Privacy Policy

How Pho Hai Phat Inc. collects, uses, and protects your information

Effective Date: July 21, 2026  |  Last Updated: July 21, 2026

1. Introduction and Scope

This Privacy Policy describes how Pho Hai Phat Inc., a Canadian corporation headquartered at 33 Marlington Crescent, TORONTO - M3L 1K3, Canada, collects, uses, processes, stores, shares, and protects information obtained from visitors, clients, and users of our website at https://www.phohaiphat.autos and any associated services, products, applications, or platforms that reference this policy.

By accessing or using our website and services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, you should discontinue use of our website and services immediately.

This policy applies to all information collected through our website, email communications, telephone interactions, in-person consultations, service delivery processes, and any other interaction you may have with Pho Hai Phat Inc. It also applies to information we may receive from third-party sources, business partners, and publicly available databases, to the extent such information is combined with data we collect directly from you.

Pho Hai Phat Inc. is committed to complying with applicable privacy laws and regulations, including but not limited to the Personal Information Protection and Electronic Documents Act of Canada, provincial privacy legislation in Ontario, and where applicable, international frameworks such as the General Data Protection Regulation for individuals located in the European Economic Area and the United Kingdom.

Our services fall within the Computer Systems Design and Related Services industry under NAICS code 541512, which is part of the broader Professional, Scientific, and Technical Services sector. This sector classification includes industries such as Accounting, Tax Preparation, Bookkeeping, and Payroll Services; Advertising, Public Relations, and Related Services; Architectural, Engineering, and Related Services; Legal Services; Management, Scientific, and Technical Consulting Services; Other Professional, Scientific, and Technical Services; Scientific Research and Development Services; and Specialized Design Services.

2. About the Developer

This website and its associated services are developed, owned, and operated by Pho Hai Phat. The corporate entity responsible for data processing is Pho Hai Phat Inc., a legally incorporated business registered in Canada.

Pho Hai Phat Inc. serves as both the developer of this website and the data controller for any personal information processed through it. Our principal place of business is located at 33 Marlington Crescent, TORONTO - M3L 1K3, Canada. All inquiries regarding data protection, privacy practices, or this policy should be directed to our contact channels as listed in the Contact Information section below.

3. Information We Collect

3.1 Personal Information You Provide Directly

We collect information that you voluntarily provide when you interact with us. This includes information submitted through contact forms on our website, email communications sent to any @phohaiphat.autos address, telephone inquiries to our published phone number, in-person meetings at our Toronto office, and any documents or materials you share during consulting engagements. The types of personal information we may collect include your full name, company name and job title, email address, telephone number, mailing or physical address including postal code, billing and payment information for contracted services, and any other information you choose to include in your communications with us.

3.2 Information Collected Automatically

When you visit our website, certain information is collected automatically through standard web technologies. This includes your Internet Protocol address and derived geographic location, browser type and version, operating system and device type, referring website URL and exit pages, pages visited on our site and the time spent on each page, date and time stamps of your visits, and clickstream data showing your navigation path through the site.

3.3 Client Engagement Information

For clients who enter into a service agreement with us, we collect additional information necessary to perform our professional services. This may include system architecture diagrams, network configuration details, access credentials managed under strict security protocols, documentation related to your existing IT infrastructure, project requirements and specifications, communications history including emails, meeting notes, and project updates, and deliverables produced during the engagement.

3.4 Information from Third Parties

We may receive supplementary information about you from publicly available sources such as corporate registries, professional networking platforms, and business databases. We may also receive information shared with us by our business partners, referral sources, and service providers, provided such sharing is compliant with applicable data protection laws.

4. How We Collect Information

We employ several methods to collect information, all designed to be transparent and proportionate to our legitimate business needs. Direct collection occurs when you fill out a contact form, send us an email, call our office, schedule a consultation, enter into a service agreement, or provide information during project delivery. Automated collection occurs through the use of server logs, analytics platforms, cookies, web beacons, and similar tracking technologies that operate in the background during your website visit. Third-party collection occurs when we receive information from referral partners, business directories, public records, or other sources as permitted by applicable law.

5. How We Use Your Information

Pho Hai Phat Inc. uses the information we collect for the following purposes, each grounded in a lawful basis under applicable privacy legislation.

5.1 Service Delivery

We use client information to provide the computer systems design, IT consulting, technical support, cloud infrastructure, cybersecurity, and system integration services for which we have been engaged. This includes conducting initial assessments and discovery, developing project proposals and scopes of work, executing agreed-upon deliverables, providing ongoing support and maintenance, and communicating project status, milestones, and technical recommendations.

5.2 Business Operations

We process information as necessary to operate our business, including invoicing and payment processing, maintaining corporate and financial records, managing client relationships and service histories, improving our service offerings based on client feedback and usage patterns, training and quality assurance, and fulfilling our legal and regulatory obligations under Canadian law.

5.3 Communication

We use your contact information to respond to your inquiries and service requests, send administrative messages related to your account or services, provide technical alerts and updates relevant to your infrastructure, send occasional informational newsletters if you have opted in, and notify you of changes to our terms, policies, or service offerings.

