Privacy and Data Protection Policy

Last updated: August 16, 2026. This policy explains how Gatestone Digital collects, uses, discloses, retains, and protects personal information through this website and related business communications.

1. Scope and accountability

Gatestone Digital is responsible for personal information under its control. Privacy practices are designed around applicable Canadian privacy requirements, including the Personal Information Protection and Electronic Documents Act and substantially similar provincial laws where they apply. A designated Privacy Officer oversees questions, requests, and complaints concerning personal information.

2. Personal information collected

Information may include a name, business email address, telephone number, company or role information, subject line, and message content submitted through the Contact page. The website may also collect technical information such as an IP address, browser type, device type, operating system, pages viewed, referral source, approximate location, date and time of access, and interactions with website features. Gatestone Digital does not request sensitive personal information through general website forms. Visitors should not submit financial, health, government identification, or other sensitive information unless specifically requested through an approved secure channel.

3. How information is collected

Personal information is collected directly when a visitor submits a form, sends a message, requests information, communicates with Gatestone Digital, or engages in a business relationship. Limited information is also collected automatically through server logs, cookies, analytics tools, and security technologies. Information may be received from business partners, event organizers, public professional sources, or affiliated Gatestone entities where permitted by law.

4. Purposes for using information

Information is used to respond to inquiries, evaluate business needs, provide requested information, manage prospective and existing business relationships, operate and improve the website, understand site performance, maintain security, prevent misuse, meet legal and regulatory obligations, and protect Gatestone Digital, its clients, and website visitors. Information may also be used for business communications when consent exists or another lawful basis applies.

5. Consent and choices

Consent is obtained in a form appropriate to the sensitivity of the information and the purpose of collection. Consent may be express or implied where permitted by law. A person may withdraw consent, subject to legal or contractual limits and reasonable notice. Withdrawal may affect Gatestone Digital’s ability to respond to a request or provide a service. Optional marketing communications can be declined at any time through the unsubscribe method included in the message or through the Contact page.

6. Cookies and analytics

The website may use essential cookies, preference cookies, analytics technologies, and similar digital markers. These tools support security, remember settings, measure traffic, and show how visitors use the site. Browser settings can be used to block or delete cookies, although some website features may not function as intended. Analytics information is reviewed in aggregate where practical and is not used to make decisions about an individual.

7. Disclosure and service providers

Personal information may be disclosed to affiliated Gatestone entities and to service providers that support website hosting, forms, communications, analytics, information technology, cybersecurity, customer relationship management, and professional services. These parties receive only the information reasonably required for their work and are expected to protect it. Information may also be disclosed when required or permitted by law, to respond to lawful requests, to investigate misuse or security events, or in connection with a proposed business transaction. Gatestone Digital does not sell personal information.

8. Cross-border processing

Service providers or affiliated entities may process personal information outside the province or country where it was collected, including in Canada and the United States. Information handled in another jurisdiction may be subject to the laws of that jurisdiction and may be accessible to courts, law enforcement, or national security authorities. Contractual, organizational, and technical measures are used to require an appropriate level of protection.

9. Retention

Personal information is retained only for as long as reasonably required to fulfil the identified purposes, support legitimate business and legal needs, resolve disputes, maintain security, and meet retention obligations. Information that is no longer required is securely deleted, destroyed, or anonymized according to applicable practices.

10. Safeguards

Gatestone Digital uses administrative, technical, and physical safeguards appropriate to the sensitivity and volume of the information. Measures may include access controls, authentication, encryption, monitoring, secure configuration, employee training, vendor controls, and incident response procedures. No internet transmission or storage system can be guaranteed to be completely secure, but reasonable steps are taken to reduce foreseeable risks.

11. Access, correction, and privacy rights

Subject to applicable law, an individual may request access to personal information held by Gatestone Digital, ask how it has been used or disclosed, challenge its accuracy, request correction, withdraw consent, or raise a concern about privacy practices. Additional rights may apply based on the individual’s jurisdiction. Identity may need to be verified before a request is completed, and access may be limited where the law permits or requires.

12. Commercial electronic messages

Commercial electronic messages are sent only where consent or another lawful basis exists. Messages identify the sender and include a practical way to unsubscribe. Unsubscribe requests are processed within the time required by applicable law.

13. Children

This website is intended for business audiences and is not directed to children under 13. Gatestone Digital does not knowingly collect personal information from children through the website. Information identified as having been submitted by a child will be reviewed and removed where appropriate.

14. External websites

The website may link to third-party websites or services. Their privacy practices are governed by their own policies. Gatestone Digital is not responsible for the privacy, security, or content practices of external services.

15. Policy changes

This policy may be updated to reflect changes in technology, services, legal requirements, or privacy practices. The current version and effective date will be posted on this page. Material changes will be highlighted where appropriate.

16. Contact and complaints

Privacy questions, access requests, correction requests, or complaints can be submitted through the Gatestone Digital Contact page. The subject line should include “Privacy Request” so the matter can be directed to the Privacy Officer. Concerns will be reviewed and answered within the time required by applicable law.