No. The site does not use Google Analytics, Facebook Pixel, Hotjar, FullStory, Matomo, Plausible, or any other third-party analytics or behavioural-tracking tool. The only automatically collected data is the standard server log (IP, request, response, timestamp) that every web server generates by default, and the only first-party cookies are the theme-preference cookie described in the cookies section.
LEGAL
Privacy Policy
What we collect, why, how long we keep it, and the choices you have.
On this page
- Top of page
- The shape of what we collect
- What personal information we collect, and why
- Cookies and similar technologies
- How long we keep your information
- Your rights over your information
- International transfers
- How we protect your information
- AI-assistive tooling
- Questions this page answers
- Changes to this policy
- Contact
§ 01 ·
It explains what personal information we collect when you use the site, what we do with it, how long we keep it, and the rights you have over it.
We have written this policy in plain language on purpose. Legal copy is often a wall of qualifiers that protects the writer more than it informs the reader. We would rather be useful to the reader and accurate than clever and opaque. If anything below is unclear, write to us at the address at the bottom of the page and we will rewrite the relevant section.
The policy applies to information collected through this site only. It does not apply to information collected in the course of a client engagement, which is governed by a separate Master Services Agreement, Statement of Work, and any data-processing addendum attached to those documents. If you are a client, those documents control; this page is for the public site.
§ 02 ·
The shape of what we collect
A summary of the categories of personal information this site collects. The full description of each category, why it is collected, how long it is kept, and the legal basis is in the section that follows.
1
category of information you provide to us directly (the contact form)
your input
0
categories of information we collect about you automatically beyond standard server logs
no tracking pixels
0
third-party advertising or marketing cookies on this site
no retargeting
30 days
is the default retention window for the contact-form message, extendable on request
retention default
§ 03 ·
What personal information we collect, and why
The site collects personal information in three categories.
1. Information you provide to us directly. The site has one form: the contact form on the main page. When you submit it, we receive the name, email address, organisation, and message text you typed, plus the timestamp of the submission. We use this information for the purpose you sent it — to respond to your message, to scope a possible engagement, or to answer a question about our work. The legal basis is your consent, given by the act of submission. We do not add the contact information to a marketing list, and we do not share it with any third party.
2. Information collected automatically by the web server. The site is served from Amazon Web Services (S3 + CloudFront). Like virtually every web server in the world, the server records each request: the IP address, the resource requested, the response status, the User-Agent string, and the timestamp. We use these records to operate the site (debugging, capacity planning, identifying abusive traffic) and to detect and respond to security incidents. The logs are retained for 30 days and then deleted. They are not joined to any other dataset about you and are not used for any profiling or marketing purpose. The legal basis is our legitimate interest in keeping the site operational and secure.
3. Information from third-party services we use to run the site. We use Amazon Web Services to host the site, and a transactional email provider to send our reply to you when you submit the contact form. Both of these services process information on our behalf under a data-processing agreement. AWS is documented at aws.amazon.com/compliance. We do not use Google Analytics, Facebook Pixel, Hotjar, FullStory, or any other third-party behavioural analytics or advertising service on this site.
§ 04 ·
Cookies and similar technologies
The site sets a small number of cookies, all of them first-party and strictly functional.
A theme preference cookie stores whether you have chosen the light or dark theme so the choice persists across page loads. It expires after 12 months.
That is the complete list. We do not use analytics cookies, advertising cookies, or third-party tracking cookies.
§ 05 ·
How long we keep your information
Contact-form submissions are kept in the inbox of the person they were routed to for as long as is needed to respond and (if the conversation continues) to retain the thread of correspondence. If the conversation does not continue, the email is deleted within 30 days. If the conversation continues into a client engagement, the email moves under the engagement's retention schedule, which is set by the engagement documents.
Server logs are retained for 30 days, then deleted.
Backups of the contact-form inbox follow the standard retention of the email service in use; if you would like the specific retention window in writing, write to us at the address below.
§ 06 ·
Your rights over your information
You have the right to:
- Access the personal information we hold about you.
- Correct information that is inaccurate or incomplete.