5.4 Website Analytics and Improvement

We analyze aggregated and anonymized usage data to understand how visitors interact with our website, identify technical issues or performance problems, improve website content, navigation, and user experience, and develop new features and services based on observed demand patterns.

5.5 Legal and Security

We may use information to detect, prevent, and investigate fraudulent or illegal activities, protect the rights, property, and safety of Pho Hai Phat Inc., our clients, and the public, comply with applicable laws, regulations, legal processes, or enforceable governmental requests, and enforce our Terms of Service and other contractual agreements.

6. Information Sharing and Disclosure

Pho Hai Phat Inc. does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share information only in the following limited circumstances.

6.1 Service Providers

We engage trusted third-party companies and individuals to perform functions on our behalf, such as website hosting, email delivery, payment processing, cloud infrastructure provisioning, data analytics, and customer relationship management. These service providers have access only to the information necessary to perform their specific functions and are contractually obligated to maintain the confidentiality and security of that information, to process it only in accordance with our instructions, and to comply with applicable data protection laws.

6.2 Business Transfers

If Pho Hai Phat Inc. is involved in a merger, acquisition, reorganization, sale of assets, or bankruptcy proceeding, your information may be transferred as part of that transaction. We will notify you via our website or direct communication before your information becomes subject to a different privacy policy.

6.3 Legal Compliance

We may disclose your information when we believe in good faith that such disclosure is necessary to comply with a legal obligation, respond to a valid legal request such as a court order, subpoena, or search warrant, protect the security or integrity of our services, protect our rights, property, or safety or those of our clients or the public, and investigate or defend against third-party claims or allegations.

6.4 With Your Consent

We may share your information for any other purpose with your explicit, informed consent obtained at the time of sharing.

6.5 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you for research, marketing, analytics, and other lawful business purposes.

7. Cookies and Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work more efficiently and to provide information to the site owners. Cookies may be session-based, meaning they are deleted when you close your browser, or persistent, meaning they remain on your device for a set period or until you manually delete them.

7.2 Types of Cookies We Use

Essential cookies are necessary for the basic functioning of our website, including security features, load balancing, and session management. These cookies do not require your consent under most privacy regulations because the website cannot function properly without them. Analytics cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. We use this data to improve site performance, identify popular content, and optimize the user experience. The information collected includes pages visited, time spent, browser type, referring source, and geographic region at the country or city level. Functional cookies enable enhanced features such as remembering your language preferences. These cookies are non-essential but improve your browsing experience. We do not currently deploy advertising or targeting cookies that track your browsing activity across third-party websites for the purpose of serving targeted advertisements.

7.3 Managing Cookies

Most web browsers allow you to manage cookie preferences through their settings. You can typically configure your browser to accept all cookies, reject all cookies, notify you when a cookie is being sent, or delete cookies that have already been set. Please note that disabling essential cookies may affect the functionality of our website, and some features may become unavailable.

7.4 Other Tracking Technologies

In addition to cookies, we may use web beacons, also known as clear GIFs or pixel tags, which are tiny graphic images embedded in web pages and emails. These technologies help us understand whether you have accessed certain content, opened an email, or visited a particular page. Server logs automatically record information sent by your browser each time you request a page from our website, including your IP address, request date and time, page URL, HTTP status code, bytes served, user agent string, and referring page.

8. Data Security

Pho Hai Phat Inc. takes the security of your personal information seriously and implements administrative, technical, and physical safeguards designed to protect against unauthorized access, disclosure, alteration, or destruction of the information we collect and maintain.

8.1 Technical Measures

Our technical safeguards include Transport Layer Security encryption for all data transmitted between your browser and our servers, encryption at rest for stored personal data using industry-standard algorithms, firewall protection and intrusion detection and prevention systems, regular vulnerability scanning and penetration testing, secure authentication mechanisms including multi-factor authentication for administrative access, principle of least privilege applied to all system access controls, and automated monitoring and alerting for suspicious activity.

8.2 Administrative Measures

We maintain written information security policies that are reviewed and updated regularly. All employees and contractors with access to personal information receive privacy and security training. Access to personal information is restricted to personnel who have a legitimate business need to process it. We conduct periodic risk assessments and audits of our data handling practices. Vendor due diligence is performed for all third-party service providers who may have access to personal data.

8.3 Physical Measures

Our physical office at 33 Marlington Crescent, TORONTO - M3L 1K3 employs access controls, secure storage for physical documents, and visitor management procedures. Servers and infrastructure components are housed in secure data center facilities with restricted access and 24/7 surveillance.

8.4 Breach Notification

In the event of a data breach involving personal information, we will investigate promptly and take remedial action. If the breach poses a real risk of significant harm to individuals, we will notify affected individuals and the relevant regulatory authorities in accordance with the timelines and requirements prescribed by applicable law, including mandatory breach notification obligations under PIPEDA.

