Legal · privacy policy
This policy explains how Eds Technology Inc. collects, uses, stores and protects personal information in the course of running its computer integrated systems design practice and its patch room in Edmonton.
Eds Technology Inc. is a computer integrated systems design practice operating a working patch room at 1704 167 St Sw, EDMONTON - T6W 3C5, Canada (CA). The practice designs, builds, dresses, tests and labels integrated systems for client organisations. This policy is published by the company and applies to the website at edstech.lol as well as to the day to day information handling that takes place in and around the patch room.
The developer and operator identity used across this website and in the patch room documents is EDS Tech, and that name appears in correspondence, round sheets and handover records. The legal entity responsible for the information described in this policy is Eds Technology Inc. Where this policy refers to the Company, it means Eds Technology Inc. Where it refers to the Site, it means the website reachable at edstech.lol and any page published under that domain.
The Company is a small practice. That matters for this policy because it shapes the amount of information we hold, the way we hold it and the number of people who can see it. We do not run a marketing department that builds profiles, we do not operate a data broker service and we do not sell information about clients, visitors or suppliers. The information we collect is the information needed to answer a question, prepare a bay plan, keep a working record or meet a legal obligation.
This policy covers personal information that the Company collects about visitors to the Site, prospective clients who contact the room, clients whose systems are built or tested in the bay, suppliers and trade contacts, and individuals who appear incidentally in patch room records. It does not cover information that a client organisation collects and controls independently about its own staff, nor does it cover the practices of third party websites that may be linked from this Site.
Some of the systems we design and test carry business data belonging to clients. That data is handled under separate written agreements and is not the subject of this policy. Our position is straightforward: during an engagement we work on the physical and logical integration of a system, and we do not browse, copy or retain client business data unless the client explicitly asks us to check a specific function and provides written instruction to do so.
If a client or a visitor is located in a jurisdiction that grants additional rights, this policy is applied alongside the law of that jurisdiction. Where local law is stricter than this policy, local law prevails. Where local law is less strict, this policy still sets the standard that the Company chooses to meet.
The categories of personal information the Company may collect are limited and practical. They are grouped below so that a reader can see exactly what is held and why.
We do not ask for sensitive categories of personal information such as health information, biometric identifiers, political opinions or religious beliefs. If a message you send contains that kind of information, we will keep it only for as long as needed to answer the message and will remove it from routine records where it is not necessary.
Most of the personal information the Company holds is given to us directly. A person writes to the room, fills in the enquiry form, telephones the bench or hands over a card at a meeting. In those cases the person chooses what to share and we try to make the choice obvious by keeping forms short and by labelling every field.
Some information is collected automatically when a visitor loads a page on the Site. This is ordinary server logging performed by the hosting provider and is described in more detail in the section on server logs. We do not operate tracking scripts that follow a visitor across other websites, and we do not build advertising profiles.
A small amount of information arrives indirectly. For example, a colleague may introduce a client by email, a supplier may pass on a delivery contact, or a visitor may arrive at the room with someone who is already on the bay. Where information arrives indirectly and we intend to keep it beyond answering the immediate matter, we will tell the person concerned and explain where the information came from.
Every use of personal information by the Company has a stated purpose. We use information to answer enquiries, prepare estimates and bay plans, deliver the rounds described on the services page, keep working records that let a system be maintained, issue invoices, meet bookkeeping and tax obligations, and improve the clarity of our own documentation.
We also use contact details to follow up on an enquiry that has not yet been resolved, to confirm an appointment at the room and to send a closing note at the end of an engagement. If a client asks to be told about a future service or a change in the working calendar, we keep the minimum contact detail needed to do that and nothing more.
We do not use personal information for purposes that are unrelated to the purpose for which it was collected. If a new purpose arises, for example a proposal to publish an anonymised case note about a type of bay, we will ask for permission before using any information that could identify the client.
