Privacy Policy

1. Who We Are

Stratusight is a Canadian leadership and strategy advisory firm incorporated and operating in the Province of Québec, Canada. Our principal place of business is located in Vaudreuil-Dorion, Québec.

For the purposes of this Privacy Policy, Stratusight acts as the organization responsible for the personal information it collects, uses, and discloses in the course of its commercial activities. References to "we," "us," or "our" refer to Stratusight.

Questions or concerns regarding this Privacy Policy or our data practices should be directed to our Privacy Officer using the contact information provided in Section 13 of this Policy.

2. Information We Collect

We collect personal information only to the extent necessary to deliver our services, respond to inquiries, and fulfill our legal obligations. The types of personal information we may collect include:

Information You Provide Directly

• • Full name and professional title
• • Business and personal email addresses
• • Phone numbers and mailing addresses
• • Organization name, industry, and role information
• • Information submitted through contact forms, inquiry requests, or consultation bookings
• • Communications you send to us, including emails, messages, and meeting notes
• • Payment information processed through secure third-party payment processors (we do not store full payment card details)

Information Collected Automatically

• • IP address, browser type, and device information when you visit our website
• • Pages visited, time spent, and navigation patterns
• • Referring URLs and search terms used to reach our site
• • Cookie and tracking technology data — see Section 8 for details

Information from Third Parties

• • Publicly available professional information (e.g., LinkedIn profiles) in the context of business development
• • Referrals from existing clients or professional contacts

3. How We Use Your Information

Stratusight uses your personal information for the following purposes:

• • Service Delivery: To provide advisory, consulting, and related services you have engaged us to perform
• • Client Communication: To respond to your inquiries, schedule meetings, and maintain ongoing client relationships
• • Business Operations: To manage contracts, process invoices, and maintain our internal records
• • Marketing and Insights: To send newsletters, thought leadership content, and service updates to those who have opted in or with whom we have an existing business relationship, in compliance with Canada's Anti-Spam Legislation (CASL)
• • Website Improvement: To analyze how our website is used and improve the user experience
• • Legal Compliance: To meet our obligations under applicable Canadian law, including tax, corporate, and regulatory requirements
• • Security: To detect, prevent, and respond to fraud, unauthorized access, or other harmful activity

4. Legal Basis for Processing

Under PIPEDA and Québec Law 25, Stratusight relies on the following legal bases for collecting and using your personal information:

• • Express or Implied Consent: When you contact us, engage our services, or subscribe to our communications
• • Contractual Necessity: To fulfill the terms of a service agreement or consulting engagement
• • Legitimate Business Interest: For internal analytics, security, and business development activities where your interests are not overridden
• • Legal Obligation: Where required by Canadian federal or provincial law

5. Disclosure of Your Information

Stratusight does not sell, rent, or trade your personal information. We may share your information only in the following limited circumstances:

• • Service Providers: Third-party vendors who assist us in delivering services (e.g., cloud hosting, email platforms, accounting software). These providers are contractually bound to protect your information and may not use it for their own purposes
• • Professional Advisors: Lawyers, accountants, or auditors, subject to confidentiality obligations
• • Legal Requirements: Where required by law, court order, or government authority with jurisdiction over Stratusight
• • Business Transactions: In the event of a merger, acquisition, or sale of assets, with appropriate privacy protections in place
• • With Your Consent: In any other circumstances where you have given explicit authorization

6. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Specifically:

• • Client engagement records are retained for a minimum of seven (7) years following the conclusion of an engagement, in accordance with Canadian tax and corporate record-keeping requirements
• • Contact and inquiry records are retained for up to two (2) years from the date of last contact, unless an ongoing relationship exists
• • Marketing subscription data is retained until you unsubscribe or withdraw consent
• • Website analytics data is retained in aggregated or anonymized form for up to twenty-four (24) months

7. Your Privacy Rights

Under PIPEDA and Québec Law 25, you have the following rights with respect to your personal information:

• • Right of Access: To request a copy of the personal information we hold about you
• • Right to Correction: To request that inaccurate or incomplete information be corrected
• • Right to Withdraw Consent: To withdraw consent for non-essential uses of your information at any time
• • Right to Erasure (Québec): To request deletion of your personal information where it is no longer necessary for the purposes collected, subject to legal retention obligations
• • Right to Data Portability (Québec): To receive your personal information in a structured, commonly used format
• • Right to Lodge a Complaint: To file a complaint with the Office of the Privacy Commissioner of Canada (OPC) or the Commission d'accès à l'information du Québec (CAI)

8. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve functionality and understand how visitors use our site. We use the following types:

• • Essential Cookies: Required for basic website functionality. These cannot be disabled without affecting site performance
• • Analytics Cookies: Used to collect aggregated, anonymized data about website usage patterns (e.g., Google Analytics or equivalent)
• • Preference Cookies: Used to remember your settings and preferences across visits

9. Cross-Border Data Transfers

Some of our service providers are located outside of Canada, which may result in your personal information being processed in other jurisdictions, including the United States. When this occurs, your information may be subject to the laws of that jurisdiction, including lawful access by government authorities.

We take reasonable steps to ensure that service providers outside Canada provide a comparable level of protection to your personal information. By using our services, you acknowledge and consent to the potential transfer of your information to other jurisdictions for these limited purposes.

10. Security of Your Information

Stratusight implements administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:

• • Encrypted data transmission (TLS/SSL) across all digital channels
• • Access controls limiting information to authorized personnel
• • Regular review of our security practices and third-party service provider agreements
• • Secure disposal of personal information when no longer required

11. Children's Privacy

Our services are directed to business professionals and are not intended for individuals under the age of 16. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us immediately and we will take appropriate steps to delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or regulatory requirements. When we make material changes, we will update the effective date at the top of this Policy and, where appropriate, notify you by email or through a notice on our website.

Your continued use of our services following the posting of changes constitutes your acceptance of those changes. We encourage you to review this Policy periodically.

13. How to Contact Us

For questions, concerns, or to exercise your privacy rights, please contact our Privacy Officer:

You also have the right to file a complaint with a supervisory authority:

• • Office of the Privacy Commissioner of Canada (OPC) · priv.gc.ca
• • Commission d'accès à l'information du Québec (CAI) · cai.gouv.qc.ca