Privacy notice
Last updated [[DATE]].
Template, not a finished notice. This is a working draft to be completed and reviewed by a Canadian privacy adviser before launch. Every bracketed item is a factual claim about your actual systems that must be verified, not written from a template. An inaccurate privacy notice is a worse outcome than a late one.
Who we are
BraunTrack Advisory, [[LEGAL BUSINESS NAME]], [[ADDRESS]]. Questions about this notice, or requests relating to your information, go to [[PRIVACY_EMAIL]].
What we collect and why
- Assessment responses
- Your answers to the fifteen statements, and the score they produce. [[Confirm: are responses stored, or only processed in the browser and discarded unless you request the written interpretation? Answer this accurately — the assessment page tells visitors the scoring runs in their browser.]] Where responses are retained, they are used to produce your interpretation and, in aggregated and de-identified form, to establish benchmarks across companies of similar size.
- Enquiry details
- Name, company, email, phone, role, revenue band, and what you tell us about your situation. Used to respond to your enquiry and to assess whether an engagement is appropriate.
- Engagement information
- Financial and management information provided during an engagement. Handled as set out on the confidentiality and scope page.
- Website usage
- [[State what analytics, if any, are in use. If Cloudflare Web Analytics — no cookies, no cross-site tracking, no personal data — say so plainly; it is a genuine advantage worth stating.]]
Where it is stored
[[List the actual systems and the country each holds data in. If any processor stores data outside Canada, say so and name it — this is a specific PIPEDA expectation.]]
How long we keep it
[[Retention periods for each category above. Assessment responses, enquiries that do not proceed, and engagement records will have different periods.]]
Commercial email
Under Canada's anti-spam legislation we send commercial electronic messages only to people who have given express consent. Consent boxes on this site are never pre-ticked. Every commercial message identifies the sender, gives a mailing address, and carries a working unsubscribe link that is actioned within ten business days. A record of when and how each consent was given is retained.
Replying to your enquiry, or sending an assessment interpretation you asked for, is a response to your request rather than marketing, and does not add you to any list.
Your rights
You may ask what personal information we hold about you, ask for it to be corrected, or ask for it to be deleted, by writing to [[PRIVACY_EMAIL]]. We respond within thirty days. If you are not satisfied with our response you may contact the Office of the Privacy Commissioner of Canada.