The Company is established in Canada and handles personal information in line with applicable Canadian privacy law, including the Personal Information Protection and Electronic Documents Act where it applies to commercial activity. Where a client or visitor is located in another country, we also consider the requirements of that country and apply the stricter standard where the two differ.
In practice, processing rests on a small number of foundations. We process information to take steps at the request of a person before entering a contract, to perform a contract once it exists, to comply with legal obligations such as tax and record keeping, and to pursue legitimate interests in running a safe and well documented practice. Where consent is the appropriate foundation, for example for an optional newsletter, we ask for it clearly and record when it was given.
Consent can be withdrawn at any time by contacting the room. Withdrawal does not affect processing that took place before the withdrawal, and it does not affect processing that relies on another foundation, such as the retention of an invoice that tax law requires us to keep.
The enquiry form on the contact page does not transmit data to a server owned by the Company. It assembles the message in your own email application and addresses it to help@edstech.lol. When you press the send button in that application, the message travels through your email provider and ours in the ordinary way, and a copy is retained in our mailbox.
Because the form works through your email application, the information you enter is visible to that application and to your email provider before it reaches us. You should treat an enquiry as you would treat any other email. Please do not send passwords, access codes or client business data through the enquiry form. If a technical discussion requires sensitive detail, we will arrange a call or a visit to the room instead.
Emails received at the room are read by the people who need to answer them and are filed alongside the engagement record they relate to. Emails that do not lead to an engagement are kept for a limited period and then removed in the ordinary course of mailbox maintenance.
The Site is served by a hosting provider that records standard request information. Each request may produce a log entry containing the internet protocol address of the visitor, the date and time, the page requested, the browser and operating system reported by the visitor, the referring page and the response code returned by the server.
These logs are used to keep the Site available, to diagnose faults, to defend against abusive traffic and to understand in aggregate which pages are used. They are not used to build profiles of individual visitors and they are not combined with the identity of a person who has written to the room unless there is a security incident that requires investigation.
Log retention is controlled by the hosting provider and is kept to the shortest period that supports availability and security. Where the provider offers a way to reduce the retention of logs, the Company uses it. Where a visitor wishes to know more about hosting arrangements, the contact details at the end of this policy can be used to ask.
The patch room produces a written record for every engagement. Those records are the working memory of the practice and they often contain the names of client staff, the names of systems, the physical layout of a bay and notes about who performed which round. We keep them because a system that cannot be explained cannot be maintained, and because the next technician deserves to know what the last technician found.
Client records are stored in a controlled area of the Company file system and are available only to people working on the engagement. They are not used for advertising, they are not shared with other clients and they are not published without written permission. Where a record contains information about a client staff member who has since left the organisation, the record remains because it describes work performed, but the personal details are reduced where they are no longer needed to understand the work.
Where a client asks us to work on a system that contains regulated or sensitive business data, we agree in writing how that data will be handled before any work begins. This typically means that the data is masked, isolated or left untouched while we work on the surrounding integration, and it means that no copy of the data is taken into our own records.
Like most small practices, the Company relies on a small number of service providers. A hosting provider serves this Site and keeps request logs. An email provider carries correspondence with clients and suppliers. An accounting provider prepares invoices and keeps financial records. A payment provider processes card payments where card payment is used.
Each provider is chosen with care and is asked to handle information only for the purpose for which it was engaged. Where a provider processes information in another country, the transfer is described in the section on international transfers. Where a provider suffers an incident that affects Company information, the provider is expected to notify us promptly and to cooperate with the response.
The Company does not permit a provider to use client information for the provider own marketing. Where a provider offers optional features that would extend the use of information, those features are declined unless a client has specifically asked for them.
Retention periods are set by the purpose of the information and by the obligations that apply to the practice. The table below describes the general approach rather than a fixed schedule for every record, because the size and nature of an engagement varies.
When a retention period ends, information is deleted or, where it is embedded in a larger record that must be kept, reduced so that it no longer identifies an individual. Backups are cycled on a schedule, and deleted information leaves the backup cycle in the ordinary course.
