Privacy Policy

1. Introduction

Crestholm ("we," "our," or "us") is committed to protecting the privacy and personal information of individuals who use our business consulting services or visit our website. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation in British Columbia.

By using our services or website, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy.

2. Information We Collect

Personal Information

We collect personal information that you voluntarily provide to us when you:

• Complete a contact form on our website
• Engage our consulting services
• Communicate with us via email or phone
• Subscribe to our newsletter or updates

This information may include:

• Name and contact information (email address, phone number, mailing address)
• Business information (company name, role, industry)
• Communication preferences
• Information you provide during consulting engagements

Automatically Collected Information

When you visit our website, we may automatically collect certain technical information, including:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on our website
• Referring website addresses

3. How We Use Your Information

We use your personal information for the following purposes:

• To provide and deliver our consulting services
• To respond to your inquiries and communicate with you
• To improve our services and website functionality
• To send you relevant information about our services (with your consent)
• To comply with legal obligations and protect our rights
• To analyze website usage and improve user experience

We process your personal information based on your consent, contractual necessity, legitimate business interests, and legal compliance requirements.

4. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information with:

• Service Providers: Third-party vendors who assist us in operating our website, conducting business, or servicing you (such as email service providers, payment processors, or analytics services). These providers are contractually obligated to protect your information.
• Legal Compliance: Government authorities, law enforcement, or other third parties when required by law or to protect our legal rights, safety, or property.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data during transmission
• Secure servers and restricted access to personal information
• Regular security assessments and updates
• Employee training on data protection practices

While we strive to protect your personal information, no method of transmission or storage is completely secure. We cannot guarantee absolute security but remain committed to maintaining appropriate safeguards.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Client records: 7 years following the conclusion of consulting services
• Contact form submissions: 2 years from submission date
• Marketing communications: Until you unsubscribe or request deletion
• Website analytics data: 26 months

When personal information is no longer required, we securely delete or anonymize it.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your website experience. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

8. Your Rights and Choices

Under PIPEDA and applicable provincial privacy laws, you have the following rights regarding your personal information:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete personal information
• Deletion: Request deletion of your personal information, subject to legal retention requirements
• Objection: Object to certain processing of your personal information
• Withdrawal of Consent: Withdraw consent for marketing communications at any time
• Portability: Request a copy of your personal information in a structured, machine-readable format

To exercise these rights, please contact us at [email protected]. We will respond to your request within 30 days.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will promptly delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of our services after changes have been posted constitutes your acceptance of the revised Privacy Policy.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

13. Privacy Commissioner

If you have concerns about our handling of your personal information that we have not adequately addressed, you have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada:

Office of the Privacy Commissioner of Canada
30 Victoria Street
Gatineau, Quebec K1A 1H3
Toll-free: 1-800-282-1376
Website: www.priv.gc.ca