Privacy Policy

1. Introduction

This policy explains how I handle personal information collected through this website, which supports my independent consulting practice. I follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, in British Columbia, the Personal Information Protection Act (BC PIPA). Depending on where visitors are located, other Canadian provincial laws may also apply (for example, Quebec's Law 25). By using this website, you agree to the practices described here.

2. Information I collect

Information you give me. The website does not have a contact form. If you email me directly (at the address in Section 11), I receive the details you choose to provide — such as your name, email address, company, and the content of your message.

Information collected automatically. When you visit, I and my service providers may automatically collect technical information such as your IP address, browser and device type, pages viewed, referring website, and the dates and times of visits. This is gathered through server logs and cookies or similar technologies (see Section 6).

I do not intentionally collect sensitive personal information through this website, and I ask that you not send it to me through web forms.

3. How I use information

I use personal information to:

• respond to your inquiries and provide information you request;
• follow up about potential or ongoing consulting work;
• operate, maintain, secure, and improve the website;
• understand how the website is used, through analytics;
• comply with legal obligations.

I do not sell your personal information.

Consent. I rely on your consent to collect, use, and disclose personal information for these purposes, except where the law permits or requires otherwise. Consent may be express (for example, subscribing to updates) or implied by your use of the site. You may withdraw consent at any time, subject to legal or contractual limits — see Section 7.

4. When I share information

I share personal information only as needed to run the website or as permitted or required by law:

• Service providers. I use third parties to host the site and provide functions such as analytics, email delivery, and form handling. They may access personal information only to perform services for me and are required to protect it. See Section 5.
• Legal reasons. I may disclose information where required to comply with the law, respond to a lawful request, or protect my rights, safety, or property.
• Business transfers. If my practice is involved in a sale, merger, or transfer of assets, information may be transferred as part of that transaction, subject to appropriate protections.

5. Service providers and data location

I rely on the following categories of providers:

• Website hosting: Cloudflare Pages
• Analytics: Cloudflare Web Analytics (privacy-first, cookieless)

The website has no contact form and I do not operate a newsletter, so no form-handling or email-marketing services are used.

Where your information is stored. My website hosting and analytics are both provided by Cloudflare, a US-based company, and information may be processed outside Canada, including in the United States. When information is processed abroad, it may be subject to the laws of that country, including lawful access by its courts and authorities. I remain accountable for your information and require my providers to protect it.

6. Cookies and analytics

This website keeps cookies to a minimum. I use Cloudflare Web Analytics to understand how the site is used. It is privacy-first: it does not set cookies, does not collect your personal information, and does not track you across other websites. Because of this, the site does not use analytics or advertising cookies and does not require a cookie consent banner.

If the site is served through Cloudflare's network for security and performance, Cloudflare's infrastructure may set a small number of strictly necessary cookies — for example, to detect bots or protect the site from abuse. These are essential to delivering the site securely and are not used to track you. You can control or block cookies through your browser settings, though blocking strictly necessary cookies may affect how the site works.

I do not maintain a separate cookie policy, because the site does not use non-essential or tracking cookies. If that changes — for example, if I add embedded content or third-party tools that set cookies — I will update this policy.

7. Your rights

Subject to applicable law, you may:

• access the personal information I hold about you;
• correct information that is inaccurate or incomplete;
• withdraw consent at any time, where applicable;
• ask a question or make a complaint about how I handle your information.

To make a request, contact me using Section 11. I may verify your identity before responding, and I will respond within the timeframes required by law. If you are not satisfied with my response, you may contact the Office of the Privacy Commissioner of Canada (OPC) or, for matters within its jurisdiction, the Office of the Information and Privacy Commissioner for British Columbia (OIPC BC).

8. How long I keep information

I keep personal information only as long as needed for the purposes described here or as required by law. Details you send me by email are kept as long as needed to respond and for a reasonable period afterward, and technical logs are kept for a limited period.

9. Security

I use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information to protect it against loss and unauthorized access, use, or disclosure. No website or transmission method is completely secure. If a privacy breach creates a real risk of significant harm, I will notify affected individuals and the appropriate authorities as required by law.

10. Other matters

Children. This website is intended for a business audience and is not directed to children. I do not knowingly collect personal information from children.

Links to other websites. This site may link to third-party websites, including my professional profiles and any publications. I am not responsible for their content or privacy practices; please review their policies.

Changes to this policy. I may update this policy from time to time. I will revise the "Last updated" date and, where appropriate, provide notice. Continued use of the website after changes take effect means you accept the updated policy.

11. Contact

Questions, requests, or complaints about this policy or your personal information can be directed to me:

Sandra Kirsch
email
Sicamous, British Columbia

As a sole practitioner, I am the individual accountable for how personal information collected through this website is handled.