The Company applies technical and organisational measures that are proportionate to the information it holds. Access to client records is limited to the people working on an engagement. Accounts are protected by strong passwords, and administrative access to systems is reviewed periodically. Devices used in the room are kept updated and are locked when left unattended.
Physical security matters as much as digital security in a patch room. Paper bay plans and signed test sheets are stored in a locked cabinet when the room is closed, and the room itself is locked outside working hours. Visitors are signed in and accompanied while a loom is open. These measures protect both the equipment on the bay and the records that describe it.
No system can be perfectly secure, and the Company does not claim otherwise. What we can promise is that security is treated as a working discipline rather than a slogan. When a weakness is found, it is recorded and fixed. When an incident occurs, it is investigated and reported as described in the section on breach notification.
The Site and the services described on it are intended for organisations and adult professionals. The Company does not knowingly collect personal information from children under the age of thirteen. The enquiry form is not designed for use by children, and the patch room is a working technical space that is not open to the public without an appointment.
If a child visits the Site and sends a message, and the Company becomes aware that the message came from a child under thirteen, the message and the associated contact details will be deleted promptly, unless retention is required for a safety reason. A parent or guardian who believes that a child has provided information to the Company can contact the room and ask for its removal.
Young people who are old enough to work and who join a client organisation may appear in engagement records as client staff. In that case the record is kept for the same reason as any other working record, and the protections in this policy apply without exception.
Subject to the law that applies, a person may ask the Company to confirm whether their personal information is held, to provide a copy of it, to correct it where it is inaccurate or incomplete, and to delete it where there is no continuing reason to keep it. A person may also object to a particular use, ask for a use to be restricted, or withdraw a consent that was given earlier.
These rights are not absolute. A request to delete a financial record cannot override the requirement to keep it for tax purposes, and a request to delete an engagement record may be declined where the record is needed to maintain a system that the client still relies on. When a request cannot be fully met, the Company will explain why and will do what it can within the limits of the obligation.
Requests can be made by email or by telephone using the contact details at the end of this policy. To protect the information, the Company may ask for enough detail to confirm that the request comes from the right person. That verification step is kept as light as the circumstances allow and does not require a fee in ordinary cases.
An access request should describe the information sought and the period to which it relates, so that the search can be targeted. The Company aims to respond within thirty days of a completed request. Where a search is complex, for example where it spans several engagements and several years, the Company will acknowledge the request, explain the extra time needed and keep the person informed until the response is issued.
A correction request should identify the information that is wrong and state what it should say. Where the correction is straightforward, such as a misspelled name or an outdated telephone number, the record is corrected and the change is confirmed. Where the request concerns a judgement about work performed, the Company may record the disagreement alongside the original entry rather than rewrite history, because a test sheet is a record of what was found at the time.
If a request is refused, in whole or in part, the response will explain the reason and point to the section of this policy or the provision of law on which the refusal rests. A person who is not satisfied with the response can complain as described in the section on complaints.
The Company operates from Edmonton in Canada. Some service providers, including hosting and email providers, may store or process information outside Canada. Where that happens, the information remains protected by this policy and by the written terms agreed with the provider, and the Company takes reasonable steps to confirm that the provider maintains appropriate safeguards.
A client or visitor who is located outside Canada should understand that a message sent to the room will cross borders in the ordinary course of email. If a transfer is not acceptable for a particular matter, please tell us before sending information so that an alternative method can be arranged, such as a telephone call or an in person discussion at the room.
Where the law of a client jurisdiction requires a specific transfer mechanism, the Company will work with the client to put that mechanism in place for the engagement. This is usually arranged through the written agreement that already governs the work.
The Site may contain links to websites operated by other organisations, including suppliers and professional bodies. Those websites have their own privacy policies, and the Company does not control how they collect or use information. A link is not an endorsement of the privacy practices of the destination, and a visitor who follows a link should read the policy of the site they reach.
Where the Company embeds content from another service, such as a map or a video, the embedded service may receive technical information about the visitor, including the internet protocol address and the referring page. The Company keeps embedded content to a minimum and does not embed advertising or behavioural tracking services.