8.5 Your Role in Security

While we implement robust security measures, no method of transmission over the Internet or electronic storage is completely secure. You also play a critical role in protecting your information by using strong passwords, keeping your credentials confidential, and promptly notifying us of any suspected unauthorized access to your accounts or systems.

9. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required or permitted by applicable law. The specific retention period depends on the nature of the information and the purpose of its collection.

Client project files and deliverables are retained for the duration of the client relationship plus a period of seven years following project completion to address any post-delivery questions, warranty claims, or legal obligations. Communications including emails and meeting notes are retained for the duration of the client relationship plus three years for reference and continuity. Website analytics data is retained in aggregate form indefinitely for trend analysis, with individual session data anonymized after 26 months. Financial and billing records are retained for the period required by Canadian tax and corporate law, generally seven years from the end of the relevant tax year. Inactive contact information from individuals who have not engaged with us is periodically reviewed and may be deleted after 24 months of inactivity.

10. Your Rights and Choices

Depending on your jurisdiction and subject to applicable legal exceptions, you may have certain rights regarding your personal information.

10.1 Access and Portability

You have the right to request confirmation of whether we process your personal information and, if so, to obtain a copy of that information in a structured, commonly used, and machine-readable format. We will provide this information within the timeframes prescribed by applicable law, typically 30 calendar days from the date we receive and verify your request.

10.2 Correction

You have the right to request that we correct inaccurate or incomplete personal information we hold about you. Upon receiving a verified request, we will make the necessary corrections and notify any third parties to whom we have disclosed the information, where required by law.

10.3 Deletion

You have the right to request deletion of your personal information under certain circumstances, such as when the information is no longer necessary for the purposes for which it was collected, when you withdraw consent and there is no other legal basis for processing, or when the information has been unlawfully processed. We will honor such requests unless retention is required by law or necessary for the establishment, exercise, or defense of legal claims.

10.4 Restriction and Objection

You may have the right to request that we restrict the processing of your personal information in certain situations, such as when you contest the accuracy of the data or object to processing based on legitimate interests. You may also have the right to object to processing for direct marketing purposes, which we will honor unconditionally.

10.5 Withdrawal of Consent

Where we process your personal information based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. To withdraw consent, please contact us using the information provided in the Contact Information section.

10.6 Exercising Your Rights

To exercise any of these rights, please contact us at contact@phohaiphat.autos or call +13158464810. We may need to verify your identity before processing your request, which may require you to provide sufficient information to allow us to confirm that you are the individual about whom we hold personal information. We will respond to your request within the timeframe required by applicable law. If we need additional time, we will inform you of the reason and the extension period.

10.7 Complaints

If you believe that we have not adequately addressed your privacy concerns, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca, or with the relevant provincial privacy authority in your jurisdiction.

11. Childrens Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect, use, or disclose personal information from children. If we become aware that we have inadvertently collected personal information from a child without appropriate parental consent, we will take prompt steps to delete that information from our systems. If you are a parent or guardian and you believe your child has provided us with personal information, please contact us immediately so we can take appropriate action.

12. International Data Transfers

Pho Hai Phat Inc. is headquartered in Canada, and your information may be stored and processed on servers located in Canada, the United States, or other countries where our service providers maintain facilities. When we transfer personal information across international borders, we take appropriate safeguards to ensure that the receiving jurisdiction provides a comparable level of data protection.

For transfers to countries that have not been recognized as providing an adequate level of data protection, we implement supplementary measures such as standard contractual clauses, binding corporate rules, or other lawful transfer mechanisms approved by relevant regulatory authorities. By using our services, you consent to the transfer of your information to countries outside your country of residence, including Canada and the United States, which may have data protection rules that differ from those in your country.

13. Third-Party Services and Links

Our website may contain links to third-party websites, plugins, and applications that are not owned or controlled by Pho Hai Phat Inc. Clicking on these links or enabling these connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices or content.

When you leave our website, we encourage you to read the privacy policy of every website you visit. The inclusion of a link on our website does not imply endorsement of the linked site or its privacy practices by Pho Hai Phat Inc. Your interactions with third-party services are governed by the privacy policies of those third parties, not by this Privacy Policy.

14. Changes to This Privacy Policy

Pho Hai Phat Inc. reserves the right to update or modify this Privacy Policy at any time and from time to time in our sole discretion. When we make material changes, we will revise the Effective Date at the top of this page and may provide additional notice as appropriate under the circumstances, such as by posting a prominent notice on our website homepage or sending a direct communication to clients with active service relationships.

We encourage you to review this Privacy Policy periodically to stay informed about our information practices. Your continued use of our website and services after any changes to this Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with the revised terms, you should discontinue using our services and may close any active account you maintain with us.

15. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us using the following channels:

Data Controller: Pho Hai Phat Inc.
Address: 33 Marlington Crescent, TORONTO - M3L 1K3, Canada (CA)
Email: contact@phohaiphat.autos
Phone: +13158464810
Website: https://www.phohaiphat.autos

We aim to acknowledge all privacy-related inquiries within 5 business days and to provide a substantive response within 30 calendar days. For urgent matters concerning data security, please call our office directly at the phone number listed above.