Privacy Policy

Introduction

Northvale is committed to protecting the privacy and security of personal information provided to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage our consulting services.

Last Updated: January 15, 2026

For questions about this policy or our privacy practices, please contact us at [email protected].

Information We Collect

Personal Information You Provide

We collect personal information that you voluntarily provide to us when you:

• Submit inquiries through our contact form (name, email address, phone number, message content)
• Request consulting services or enter into engagement agreements
• Communicate with us via email, phone, or other channels
• Subscribe to newsletters or updates (if applicable)

Information Collected Automatically

When you visit our website, we may automatically collect certain information about your device and browsing activity, including:

• IP address and general location information
• Browser type and version
• Device type and operating system
• Pages viewed and time spent on our site
• Referring website addresses

Cookies and Similar Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. For detailed information about our cookie practices, please refer to our Cookie Policy.

How We Use Your Information

We use the personal information we collect for the following purposes:

Service Delivery and Communication

• Responding to your inquiries and providing requested information
• Delivering consulting services as outlined in engagement agreements
• Communicating about your projects, services, or account
• Sending administrative information such as engagement updates

Website Improvement and Analytics

• Analyzing website usage patterns to improve functionality and content
• Understanding user preferences and behavior
• Identifying technical issues and maintaining website security

Legal and Compliance

• Complying with applicable laws and regulations
• Protecting our legal rights and preventing misuse of our services
• Fulfilling contractual obligations

Legal Basis for Processing

Under Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA), we process your personal information based on:

• Consent: You have provided explicit or implied consent for specific purposes
• Contractual Necessity: Processing is necessary to fulfill our consulting engagement agreements
• Legitimate Interests: Processing is necessary for our legitimate business operations, provided it does not override your privacy rights
• Legal Obligations: Processing is required to comply with applicable laws and regulations

Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers

We may share information with third-party service providers who assist us in operating our website, conducting our business, or serving our clients. These providers include:

• Website hosting and maintenance services
• Email communication platforms
• Analytics and performance monitoring services
• Professional advisors (legal, accounting, insurance)

All service providers are contractually obligated to maintain the confidentiality and security of your personal information.

Legal Requirements

We may disclose your information when required by law, court order, or other legal process, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest using industry-standard protocols
• Secure storage systems with restricted access controls
• Regular security assessments and updates
• Employee training on data protection and confidentiality
• Secure disposal procedures for information no longer needed

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot provide absolute security.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Retention periods vary based on:

• The nature of the information and purpose for collection
• Contractual obligations and business requirements
• Legal, regulatory, or professional standards
• Potential legal claims and statute of limitations periods

Typical retention periods include:

• Contact form inquiries: 2 years from last communication
• Client engagement records: 7 years following engagement completion
• Website analytics data: 24 months

Your Privacy Rights

Under Canadian privacy law, you have the following rights regarding your personal information:

Right to Access

You have the right to request access to the personal information we hold about you and receive a copy of that information.

Right to Correction

You may request that we correct inaccurate or incomplete personal information.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time. This will not affect the lawfulness of processing prior to withdrawal.

Right to Erasure

You may request deletion of your personal information, subject to legal and contractual retention requirements.

Right to Lodge a Complaint

You have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada if you believe we have not complied with applicable privacy laws.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without appropriate consent, we will delete that information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated policy on this page with a revised "Last Updated" date. Significant changes will be communicated through prominent notice on our website or direct communication with active clients.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us: