Privacy Policy

Introduction

Corwyn ("we," "our," or "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website or engage our consulting services. This policy applies to all personal data processed by Corwyn in connection with our business consulting services.

For questions about this Privacy Policy or our privacy practices, please contact us at [email protected].

Information We Collect

Personal Information You Provide

When you use our services or contact us, we may collect the following personal information:

• Name and professional title
• Email address and telephone number
• Organization name and business address
• Communication preferences
• Information you provide in inquiries, consultations, or service engagements

Automatically Collected Information

When you access our website, we may automatically collect:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on our website
• Referring website addresses
• Cookie data (see our Cookie Policy for details)

How We Use Your Information

We process personal information for the following purposes:

• Service Delivery: To provide consulting services, respond to inquiries, and fulfill contractual obligations
• Communication: To contact you regarding services, engagements, and business matters
• Website Improvement: To analyze website usage and enhance user experience
• Legal Compliance: To meet regulatory requirements and legal obligations
• Business Operations: To maintain records, conduct internal analysis, and improve our services

Legal Basis for Processing

Under Canadian privacy law (PIPEDA) and applicable provincial legislation, we process personal information based on:

• Your consent (which you may withdraw at any time)
• Contractual necessity for service delivery
• Legitimate business interests in providing professional consulting services
• Legal obligations requiring data processing

Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Client engagement records: Seven years following engagement completion
• Communication records: Three years from last contact
• Website usage data: Twelve months from collection
• Marketing communications: Until consent is withdrawn

Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share information in the following circumstances:

• Service Providers: With trusted third-party service providers who assist in our business operations (e.g., email services, website hosting), under strict confidentiality obligations
• Professional Advisors: With legal, accounting, or other professional advisors when necessary for business purposes
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of business assets

All third parties with whom we share data are contractually required to maintain appropriate security measures and use personal information only for specified purposes.

Data Security

We implement appropriate technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Secure server infrastructure with regular security updates
• Access controls limiting data access to authorized personnel
• Regular security audits and vulnerability assessments
• Employee training on data protection and confidentiality

In the event of a data breach that poses a real risk of significant harm, we will notify affected individuals and relevant authorities as required by law.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance user experience and analyze website usage. We use the following types of cookies:

• Essential Cookies: Necessary for website functionality (always active)
• Analytics Cookies: Help us understand how visitors interact with our website
• Preference Cookies: Remember your settings and preferences

For detailed information about our cookie practices and how to manage your preferences, please refer to our Cookie Policy.

Your Privacy Rights

Under Canadian privacy legislation, you have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Objection: Object to processing of your personal information for certain purposes
• Withdrawal of Consent: Withdraw consent for processing based on consent at any time
• Data Portability: Receive your personal information in a structured, commonly used format

To exercise these rights, please contact us at [email protected]. We will respond to your request within 30 days.

You also have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada if you believe we have not complied with applicable privacy laws.

Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

Children's Privacy

Our services are intended for business professionals and organizations. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have collected information from a minor without appropriate consent, we will take steps to delete such information.

International Data Transfers

As a Canadian business consulting firm, we primarily store and process data within Canada. If we transfer personal information outside Canada, we ensure appropriate safeguards are in place to protect your information in accordance with Canadian privacy laws.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will post the updated policy on our website with a revised "Last Updated" date. Material changes will be communicated through prominent website notice or direct communication with affected individuals.

Continued use of our services after policy changes indicates acceptance of the updated terms.

Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact: