Privacy Policy

NorthStack Solutions ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

1. Information We Collect

Personal Information

We collect information that you voluntarily provide to us when you:

• •Fill out our contact form
• •Subscribe to our newsletter
• •Request a consultation or quote
• •Download resources
• •Communicate with us via email or phone

This information may include:

• •Name and contact information (email address, phone number)
• •Company name and business information
• •Project details and requirements
• •Budget and timeline preferences
• •Any other information you choose to provide

Automatically Collected Information

When you visit our website, we automatically collect certain information about your device, including:

• •IP address and geographic location
• •Browser type and version
• •Device type and operating system
• •Pages visited and time spent on pages
• •Referring website or source
• •Date and time of visit

2. How We Use Your Information

We use the information we collect to:

• •Respond to your inquiries and provide customer support
• •Provide quotes and proposals for services
• •Deliver services and manage client projects
• •Send newsletters and marketing communications (with your consent)
• •Improve our website and services
• •Analyze website usage and trends
• •Comply with legal obligations
• •Prevent fraud and ensure security

3. Legal Basis for Processing (PIPEDA Compliance)

We process your personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). We collect and use your information only when:

• •Consent: You have given us explicit consent to process your information for a specific purpose
• •Contract: Processing is necessary to fulfill a contract with you
• •Legal Obligation: We must comply with Canadian law
• •Legitimate Interests: Processing is in our legitimate business interests (and does not override your rights)

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information with:

Service Providers

We work with trusted third-party service providers who assist us in operating our business, including:

• •Web hosting providers (servers located in Canada)
• •Email service providers (for newsletters and communications)
• •Analytics providers (Google Analytics, with IP anonymization)
• •Payment processors (for invoicing and payments)
• •Cloud infrastructure providers (AWS, GCP - Canadian regions when possible)

These providers are contractually obligated to protect your data and use it only for the purposes we specify.

Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy:

• •Contact inquiries: 2 years from last contact
• •Client project data: 7 years (for business records and tax purposes)
• •Newsletter subscribers: Until you unsubscribe
• •Website analytics: 26 months (Google Analytics default)

6. Your Privacy Rights

Under Canadian privacy law (PIPEDA), you have the right to:

• •Access: Request a copy of the personal information we hold about you
• •Correction: Request correction of inaccurate or incomplete information
• •Deletion: Request deletion of your personal information (subject to legal obligations)
• •Withdraw Consent: Withdraw your consent for marketing communications at any time
• •Object: Object to processing based on legitimate interests
• •Data Portability: Request your data in a structured, machine-readable format

To exercise any of these rights, please contact us at privacy@northstack.ca. We will respond within 30 days.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your browsing experience:

Essential Cookies

Required for basic website functionality (session management, security).

Analytics Cookies

Help us understand how visitors interact with our website (Google Analytics with IP anonymization).

Preference Cookies

Remember your settings (e.g., dark mode preference).

You can control cookies through your browser settings. Note that disabling cookies may affect website functionality.

8. Data Security

We implement industry-standard security measures to protect your information:

• •SSL/TLS encryption for all data transmission
• •Secure servers with regular security updates
• •Access controls and authentication requirements
• •Regular security audits and vulnerability assessments
• •Employee training on data protection
• •Encrypted backups

While we use reasonable security measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

9. Canadian Anti-Spam Legislation (CASL)

We comply with Canada's Anti-Spam Legislation (CASL):

• •We only send commercial emails to those who have explicitly consented
• •Every email includes a clear unsubscribe mechanism
• •We honor unsubscribe requests immediately
• •We maintain records of consent for 3 years
• •Our emails clearly identify our business

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

11. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

12. International Data Transfers

Your information is primarily stored on servers in Canada. Some of our service providers may be located in the United States or other countries. When we transfer data internationally, we ensure adequate safeguards are in place to protect your information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• •Posting the new policy on this page
• •Updating the "Last Updated" date
• •Sending an email notification (for material changes)

Your continued use of our services after changes indicates acceptance of the updated policy.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

15. Privacy Commissioner

If you are not satisfied with our response to your privacy concern, you have the right to contact the Office of the Privacy Commissioner of Canada: