How We Handle Personal Information Collected Through rethinq.ca
Effective Date: April 20, 2026 | Entity: 2785046 ALBERTA INC. DBA rethinQ Solutions
We collect only the personal information we need to respond to you, improve the site, and comply with the law. We never sell your information. You can contact us at any time to access, correct, or delete the information we hold.
1. Introduction
2785046 ALBERTA INC. DBA rethinQ Solutions ("rethinQ," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy describes how we collect, use, disclose, retain, and protect personal information obtained through our website, rethinq.ca (the "Website").
This Policy applies only to information collected through the Website. Information collected during a signed consulting engagement is governed by the terms of the applicable Statement of Work, Master Services Agreement, or Data Processing Agreement — not by this Policy.
We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) (Canada), Alberta's Personal Information Protection Act (PIPA), and Canada's Anti-Spam Legislation (CASL), where applicable.
2. Who We Are and Who to Contact
rethinQ Solutions is the operating name of 2785046 ALBERTA INC. DBA rethinQ Solutions, a corporation organized under the laws of the Province of Alberta, Canada.
For any question about this Policy or about the personal information we hold about you, please contact our Privacy Officer:
We collect personal information in two main ways: information you provide directly, and information collected automatically when you use the Website.
3.1 Information You Provide
When you interact with the Website — for example, by filling in a contact form, downloading a framework or intake questionnaire, subscribing to updates, or booking a discovery call — you may provide us with:
•Name, job title, and organization name.
•Business email address and phone number.
•Country, province, or city (where relevant to your inquiry).
•The content of your message, question, or project description.
•Any other information you choose to include in a form field or attachment.
3.2 Information Collected Automatically
When you visit the Website, we and our service providers may automatically collect:
•Technical data — IP address, browser type and version, operating system, device type, screen size, time zone, and referring URL.
•Usage data — pages viewed, time spent on pages, navigation paths, downloads initiated, and links clicked.
•Location data — approximate location derived from IP address (typically at the city or region level).
•Cookie and similar identifier data — see Section 7.
3.3 What We Do Not Collect Through the Website
The Website is not designed to collect sensitive personal information. Please do not submit through web forms any financial account details, government identifiers, health information, psychometric results, clinical information, security audit findings, or other sensitive data. Such information, when required, is collected only within a signed consulting engagement using appropriate safeguards.
4. How We Use Your Information
We use the personal information we collect for the following purposes:
•To respond to your inquiries, schedule discovery calls, and send requested materials (such as framework PDFs or intake questionnaires).
•To operate, maintain, secure, and improve the Website.
•To send you marketing or educational communications that you have consented to receive, and to manage your communication preferences.
•To understand how visitors use the Website so we can improve content, structure, and user experience.
•To detect, prevent, and respond to fraud, abuse, security incidents, or violations of our Terms of Service.
•To comply with applicable law and respond to lawful requests from regulators or law enforcement.
•For any other purpose disclosed to you at the time of collection, or with your consent.
We do not use personal information collected through the Website for automated decision-making that produces legal or similarly significant effects on you.
5. Legal Basis and Consent
Under Canadian privacy law, we rely on your consent (express or implied) to collect, use, and disclose personal information. By submitting information through the Website, you consent to our handling of that information as described in this Policy.
You may withdraw your consent at any time, subject to legal and contractual restrictions and reasonable notice. Withdrawing consent may limit our ability to provide you with information or services you have requested. To withdraw consent, contact our Privacy Officer at the details in Section 2.
For marketing emails, you may unsubscribe at any time using the unsubscribe link in any message or by contacting us directly. We will honour unsubscribe requests promptly as required by CASL.
6. How We Share Personal Information
We do not sell, rent, or trade personal information. We share personal information only as described below.
6.1 Service Providers
We share personal information with trusted third-party service providers who perform functions on our behalf — for example, website hosting, analytics, email delivery, scheduling, CRM, and form processing. These providers are permitted to use personal information only to perform services for us and are contractually required to protect it.
6.2 Legal and Regulatory
We may disclose personal information when we believe in good faith that disclosure is necessary: (a) to comply with applicable law, court order, subpoena, or lawful request from a regulator or law enforcement authority; (b) to enforce our Terms of Service or other agreements; (c) to protect the rights, property, or safety of rethinQ, our clients, or others; or (d) to investigate and prevent fraud or security incidents.
