurity and digital services
  • Advisory and operational engagements

4. Information Lifecycle Approach

PULP manages information across its lifecycle, including:

  • Creation and collection
  • Access and use
  • Storage and retention
  • Transmission and processing
  • Secure destruction

Security controls are applied based on risk, sensitivity, and environment.

5. How We Use Information

We use information to:

  • Deliver, operate, and improve services
  • Communicate with clients
  • Maintain security and system integrity
  • Meet legal and regulatory obligations

We do not sell personal or business information.

6. Security Safeguards

PULP applies appropriate safeguards based on the nature of the service, including:

  • Administrative controls
  • Technical protections
  • Physical security measures

7. Shared Responsibility

Security is a shared responsibility.

While PULP implements safeguards, clients remain responsible for:

  • Data classification and usage
  • Internal access controls
  • System configuration and management
  • User behavior and training

Security outcomes depend on both infrastructure and usage.

8. Third Party Providers

PULP may rely on trusted third-party providers and platforms to deliver services, including cybersecurity and cloud-based infrastructure.

These providers operate under their own terms and security controls, and are subject to contractual obligations.

9. Data Location

Information processed by PULP or its partners may be stored or processed in Canada or other jurisdictions, depending on service requirements.

Appropriate safeguards are applied regardless of location.

10. Security Incidents and Response

In the event of a suspected or confirmed security incident, PULP will take reasonable steps to investigate, contain, and address the issue.

Where appropriate or required, affected clients will be notified in a timely manner.

Clients are expected to cooperate where incidents involve their systems or environments.

11. Retention and Destruction

Information is retained only as necessary for operational, contractual, or legal purposes.

Physical and digital information is securely destroyed in accordance with industry practices when no longer required.

12. Limitations

No system or service can guarantee complete protection from all risks, threats, or unauthorized access.

PULP focuses on responsible risk reduction and continuous improvement.

13. Contact

GET STARTED
Ready to Simplify Security & Sustainability?

Partner with PULP to protect information, support sustainability, and strengthen community impact.