Northaris Group Inc. (“Northaris,” “we,” “us,” or “our”) is an Ontario-based company. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit northaris.com, contact us, receive services from us, or interact with our social channels. It is intended to reflect our obligations under applicable Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada’s Anti-Spam Legislation (CASL), and applicable provincial privacy requirements. It also describes how we address cross-border processing and the privacy rights that may apply when we serve clients outside Ontario or Canada.
1. Accountability and Privacy Officer
Northaris is responsible for personal information under its control. We have appointed a Privacy Officer to oversee compliance with this Policy and applicable privacy requirements. Our Privacy Officer can be contacted at info@northaris.com or at Northaris Group Inc., Suite V14–Unit 8, 407 Iroquois Shore Road, Oakville, Ontario.
2. Scope and Applicable Law
Our primary operations are based in Ontario. Ontario does not currently have a general private-sector privacy statute that replaces PIPEDA for our activities, so PIPEDA generally governs our commercial handling of personal information, particularly where information crosses provincial or national borders.
Where applicable, we also consider the privacy requirements of other Canadian jurisdictions. This includes Alberta and British Columbia private-sector privacy laws, Québec’s Act respecting the protection of personal information in the private sector, and Québec Law 25. If we provide services to individuals or organizations outside Canada, additional laws may apply depending on the circumstances, the location of the individual, the services requested, and the personal information involved.
3. Personal Information We Collect
We may collect information that you provide directly to us, including your name, business contact details, job title, company, industry, location, inquiry details, and information you provide through forms, meetings, events, or service discussions.
We may also collect limited technical information automatically when you use our website, such as IP address, device and browser information, operating system, pages viewed, referring URLs, and visit dates and times. We use cookies and similar technologies to operate and improve our website. You can manage cookies through your browser settings. Where required, we will seek consent before using non-essential cookies or similar technologies.
4. How We Use Personal Information
We collect and use personal information only for identified and reasonable purposes. These may include responding to inquiries, assessing service needs, delivering and supporting our services, communicating about an existing relationship, maintaining security, improving our website and services, meeting legal obligations, and protecting our rights and those of our clients.
We do not sell personal information. We will not use personal information for materially different purposes without notice and consent unless permitted or required by law.
5. Consent and Commercial Electronic Messages
We obtain consent for the collection, use, and disclosure of personal information as required by law. Consent may be express or implied where permitted. You may withdraw consent at any time, subject to legal, contractual, and operational limitations. We will explain the practical consequences of withdrawing consent when relevant.
Northaris complies with CASL. We send commercial electronic messages only where we have the required consent or another lawful basis under CASL. Our messages identify Northaris, include contact information, and provide an unsubscribe mechanism. We process unsubscribe requests within the time required by law.
6. How We Share Personal Information
We may disclose personal information to service providers that help us operate our business, such as website hosting, analytics, communications, security, professional advisers, and technology vendors. We require service providers to use personal information only for authorized purposes and to safeguard it appropriately.
We may also disclose information when required or permitted by law, to protect legal rights or safety, in connection with a corporate transaction, or with your consent.
7. Cross-Border and International Processing
Some of our service providers may process personal information outside Ontario or Canada, including in the United States or other jurisdictions. Information processed outside Canada may be subject to the laws of those jurisdictions and may be accessible to courts, law enforcement, or regulators there.
Before making cross-border transfers, we take reasonable steps to assess the transfer and apply contractual, technical, and organizational safeguards appropriate to the sensitivity of the information and the nature of the processing. Where Québec law applies, we will perform any required privacy impact assessment and put appropriate written protections in place before communicating personal information outside Québec.
8. Retention, Accuracy, and Safeguards
We limit collection to information reasonably necessary for the purposes described in this Policy. We retain personal information only as long as needed to meet those purposes, satisfy legal or contractual requirements, resolve disputes, and maintain appropriate records. When information is no longer required, we securely delete, destroy, or anonymize it.
We take reasonable steps to keep personal information accurate and current. We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information. No system is completely secure, but we maintain measures designed to reduce the risk of unauthorized access, use, disclosure, loss, or alteration.
9. Privacy Incidents
If we experience a privacy breach involving personal information, we will investigate, take steps to contain and remediate the incident, maintain records as required, and notify affected individuals and regulators when required by applicable law. Under PIPEDA, this includes notification where a breach creates a real risk of significant harm.
10. Access, Correction, and Other Rights
You may request access to, or correction of, the personal information we hold about you, subject to applicable legal exceptions. To make a request, contact our Privacy Officer at info@northaris.com. We will respond within the time required by applicable law.
Residents of Québec may have additional rights, including rights relating to access, correction, portability where applicable, and automated decision-making. Residents of Alberta or British Columbia may also have rights under their provincial private-sector privacy legislation. Individuals located outside Canada may have additional privacy rights depending on the laws that apply to the relevant relationship or service.
11. Children
Our services and website are intended for business audiences and are not directed to children. We do not knowingly collect personal information from children without appropriate authority or consent. If you believe a child has provided personal information to us, please contact our Privacy Officer.
12. Changes to This Policy
We may update this Policy to reflect changes in our practices, technology, legal requirements, or business operations. We will post the updated version on this page and revise the effective date. Where required, we will provide additional notice or obtain consent for material changes.
13. Questions and Complaints
For questions, access or correction requests, or privacy complaints, please contact our Privacy Officer at info@northaris.com or Northaris Group Inc., Suite V14–Unit 8, 407 Iroquois Shore Road, Oakville, Ontario.
If we cannot resolve your concern, you may have the right to contact the Office of the Privacy Commissioner of Canada at priv.gc.ca. Québec residents may also contact the Commission d’accès à l’information du Québec. Alberta and British Columbia residents may contact their respective provincial privacy commissioners where applicable.