A request to remove a link or to correct a description of another organisation will be considered promptly. The Company prefers to be accurate rather than to be exhaustive, and it would rather remove a questionable link than defend it.
The Company does not make automated decisions that produce legal effects or similarly significant effects for an individual. Enquiries are read by a person, estimates are prepared by a person and engagements are agreed between people. The Site does not contain a chatbot that answers with binding information, and it does not score visitors or rank them for marketing.
Simple automation exists in the ordinary sense: an email client files a message, a form prepares a draft and a clock records the time a round was opened. Those helpers do not decide anything about a person. If automation of a meaningful kind is introduced in the future, this policy will be updated to explain the logic, the significance and the safeguards before the automation begins to operate.
The Company does not run mass marketing campaigns and does not buy contact lists. If you ask to be told about future services, a change in the working calendar or the availability of a particular round, we will keep the contact detail you provide and use it only for that purpose.
Every person who receives an optional message from the Company can stop it by replying to the message or by writing to help@edstech.lol. A request to stop is actioned promptly, and no further optional message is sent after it. Transactional messages connected to an active engagement, such as a confirmation of a visit or a closing note, are not marketing and continue while the engagement is live.
We do not use tracking pixels in email, we do not tell whether a message was opened and we do not attach images that report back when they are displayed. A message from the room should look like a message from a person, because that is what it is.
If the Company becomes aware of a breach of security that creates a real risk of significant harm to an individual, it will act quickly. The first steps are to contain the breach, to preserve evidence, to assess which information was affected and to decide whether notification is required by law.
Where notification is required, affected individuals will be told what happened, what information was involved, what the Company has done and what a person can do to reduce the risk. The appropriate supervisory authority will be notified where the law requires it. The Company will not delay notification in order to protect its reputation.
After the immediate response, the incident is reviewed and the cause is addressed. A breach review names the weakness that allowed the incident, the change made to remove it and the date by which the change was verified. That review is recorded with the same seriousness as a failing circuit on a test day.
This policy is reviewed at least once a year and whenever the practice changes in a way that affects information handling, for example when a new provider is engaged or a new service is added. The effective date and version number at the top of the page are updated with every revision so that a reader can tell which version is in force.
Material changes are communicated to active clients by email before the change takes effect where that is practical. A change that affects the basis for processing is never applied silently. Where a change requires a new consent, the consent is requested before the new processing begins.
Older versions are kept with the engagement records so that a person can see what the policy said at the time their information was collected. A copy of an older version can be requested using the contact details below.
The Company prefers to resolve a concern directly. If you believe that your personal information has been mishandled, please write to help@edstech.lol with enough detail to understand the matter, including any relevant dates. The Company will acknowledge the concern, investigate it and reply with a written explanation of what was found and what will change.
If you are not satisfied with the response, you have the right to complain to the privacy authority that applies in your jurisdiction. In Canada, that is the Office of the Privacy Commissioner, which accepts complaints from individuals about organisations subject to federal privacy law. The Company will cooperate with any review and will provide the records that the authority needs.
A complaint is treated as useful information, not as an attack. The patch room keeps a record of each complaint, the response given and any change made as a result, so that the same matter is less likely to arise twice.
Privacy questions, access requests, correction requests and complaints can all be sent to the room using the following details. Please mark the subject of the message clearly so that the request reaches the right person.
Eds Technology Inc.
1704 167 St Sw, EDMONTON - T6W 3C5, Canada (CA)
Email: help@edstech.lol
Telephone: +13094354587
The practice is open Monday to Friday from 08:00 to 17:30 and on Saturday from 09:00 to 13:00 by appointment. Messages received outside those hours are read at the start of the next working day. If a matter is urgent and relates to an active engagement, please say so in the subject line and telephone the room as well.
This policy is published by Eds Technology Inc. and applies to the patch room practice and to the Site. It was last reviewed on 1 November 2026.