Privacy Policy

1. Introduction

Craft Advisory Inc. ("Craft Advisory," "we," "our," or "us") is committed to protecting the privacy of our clients, website visitors, and other individuals whose personal information we collect. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation in Canada.

By accessing our website, engaging our services, or otherwise providing us with your personal information, you acknowledge that you have read and understood this Privacy Policy.

2. Scope of This Policy

This Privacy Policy applies to personal information collected by Craft Advisory through:

• Our website and any associated digital platforms
• Client engagements and advisory services
• Email correspondence, phone calls, and in-person meetings
• Marketing and promotional activities
• Social media interactions

3. Definitions

"Personal Information" means any information about an identifiable individual, as defined under PIPEDA. This does not include business contact information used solely for business communications, such as an employee's name, title, business address, business telephone number, or business email address.

"Consent" means voluntary agreement with what is being done or proposed, which may be express or implied depending on the sensitivity of the information and the reasonable expectations of the individual.

4. Information We Collect

4.1 Information You Provide Directly

We may collect the following personal information when you interact with us:

• Contact information: name, email address, phone number, mailing address
• Professional information: job title, company name, industry, and role
• Communication records: content of emails, messages, and meeting notes
• Financial information: billing details and payment information for services rendered
• Marketing preferences: communication opt-ins and areas of interest

4.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address and approximate geographic location
• Browser type, device type, and operating system
• Pages visited, time spent on pages, and referring URLs
• Cookies and similar tracking technologies (see Section 10)

4.3 Information from Third Parties

We may receive personal information from publicly available sources, social media platforms (such as LinkedIn), or through referrals from existing clients and partners.

5. How We Use Your Information

We collect and use personal information for the following purposes:

• To provide and deliver our fractional CMO and strategic marketing advisory services
• To communicate with you regarding our services, proposals, and project updates
• To process invoices, payments, and manage our client accounts
• To send marketing communications (with your consent), including newsletters, industry insights, and service updates
• To improve our website, services, and client experience
• To comply with legal and regulatory obligations
• To protect our rights, property, and safety, and those of our clients and partners

6. Consent

In accordance with PIPEDA, we obtain your consent before or at the time of collecting your personal information, unless an exception applies. Consent may be express (e.g., signing a contract, opting in to communications) or implied (e.g., providing your business card at a networking event).

You may withdraw your consent at any time, subject to legal or contractual restrictions, by contacting us using the information provided in Section 14. Please note that withdrawing consent may affect our ability to provide certain services to you.

7. Disclosure of Personal Information

We do not sell, rent, or trade your personal information. We may share your personal information with:

• Service providers and partners: Trusted third parties who assist us in operating our business, such as our creative agency partner, IT service providers, payment processors, and email marketing platforms. These parties are contractually obligated to protect your information.
• Professional advisors: Our legal, accounting, and insurance advisors as reasonably necessary.
• Legal requirements: When required by law, regulation, court order, or governmental authority.
• Business transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction.

8. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. When personal information is no longer needed, we will securely destroy, erase, or anonymize it.

Typical retention periods include:

• Client records: Duration of the client relationship plus 7 years
• Financial records: As required by the Canada Revenue Agency and applicable tax legislation
• Marketing communications data: Until consent is withdrawn
• Website analytics data: 24 months

9. Safeguarding Your Information

We implement reasonable physical, organizational, and technological safeguards to protect personal information against unauthorized access, disclosure, copying, use, or modification. These measures include:

• Secure, encrypted storage of electronic records
• Password protection and access controls for digital systems
• Confidentiality agreements with employees and contractors
• Regular review and updating of our security practices

While we take all reasonable precautions, no method of electronic storage or transmission is completely secure. We cannot guarantee absolute security of your personal information.

10. Cookies and Tracking Technologies

Our website may use cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and understand how visitors use our site. Cookies are small data files stored on your device.

Types of cookies we may use:

• Essential cookies: Required for the website to function properly.
• Analytics cookies: Help us understand how visitors interact with our website (e.g., Google Analytics).
• Marketing cookies: Used to deliver relevant advertisements and measure campaign effectiveness.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

11. Third-Party Websites and Services

Our website may contain links to third-party websites and services, including social media platforms such as LinkedIn. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing them with your personal information.

12. Your Rights Under Canadian Privacy Law

Under PIPEDA and applicable provincial privacy legislation, you have the right to:

• Access: Request access to the personal information we hold about you.
• Correction: Request that we correct any inaccurate or incomplete personal information.
• Withdrawal of consent: Withdraw your consent to the collection, use, or disclosure of your personal information, subject to legal or contractual limitations.
• Complaint: File a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated.

We will respond to access and correction requests within 30 days of receipt. In some cases, we may require additional time, and we will notify you accordingly.

13. Cross-Border Data Transfers

Some of our service providers may store or process personal information outside of Canada. In such cases, personal information may be subject to the laws of the jurisdiction in which it is stored or processed. We take reasonable steps to ensure that third-party service providers protect your personal information in a manner consistent with this Privacy Policy and Canadian privacy law.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact us at:

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this policy. We encourage you to review this policy periodically.

16. Office of the Privacy Commissioner of Canada

If you are not satisfied with our response to your privacy concern, you may contact the Office of the Privacy Commissioner of Canada:

© Craft Advisory Inc. All rights reserved.