- Delete information that we are not required to keep.
- Withdraw consent at any time, where the legal basis for processing is your consent.
- Lodge a complaint with a data-protection authority. In Canada, the relevant authority is the Office of the Privacy Commissioner of Canada (priv.gc.ca). In the European Economic Area, the relevant authority is the supervisory authority for your country; a list is published at edpb.europa.eu.
To exercise any of these rights, write to us at the address at the bottom of the page. We will respond within 30 days.
§ 07 ·
International transfers
The site is hosted on infrastructure operated by Amazon Web Services, which may process your information in regions outside of your home country. AWS publishes its data-residency commitments at aws.amazon.com/compliance/data-privacy. The email service we use to reply to contact-form submissions is also a third-party service; the relevant commitments are available on request.
Where information is transferred outside your home jurisdiction, we rely on the standard contractual clauses published by the European Commission, or on the recipient's equivalent data-protection commitments, as the legal basis for the transfer.
§ 08 ·
How we protect your information
The site is served over HTTPS only. The contact form posts its data over an authenticated endpoint. Access to the contact-form inbox is limited to the people who need it to respond to your message. The site itself is served from a versioned S3 bucket with CloudFront in front; an attacker who compromises one piece of the deployment does not automatically gain the ability to read your message.
No system is perfectly secure. If you have discovered a security issue with this site, please write to us at the address below before disclosing it publicly; we will respond within 5 business days and will not pursue legal action against good-faith security research.
§ 09 ·
AI-assistive tooling
We use AI-assistive tools in the course of our work and in the operation of this site. The specific ways these tools apply to the site are:
- Content drafting. Some of the prose on the public site was drafted with the assistance of an AI tool, then edited and reviewed by a person before publication. The text on this page in particular has been reviewed by a person.
- Inbox triage. When a contact-form message arrives, the person who reads it may use an AI tool to summarise a long message or to draft a reply. The tool does not send the reply; a person reviews and sends it. The contents of contact-form messages are not used to train any model.
We do not sell, share, or feed any personal information collected through this site to a third-party AI service for the purpose of model training.
§ 10 ·
Questions this page answers
The questions we hear most often, in the order they tend to come up.
It stays in the inbox of the person who replied, in the normal course of correspondence. If the conversation does not continue, the email is deleted within 30 days. If the conversation continues into a client engagement, the email moves under the engagement's retention schedule, which is set by the engagement documents.
No. The site does not run a mailing list, and submitting the contact form does not enrol you in one. If we want to share something we think is relevant with the people who have written to us, we send a one-off email from a person, not a list, and you can opt out at any time by replying.
The site is operated from Canada. The baseline law that applies is the Personal Information Protection and Electronic Documents Act (PIPEDA), the federal Canadian private-sector privacy law. Where you are located in a jurisdiction with stronger or more specific rights, for example, the European Economic Area, the United Kingdom, California, or Quebec, we extend those rights to you as a matter of policy, on the same terms as a resident of that jurisdiction would have them.
Write to us at the address at the bottom of the page. Include enough information for us to identify you (typically the email address you used when you wrote to us) and the right you would like to exercise. We will respond within 30 days.
We will update the policy when our practices change, and we will change the last updated date at the bottom of the page so the change is visible. For material changes (a new category of data collected, a new third-party service in use, a change to retention windows) we will also include a note at the top of the page for at least 30 days. We will not silently widen the scope of what we collect or share.
§ 11 ·
Changes to this policy
We may update this policy from time to time. The current version is always at this URL. The date the policy was last updated is at the bottom of the page.
For material changes, we will add a note at the top of the page for at least 30 days. A material change includes a new category of personal information collected, a new third-party service receiving information, a change in the retention window, or a change in the legal basis for processing.
§ 12 ·
Contact
The data controller for this site is NOETRONIQ Strategic Initiatives Inc., operating from Canada.
For privacy questions, requests, or complaints, write to:
Email: info@noetroniq.com
Subject line prefix: Privacy -
We will acknowledge receipt within 5 business days and will respond substantively within 30 days.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca, or with the supervisory authority in your jurisdiction.