Terms of Use
Terms governing use of this website and our engagement services.
Site use
You may browse and download published material for non-commercial reference.
Engagement terms
All engagements operate under a separate Statement of Work. The terms below apply only to website use.
Liability
Information on this site is for general guidance. Contractual obligations live in the SOW.
Governing law
Jurisdiction of the relevant Maxicom legal entity in Canada.
Regulator alignment specific to Canada
This policy is written to align with the regulators that govern engagements in Canada: NIST 800-88 · PIPEDA · OSFI B-13 · NAID-grade · IEEE 2883-2022. Where the policy intersects sector-specific rules (OSFI B-13 for BFSI engagements; PIPEDA for personal-data processing), the more specific rule prevails. The policy is reviewed quarterly by the Maxicom compliance desk and updated within 30 days of any regulator material change. The version date stamp is in the page footer.
Where this policy applies
To the Maxicom Inc. entity contracting in Canada. Cross-jurisdictional engagements (where assets route between Maxicom operating regions) are governed by the SOW jurisdiction clause, which typically points to the contracting entity's jurisdiction. Where customer policy specifies a different jurisdiction (rare but possible), the SOW addendum names the applicable governing law and the dispute-resolution forum.
How to exercise your rights or report a concern
Written request to compliance-ca@maxicom.ca (or via the contact form at https://www.maxicom.ca/contact/). Standard response time: 5 business days for acknowledgement, 30 calendar days for resolution under PIPEDA. Where the matter requires regulator coordination (OSFI B-13 for BFSI; data protection authority for personal-data matters), we escalate per engagement SLA. Confidentiality is preserved throughout.
Document retention and version control
This policy is stored in the Maxicom compliance vault under controlled access. Version history is maintained for the lifetime of operations. Material changes are notified to active customers via the master service agreement notification clause; non-material changes are published to this page with the updated date stamp. The current version was reviewed by the compliance desk on the date stamp shown in the footer.
Authoritative references
Primary sources for the standards and frameworks referenced on this page. Maxicom maps every engagement to these recognised authorities.
Frequently asked questions
How does this policy interact with my company's own policy on the same topic?
Both policies apply to their respective scope. Maxicom's policy governs how we (the disposition vendor) handle the data and operations within our scope; your company's policy governs your own obligations. Where the two intersect (typically in the master service agreement), the SOW addendum specifies which prevails for the engagement. PIPEDA compliance is jointly held — Maxicom as Data Processor, you as Data Fiduciary/Controller.
Where can I see Maxicom's sub-processors / sub-contractors?
Sub-processor list available on NDA via the contact form. The list includes licensed-recycler partners (with their certifications), trader-channel partners (for cross-border resale routing), and IT-infrastructure partners (Cloudflare for site hosting, dedicated email-delivery provider, etc.). Where a sub-processor change affects your engagement, we notify under the SOW notification clause.
What happens if a regulator changes the rules during our engagement?
Maxicom tracks regulator updates across the four operating regions. Where a change affects an active engagement (revised certificate format, new retention period, etc.), the engagement protocol is updated mid-cycle and affected certificates are re-issued at no additional charge. This policy is updated on the same cadence; the update date stamp tracks revisions.
How do I escalate a complaint to the regulator if Maxicom's response is not satisfactory?
For personal-data complaints under PIPEDA, the relevant data protection authority. For BFSI engagements, escalation to OSFI B-13. For e-waste / sustainability matters, the relevant environmental regulator. We do not impede regulator escalation; we cooperate with regulator inspection.
Related practices, regulators & markets
ITAM & Remarketing
ITAM & remarketing
→Refurbished IT Sales
Refurbished sales
→Components Buyback
Components
→SSD / HDD Drive Buyback
SSD/HDD buyback
→Finance & Banking IT Buyback
Banking IT buyback
→IT Buyback (All Asset Classes)
IT buyback
→Healthcare
Healthcare
→Certificates of Destruction
Certificates
→IT disposal in Montreal
Montreal
→Send the asset list. We will send the number.
A photograph of the rack works. A spreadsheet works better. CAD settlement, against PO.