Privacy Policy

1. Who we are

automateglobal.ca is operated by Automate Global Inc., a Canadian business headquartered in Mississauga, Ontario. For the purposes of the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation, we are the organisation responsible for personal information collected through this website and in the course of providing our services.

Our registered address is Suite 2212, 2550 Eglinton Ave W, Mississauga, ON L5M 0Y2.

2. What we collect

We collect only the personal information we need to respond to your enquiries, deliver our services, and operate our business. Specifically:

Information you provide directly

• Contact details you submit through our contact forms or the chat widget: name, work email address, phone number, company name, and the content of your message.
• Project details you share during consultations or in response to proposals, where relevant to scoping an engagement.
• Marketing preferences you set when subscribing to communications.

Information collected automatically

• Server logs: IP address, browser type and version, referring page, device type, and timestamps. Retained for 30 days for security and debugging purposes.
• Analytics data: aggregated page views, session duration, and navigation paths. See Cookies & analytics below.

3. How we use information

We use the personal information you provide to:

• Respond to your enquiries and provide the services you request.
• Prepare proposals, deliver engagements, and invoice for work performed.
• Communicate with you about our services (with your consent, where required).
• Operate, secure, and improve our website.
• Comply with legal obligations and professional standards.

4. Legal basis under PIPEDA

Under PIPEDA, we collect, use, and disclose personal information for purposes a reasonable person would consider appropriate in the circumstances, and only with your consent (expressed or implied, as applicable). Where you provide contact information through our forms, your consent is implied for us to respond to that enquiry. Any further use (such as adding you to a marketing list) requires your explicit opt-in.

5. When we share information

We share personal information only in these limited situations:

• Service providers who process information on our behalf under written confidentiality agreements, including our email provider (Microsoft 365), cloud hosting (Canadian regions on AWS or Microsoft Azure), and accounting software. These providers are contractually prohibited from using your information for any other purpose.
• Legal and regulatory authorities when required by law, court order, or in response to a valid government request.
• In the event of a business transaction such as a merger or acquisition, provided the acquirer agrees to honour the terms of this Privacy Policy.

6. How long we keep it

We retain personal information only as long as necessary for the purposes outlined above, or as required by law. In practice:

• Enquiry data that does not lead to an engagement: 24 months, then deleted.
• Client records for engagements: 7 years after the engagement ends, in line with Canadian tax and professional record-keeping requirements.
• Server logs: 30 days.
• Marketing subscriptions: until you unsubscribe, then your email is held in a suppression list to prevent re-contact.

7. How we protect it

We apply appropriate administrative, technical, and physical safeguards to protect your information, including: encryption in transit (TLS 1.3) and at rest, access controls based on the principle of least privilege, multi-factor authentication on all administrative accounts, regular security review of our systems, and vendor diligence on any service provider that processes personal information on our behalf.

No system is perfectly secure. If a breach occurs that could reasonably create a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by PIPEDA.

8. Your rights

You have the right under PIPEDA (and applicable provincial laws) to:

• Access the personal information we hold about you.
• Correct inaccuracies in that information.
• Withdraw consent to our continued use of your information (subject to legal or contractual limitations).
• Request deletion of your information where we no longer have a legitimate need to retain it.
• File a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.

To exercise any of these rights, contact our Privacy Officer at [email protected]. We respond to verified requests within 30 days.

9. Cookies & analytics

We use a minimal number of cookies, limited to what is necessary for the site to function and to understand aggregated traffic patterns. We do not use third-party advertising or behavioural tracking cookies. Our analytics are configured to anonymise IP addresses, respect "Do Not Track" browser signals, and retain data for the shortest practicable period.

You can disable cookies through your browser settings. The site will continue to function with cookies disabled.

10. International transfers

Your personal information is primarily stored and processed in Canada. In limited circumstances, service providers may process information in the United States (for example, Microsoft 365 global services). When this occurs, the information remains protected by equivalent contractual commitments and we select vendors with Canadian data residency options where available.

You acknowledge that information processed outside Canada may be subject to the laws of the jurisdiction in which it is held, including lawful access by foreign authorities.

11. Quebec Law 25 notice

If you are a resident of Quebec, you have additional rights under An Act respecting the protection of personal information in the private sector (Law 25), including the right to data portability, the right to be informed of automated decision-making, and the right to request de-indexation of personal information.

Our designated Privacy Officer for Law 25 purposes is reachable at [email protected].

12. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of the page reflects the most recent revision. Material changes will be announced on this page at least 30 days before taking effect. We encourage you to review this page periodically.

13. Contact our Privacy Officer

Questions, concerns, or requests related to this Privacy Policy or your personal information should be directed to:

Privacy Officer
Automate Global Inc.
Suite 2212, 2550 Eglinton Ave W
Mississauga, ON L5M 0Y2
Email: [email protected]
Phone: +1 (437) 460-8117