Privacy Policy

This Privacy Policy explains how DataSmart (datasmart.ca) (“DataSmart,” “we,” “our,” or “us”) collects, uses, discloses, and safeguards personal and business information obtained through our digital platforms, professional services, and customer interactions (collectively, the “Services”). This Policy is designed to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA), and applicable provincial privacy statutes including Alberta’s Personal Information Protection Act (PIPA).

1. Information We Collect

We collect information necessary to deliver and improve our Services. This may include:

• Personal Information: names, email addresses, phone numbers, billing addresses, and account credentials provided during inquiries, purchases, or consultations.
• Business Information: company names, social media handles, websites, advertising data, analytics metrics, and service preferences.
• Technical Data: IP addresses, browser type, device identifiers, access times, referring URLs, and pages viewed—collected automatically for analytics and security purposes.
• Communications: emails, chat transcripts, forms, or messages submitted through our website or client portals.

2. How We Use Information

DataSmart uses the information we collect to:

• Provide, manage, and improve our Services and client experience.
• Respond to inquiries, provide customer support, and deliver requested materials.
• Generate reports, dashboards, and insights for clients under contractual engagement.
• Conduct internal audits, data analysis, and quality assurance activities.
• Comply with legal, regulatory, or contractual obligations.
• Send service updates, billing notices, or marketing communications (with opt-out capability under CASL).

3. Legal Basis for Processing

Our processing of personal data is grounded in one or more of the following legal bases:

• Your express consent (e.g., by submitting forms or signing agreements).
• Performance of a contract between you and DataSmart.
• Compliance with applicable Canadian laws or lawful requests.
• Our legitimate business interests, such as improving operations and ensuring network security.

4. Data Retention

We retain information only as long as necessary to fulfill the purposes for which it was collected or to comply with legal, accounting, or reporting requirements. Data is securely deleted or anonymized once retention periods expire. Clients may request data deletion at any time, subject to legal or contractual obligations.

5. Data Sharing and Disclosure

DataSmart does not sell personal information to third parties. We may share data only under the following circumstances:

• Service Providers: With trusted third-party vendors (e.g., hosting providers, analytics tools, email services) who assist in delivering Services under strict confidentiality obligations.
• Legal Compliance: When required by law, subpoena, or government request.
• Business Transfers: In the event of a merger, acquisition, or asset sale, information may be transferred under equivalent privacy safeguards.

6. International Data Transfers

While DataSmart primarily stores data in Canada, certain cloud or analytic systems may process data in other jurisdictions, including the United States. We ensure that all transfers are protected under contractual safeguards consistent with Canadian privacy standards.

7. Security Measures

We employ administrative, physical, and technical safeguards to protect information against unauthorized access, loss, or misuse. This includes encryption, secure data centers, multi-factor authentication, and access controls. However, no system is infallible; by using our Services, you acknowledge inherent risks of digital communications and agree that DataSmart is not liable for breaches beyond its reasonable control.

8. Cookies and Analytics

Our website may use cookies, beacons, or similar technologies to enhance user experience and analyze traffic. Analytics may be conducted through privacy-respecting tools such as Matomo or Google Analytics. You can control or disable cookies through your browser settings, though doing so may limit website functionality.

9. Marketing and Communication Preferences

We may send emails or updates regarding new services, promotions, or company news. Under Canada’s Anti-Spam Legislation (CASL), you may unsubscribe at any time using the “unsubscribe” link provided in our messages or by contacting support@datasmart.ca.

10. Your Rights

Under Canadian privacy law, you have the right to:

• Access and obtain a copy of your personal information held by DataSmart.
• Request correction of inaccurate or incomplete information.
• Withdraw consent to processing (where applicable).
• Request deletion of personal information, subject to legal limitations.

To exercise these rights, please contact our Privacy Officer using the details below.

11. Data Breach and Notification

In the unlikely event of a data breach posing a real risk of significant harm, DataSmart will promptly notify affected individuals and the Office of the Privacy Commissioner of Canada (OPC), in accordance with PIPEDA requirements. Incident records are maintained for accountability and continuous improvement.

12. Children’s Privacy

DataSmart’s Services are directed toward businesses and adults of legal age. We do not knowingly collect or process data from minors under 16 years of age. If you believe a child has provided us with personal information, please contact us immediately to request removal.

13. Updates to This Policy

DataSmart may amend this Privacy Policy from time to time to reflect technological, regulatory, or business changes. Revised versions will be posted on our website with a new effective date. Continued use of our Services following such updates constitutes acceptance of the revised Policy.

14. Contact Information

Questions, concerns, or privacy-related requests may be addressed to: DataSmart Privacy Officer
Email: support@datasmart.ca
Telephone: 1-877-367-1707
Mailing address available upon written request.