Microsoft 365 Guest Privacy Policy

Last updated: October 13, 2026This policy explains how U-Pak Disposals (1989) Limited (U-Pak) manages personal information when external guests access shared files, folders, sites, or other U-Pak Microsoft 365 resources, including SharePoint, OneDrive, and Microsoft Teams.

Information we collect

We may receive your name, email address, organization, and account details from you or your identity provider. Microsoft 365 may also record IP addresses, device and browser information, sign-in times, and activities such as viewing, downloading, or editing files. We also process personal information contained in the content you submit.

How we use and share information

We use this information to verify identity, manage access, support business collaboration, provide technical assistance, maintain security, and investigate misuse. We do not sell guest-access information or use it for unrelated marketing. Information is available to authorized U-Pak personnel, permitted collaborators, and Microsoft or other providers supporting these resources, as needed. Content you contribute may be visible to others with access to the resource. Information may also be disclosed where required by law.

Processing and protection

Microsoft and its service providers may process information outside Canada, where it may be subject to local laws. We use appropriate safeguards and access controls to protect personal information.

Retention

We retain personal information only as long as necessary for the purposes above and applicable legal obligations, and then delete or anonymize it. Ending guest access does not automatically delete submitted content or records that must be retained.

Your choices and privacy questions

To raise a privacy concern, request access or correction, request deletion where applicable, or withdraw consent, contact Jeff Lee at jefflee@upak.net. Requests are handled in accordance with applicable law. Withdrawing consent is subject to legal or contractual restrictions and may limit or end guest access.