6.3 Business Transactions
If rethinQ is involved in a merger, acquisition, financing, reorganization, or sale of all or part of its assets, personal information may be transferred as part of that transaction. We will take reasonable steps to ensure the receiving party continues to handle personal information in a manner consistent with this Policy.
6.4 With Your Consent
We may share personal information in any other circumstance with your consent or at your direction.
7. Cookies and Similar Technologies
The Website uses cookies and similar technologies (such as pixels, tags, and local storage) to operate properly, remember your preferences, analyze usage, and improve our content.
7.1 Types of Cookies We Use
•Strictly necessary cookies — required for core functionality such as loading pages, managing sessions, and submitting forms. These cannot be turned off in our systems.
•Performance and analytics cookies — help us understand how visitors use the Website (for example, which pages are most viewed). This data is typically aggregated and does not identify individuals.
•Functionality cookies — remember preferences (such as language) to improve your experience on return visits.
•Marketing cookies — where used, these help us measure the effectiveness of campaigns and tailor content to audiences. We do not set marketing cookies without your consent where required by law.
7.2 Managing Cookies
Most browsers let you view, manage, delete, and block cookies. Disabling cookies may affect how the Website functions. Where required by law, we will present a cookie banner or preference centre on the Website that lets you accept, reject, or customize non-essential cookies.
8. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, to comply with legal and regulatory obligations, to resolve disputes, and to enforce our agreements.
Typical retention periods for Website data:
•Contact form submissions and discovery-call inquiries: up to 24 months, or longer where a business relationship develops.
•Newsletter and marketing list data: until you unsubscribe, and briefly thereafter to honour your preference.
•Analytics and aggregated usage data: up to 26 months in most cases, depending on the analytics provider.
•Records required to comply with tax, audit, or other legal obligations: as required by applicable law.
When personal information is no longer needed, we will securely delete, destroy, or de-identify it.
9. Security
We take the protection of personal information seriously and use administrative, technical, and physical safeguards appropriate to the sensitivity of the information we hold. These measures include access controls, encrypted connections (HTTPS), vetted service providers, and staff privacy training.
No method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security. If you believe your interaction with us is no longer secure, or if you have reason to believe your information has been compromised, please contact us immediately.
10. International Transfers
rethinQ is based in Alberta, Canada. Some of our service providers may store or process personal information in other jurisdictions (including the United States). When personal information is transferred outside of Canada, it may be subject to the laws of the receiving country, which may differ from Canadian privacy law and may allow government or law-enforcement access under certain circumstances.
We take reasonable steps — including contractual protections — to ensure that personal information receives a comparable level of protection wherever it is processed. You may contact our Privacy Officer for more information about specific transfer arrangements.
11. Your Privacy Rights
Subject to applicable law and reasonable exceptions, you have the right to:
•Access the personal information we hold about you.
•Request correction of inaccurate or incomplete information.
•Withdraw consent to our collection, use, or disclosure of your personal information (subject to legal and contractual restrictions).
•Request deletion of your personal information.
•Ask about how your personal information has been handled, including to whom it has been disclosed.
•File a complaint with us or with the applicable privacy regulator.
To exercise any of these rights, contact our Privacy Officer at [email protected]. We will respond within the timelines required by applicable law, typically within 30 days. We may need to verify your identity before acting on your request.
If you are not satisfied with our response, you may contact the Office of the Information and Privacy Commissioner of Alberta (oipc.ab.ca) or the Office of the Privacy Commissioner of Canada (priv.gc.ca).
12. Children
The Website is not directed to children under the age of 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact our Privacy Officer so we can take appropriate steps to remove it.
13. Third-Party Websites
The Website may contain links to third-party sites, platforms, and services. This Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy notices of any site you visit.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the Effective Date at the top of this Policy and, where appropriate, provide additional notice. The current version will always be posted at rethinq.ca. Your continued use of the Website after changes take effect constitutes your acknowledgement of the updated Policy.
15. Contact Us
If you have questions, concerns, or requests about this Privacy Policy or our privacy practices:
Privacy Officer — 2785046 ALBERTA INC. DBA rethinQ Solutions