Your privacy rights
under Canadian law

Principle 01

Accountability

Anchored Logic is responsible for the personal information under its control. Emily Baack is the designated privacy officer and is accountable for the organization's compliance with PIPEDA.

When we transfer information to third-party service providers (such as scheduling or email platforms), we require that they provide comparable protection. We remain accountable for that information while it is in their hands.

Principle 02

Identifying purposes

We identify the purpose for collecting personal information before or at the time of collection. The purposes for which Anchored Logic collects personal information include:

• Responding to inquiries submitted through our website or email
• Scheduling and managing client consultation calls
• Delivering consulting and implementation services
• Sending project communications and deliverables
• Issuing invoices and processing payments

We do not collect personal information for undisclosed purposes.

Principle 03

Consent

We obtain your knowledge and consent for the collection, use, and disclosure of personal information, except where inappropriate or where the law provides an exception.

When you submit a contact form, book a call, or initiate an email inquiry, you are providing implied consent for us to use your contact information to respond. If we wish to use your information for a purpose beyond the reason it was collected — for example, including you in a mailing list — we will request your express consent first.

You may withdraw consent at any time, subject to legal or contractual restrictions, by contacting us at the address below. Withdrawal of consent may affect our ability to deliver services if that information is required for the engagement.

Principle 04

Limiting collection

We collect only the information necessary for the purposes identified. We do not collect information by misleading or deceptive means.

For website visitors, this means only the data collected through voluntary form submissions and aggregated, anonymized analytics (via Google Analytics 4). We do not purchase mailing lists or acquire personal data from third parties.

Principle 05

Limiting use, disclosure, and retention

Personal information is used only for the purposes for which it was collected, unless you consent to another use or the law requires otherwise. We do not sell, rent, or trade personal information.

We retain personal information only as long as necessary to fulfill the stated purposes or as required by law. Client project files are retained for a reasonable period after engagement close for reference and warranty purposes, then securely deleted.

Principle 06

Accuracy

We keep personal information as accurate, complete, and up to date as is necessary for the purposes for which it is used. If you become aware that information we hold is inaccurate, you may contact us to request a correction.

Principle 07

Safeguards

Personal information is protected by security safeguards appropriate to the sensitivity of the information. These include:

• HTTPS encryption on all web properties
• Credential management through platform-provided secret managers
• Minimum-necessary access for all third-party tools
• No storage of sensitive personal information in unsecured locations

For full details on our security practices, see our Security page.

Principle 08

Openness

We make our privacy policies and practices readily available. This document, along with our Privacy Policy, describes how we manage personal information. If you have questions not answered here, contact us directly.

Principle 09

Individual access

Upon written request, you have the right to be informed of the existence, use, and disclosure of your personal information, and to be given access to that information. You may challenge the accuracy and completeness of the information and have it amended as appropriate.

We will respond to written access requests within 30 days. In some cases, we may not be able to provide access — for example, if disclosure would reveal personal information about a third party. We will explain the reason for any refusal.

Principle 10

Challenging compliance

You have the right to challenge our compliance with these principles. We take all complaints seriously and will investigate promptly. If your complaint is justified, we will take appropriate corrective action.

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.