Privacy Policy

Last updated:

1. Data Controller

The data controller responsible for processing your personal data on this website is:

2. Applicable Privacy Law

We collect, use, and disclose personal information in accordance with applicable Canadian law, including the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada’s federal private-sector privacy law. Where our processing is subject to substantially similar provincial private-sector privacy statutes (including in Alberta, British Columbia, or Quebec), we comply with those laws as applicable.

If you are in the European Economic Area (EEA), the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) or equivalent UK or Swiss rules may also apply to certain processing activities.

3. Data We Collect

We collect and process the following categories of personal data:

2.1 Data You Provide Directly

• Full name, email address, and message content submitted through our contact form
• Consent preferences (cookie consent choices)

2.2 Data Collected Automatically

• IP address (anonymized where possible)
• Browser type and version
• Operating system
• Pages visited, date and time of access
• Referring website URL

4. Purposes of Processing

We process your personal information for the following purposes, as permitted under PIPEDA (including consent, where required, and other permitted purposes such as legitimate interests that are proportionate and not outweighed by your privacy rights) and, where applicable, GDPR:

• To respond to your inquiries submitted through the contact form — Canada: your consent; EEA (where applicable): Art. 6(1)(a) GDPR (consent)
• To operate, maintain, and secure our website — Canada: legitimate interests in operating a secure online service; EEA (where applicable): Art. 6(1)(f) GDPR (legitimate interests)
• To analyze website usage through analytics or similar technologies when you consent — Canada: consent; EEA (where applicable): Art. 6(1)(a) GDPR
• To comply with legal obligations — Canada / EEA: as required by applicable law; EEA (where applicable): Art. 6(1)(c) GDPR

Electronic communications (CASL). We do not send commercial electronic messages (such as promotional email) unless you have given express consent in line with Canada’s Anti-Spam Legislation (CASL), where it applies. Replies to your contact form are sent to address your inquiry and are not treated as marketing unless separately consented.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Contact form submissions: retained for up to 12 months after your inquiry has been resolved, then deleted
• Cookie consent preferences: stored in your browser's local storage until you clear it or change your preferences
• Server log data: automatically deleted after 30 days

6. Data Sharing and Transfers

We do not sell, rent, or trade your personal information. We may share information only in the following circumstances:

• With service providers who assist in website hosting and maintenance, under contractual terms that require appropriate protection of personal information
• When required by law, regulation, or legal process
• To protect our rights, privacy, safety, or property

Cross-border transfers. Personal information may be processed or stored in Canada and, where we use service providers, in other countries. Where personal information is transferred outside Canada, we take steps that are reasonable in the circumstances to ensure comparable protection, including contractual safeguards, as required by PIPEDA and applicable provincial law.

If data is transferred from the EEA, the United Kingdom, or Switzerland to countries that have not been recognized as providing an adequate level of protection, we rely on appropriate safeguards where required (for example, Standard Contractual Clauses approved by the European Commission or UK authorities, or other lawful transfer mechanisms).

7. Your Rights Under Canadian Privacy Law

Subject to applicable exceptions under PIPEDA and provincial laws, you generally have the right to:

• Access — request access to the personal information we hold about you
• Accuracy — request correction of personal information that is inaccurate or incomplete
• Withdraw consent — withdraw consent where processing is based on consent, subject to legal or contractual restrictions and reasonable notice
• Challenge compliance — ask questions about our privacy practices and raise concerns with us

Quebec residents. If Quebec’s Act respecting the protection of personal information in the private sector (as modernized) applies, you may have additional rights (for example, certain rights regarding automated processing, portability in prescribed circumstances, and recourse before the Commission d’accès à l’information du Québec).

To exercise these rights, contact us using the details in Section 15. We will respond within a reasonable time, and generally within 30 days, unless applicable law permits or requires a different timeline.

8. Your Rights Under GDPR (EEA, UK, Switzerland)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, and GDPR or equivalent UK or Swiss rules apply, you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you (Art. 15 GDPR)
• Right to rectification — request correction of inaccurate or incomplete data (Art. 16 GDPR)
• Right to erasure — request deletion of your personal data under certain conditions (Art. 17 GDPR)
• Right to restriction of processing — request limitation of processing in specific situations (Art. 18 GDPR)
• Right to data portability — receive your data in a structured, machine-readable format (Art. 20 GDPR)
• Right to object — object to processing based on legitimate interests (Art. 21 GDPR)
• Right to withdraw consent — withdraw consent at any time without affecting the lawfulness of prior processing (Art. 7(3) GDPR)

To exercise any of these rights, contact us using the details in Section 15. We will respond within 30 days where required by applicable law.

9. Security Measures

We implement appropriate technical and organizational measures to protect your personal data, including:

• HTTPS encryption for all data transmitted between your browser and our servers
• Regular security assessments of our website infrastructure
• Access controls limiting data access to authorized personnel only
• Secure data storage with encryption at rest where applicable

10. Cookies

This website uses cookies. For detailed information about the types of cookies we use, their purposes, and how to manage them, please refer to our Cookie Policy.

11. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of third-party websites. We encourage you to read their privacy policies before providing any personal data.

12. Children's Privacy

Our website is not directed at children. We do not knowingly collect personal information from individuals under 13. If you are in the EEA, we do not knowingly collect personal data from children under 16 without appropriate consent where required. If you believe we have collected information from a child, please contact us immediately and we will take steps to delete it where appropriate.

13. How to Lodge a Complaint

Canada. If you have concerns about our handling of personal information that we cannot resolve, you may file a complaint with the Office of the Privacy Commissioner of Canada (OPC). Information about how to file a complaint is available at priv.gc.ca.

Quebec. If applicable law permits, you may also contact the Commission d’accès à l’information du Québec (cai.gouv.qc.ca).

European Economic Area, United Kingdom, and Switzerland. If you believe our processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with a supervisory authority in your country of residence, place of work, or the place of the alleged infringement.

14. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated revision date. We encourage you to review this policy regularly.

15. Contact Us

For questions or concerns regarding this Privacy Policy or our data processing practices, please contact: