Privacy Policy

Effective date:  ·  Jurisdiction: Canada (PIPEDA)

1. Who We Are

Vornstead Solutions ("we," "us," "our") is an operations modernization consultancy. We help organizations improve operational efficiency, reporting visibility, and decision-making through intelligent systems and process optimization. We operate primarily in Canada and are subject to Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

2. What Information We Collect

Information you provide directly

When you submit our contact form, we collect:

• Full name
• Business email address
• Company name
• A description of your operational challenge (if provided)

Information collected automatically

Our website does not use cookies, tracking pixels, or analytics software. We do not collect IP addresses, browser fingerprints, or behavioral data. We do not use third-party advertising or retargeting services.

Our hosting provider (Netlify) may collect basic server logs including IP addresses for security and infrastructure purposes. These are governed by Netlify's own privacy policy and are not accessible to or used by Vornstead Solutions for any commercial purpose.

Client engagement data

During a consulting engagement, we may handle operational, financial, and business data belonging to your organization. This is governed separately by the confidentiality provisions in your engagement agreement and is not covered by this website privacy policy.

3. Why We Collect This Information

We collect contact form information solely to:

• Respond to your enquiry
• Assess whether an engagement may be appropriate
• Schedule an initial consultation

We do not use your information for marketing, profiling, or any automated decision-making. We will not add you to any mailing list without your explicit consent.

4. Legal Basis for Processing

Under PIPEDA, we process your personal information on the basis of your consent, which you provide by voluntarily submitting our contact form. You may withdraw consent at any time by contacting us at the address below.

5. How We Store and Protect Your Information

Contact form submissions are received and stored via Netlify Forms, a service provided by Netlify, Inc. Netlify stores data on servers located in the United States. By submitting our form, you acknowledge that your data may be transferred to and processed in the United States.

We access form submissions through a password-protected dashboard. We do not store your personal information in any additional systems beyond what is necessary to respond to your enquiry.

We apply the following protections:

• Access to enquiry data is limited to authorized personnel only
• All communications with our site are encrypted via HTTPS/TLS
• We do not transmit personal information via unencrypted channels

6. How Long We Keep Your Information

If an engagement does not proceed following initial contact, we retain your enquiry information for no longer than 12 months, after which it is deleted. If an engagement proceeds, your contact information is retained for the duration of the engagement and for a period of 7 years thereafter for legal and record-keeping purposes, consistent with standard business practice in Canada.

7. Sharing of Information

We do not sell, rent, trade, or share your personal information with third parties, except:

• Netlify, Inc. — our hosting provider, who processes form submissions on our behalf under their own terms and privacy policy
• Legal obligation — if required by law, court order, or regulatory authority

We have no advertising partners, data brokers, or analytics vendors with whom we share information.

8. Your Rights Under PIPEDA

You have the right to:

• Know what personal information we hold about you
• Request access to your personal information
• Request correction of inaccurate information
• Withdraw consent and request deletion of your information
• File a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca

To exercise any of these rights, contact us using the information below. We will respond within 30 days.

9. Children's Privacy

Our website and services are directed exclusively at business professionals. We do not knowingly collect personal information from individuals under the age of 18.

10. External Links

Our website does not contain links to third-party websites. If this changes in future, we will note that we are not responsible for the privacy practices of external sites.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top of this page will reflect the most recent revision. We encourage you to review this policy periodically. Continued use of our website following any update constitutes acceptance of the revised policy.