Privacy Policy

1. Introduction

Novafield ("we," "our," or "us") is committed to protecting your privacy and handling your personal information with care and transparency. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website or engage our consulting services.

We operate in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation in Canada. If you have questions about this policy or our privacy practices, please contact us at [email protected].

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when you:

• Submit contact forms or inquiries through our website
• Engage our consulting services
• Subscribe to communications or updates
• Communicate with us via email or telephone

This information may include your name, email address, phone number, company name, job title, and any other details you choose to share in your communications with us.

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain technical information through cookies and similar technologies:

• Browser type and version
• Operating system
• IP address and general location information
• Pages visited and time spent on our site
• Referring website addresses

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Delivery

• Responding to inquiries and providing requested information
• Delivering consulting services and maintaining client relationships
• Processing engagement agreements and invoicing
• Providing ongoing support and follow-up communications

3.2 Website Improvement

• Analyzing website usage to improve user experience
• Troubleshooting technical issues
• Understanding how visitors interact with our content

3.3 Communications

• Sending service-related updates and notifications
• Sharing relevant insights or resources (with your consent)
• Responding to your questions and requests

3.4 Legal Compliance

• Meeting legal and regulatory requirements
• Protecting our rights and property
• Preventing fraud and maintaining security

4. Legal Basis for Processing

Under Canadian privacy law, we process your personal information based on:

• Consent: You have provided express or implied consent for specific purposes
• Contract: Processing is necessary to fulfill our consulting services agreement with you
• Legitimate Interests: Processing is necessary for our legitimate business interests, provided this does not override your privacy rights
• Legal Obligations: Processing is required to comply with applicable laws and regulations

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information only in the following limited circumstances:

5.1 Service Providers

We may share information with trusted third-party service providers who assist us in operating our website, conducting business, or servicing you. These providers are contractually obligated to protect your information and use it only for the specific purposes we authorize.

5.2 Legal Requirements

We may disclose your information when required by law, court order, or government regulation, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring organization, subject to the same privacy protections described in this policy.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Secure server infrastructure with encryption protocols
• Access controls limiting data access to authorized personnel only
• Regular security assessments and updates
• Employee training on data protection practices
• Secure data backup and recovery procedures

While we strive to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but maintain commercially reasonable safeguards.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Retention periods vary based on:

• The nature of the information collected
• Legal and regulatory requirements
• Our legitimate business needs
• The purpose for which the information was collected

Typically, we retain client engagement information for seven years following engagement completion to meet professional standards and potential audit requirements. Website visitor data is retained for shorter periods as outlined in our Cookie Policy.

8. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance user experience and analyze site usage. For detailed information about our cookie practices, including types of cookies used and how to manage your preferences, please review our Cookie Policy.

9. Your Privacy Rights

Under Canadian privacy law, you have the following rights regarding your personal information:

9.1 Access

You have the right to request access to the personal information we hold about you. We will provide this information in a commonly used format within 30 days of your request, subject to certain exceptions permitted by law.

9.2 Correction

You may request correction of any inaccurate or incomplete personal information we hold about you. We will make reasonable efforts to correct the information promptly.

9.3 Withdrawal of Consent

Where processing is based on your consent, you may withdraw that consent at any time. However, this will not affect the lawfulness of processing based on consent before its withdrawal.

9.4 Data Portability

In certain circumstances, you may request that we provide your personal information in a structured, commonly used format for transfer to another organization.

9.5 Deletion

You may request deletion of your personal information, subject to our legal obligations to retain certain records. We will respond to deletion requests within 30 days.

To exercise any of these rights, please contact us at [email protected]. We may require verification of your identity before processing your request.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately so we can delete such information.

11. International Data Transfers

We primarily operate within Canada and store data on Canadian servers. If we transfer your information outside Canada, we will ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable privacy laws.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending notice to the email address you have provided (for material changes)

Your continued use of our services after such changes constitutes acceptance of the updated Privacy Policy.

14. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

15. Complaints

If you believe we have not complied with this Privacy Policy or applicable privacy laws, you may file a complaint with us at [email protected]. We will investigate and respond to your complaint within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada: