Privacy Policy

Personal information means information about an identifiable individual.

Depending on the circumstances, this may include information such as your name, email address, telephone number, business contact information, correspondence with us, billing information, technical information associated with your use of our website, and other information that can reasonably be linked to you.

Information that has been anonymized so that it can no longer reasonably identify an individual is not treated as personal information to the extent permitted by applicable law.

The information we collect depends on how you interact with Northfield Technology Partners.

We may use personal information for purposes including:

• Responding to inquiries and requests.
• Scheduling and conducting assessment calls and consultations.
• Understanding a prospective customer’s business needs.
• Providing technology audits, workflow assessments, technical consulting, software configuration, automation, support, and related services.
• Designing, configuring, maintaining, or supporting custom artificial intelligence systems and workflows.
• Communicating with customers about projects and services.
• Managing customer relationships.
• Processing payments, invoices, and business records.
• Operating, maintaining, securing, and improving our website and business systems.
• Diagnosing technical problems.
• Protecting against fraud, unauthorized activity, security threats, and misuse.
• Meeting legal, accounting, regulatory, contractual, and reporting requirements.
• Establishing, exercising, or defending legal rights.
• Sending marketing communications where permitted by applicable law.

We will not use personal information for a materially different purpose without obtaining any consent required by law.

Where consent is required, we seek to obtain consent that is appropriate to the nature, sensitivity, purpose, and circumstances of the collection, use, or disclosure.

Consent may be express or implied where permitted by law.

For example, when you contact us and provide your name and contact information, we may use that information to respond to your request.

You may withdraw your consent to future collection, use, or disclosure where consent is the applicable basis and where withdrawal is permitted by law.

Withdrawal of consent does not affect actions already taken with valid consent and may affect our ability to provide certain services.

There may also be circumstances where applicable law permits or requires us to collect, use, or disclose personal information without consent.

We may send commercial electronic communications where we have the consent or other legal authority required to do so.

You may withdraw your consent to marketing communications at any time by using the unsubscribe method contained in the communication or by contacting us at hello@northfieldtech.ca.

If you opt out of marketing communications, we may still send you non promotional messages reasonably required to manage an existing business relationship, respond to a request, administer a service, provide security information, or meet a legal obligation.

If you communicate with us by text message, we may collect your telephone number, the contents of your messages, and related communication information.

We may use this information to respond to your inquiries, coordinate services, schedule appointments, or communicate about an existing business relationship.

Where text messages constitute commercial electronic messages, we will handle those communications in accordance with applicable Canadian electronic messaging requirements.

Mobile telephone numbers and text messaging consent information will not be sold to third parties.

We may share information with service providers that are required to transmit or manage text messages on our behalf.

Some Northfield Technology Partners services may involve artificial intelligence systems, automated workflows, or third party artificial intelligence providers.

If personal information is processed through an artificial intelligence system as part of a client project, the information processed and the providers involved will depend on the nature of that engagement.

Where appropriate, we will seek to configure systems so that personal information provided to third party services is limited to what is reasonably required for the intended purpose.

Clients should not provide sensitive or confidential personal information to an artificial intelligence system unless that use has been reviewed and authorized for the applicable project.

Specific data handling requirements for custom artificial intelligence projects may be addressed in the applicable client agreement or statement of work.

We may work with third party companies that provide services supporting our business.

These may include providers of:

• Website hosting and infrastructure.
• Customer relationship management systems.
• Appointment scheduling.
• Email and communications.
• Analytics.
• Cloud storage.
• Software and business applications.
• Artificial intelligence services.
• Payment processing.
• Accounting and bookkeeping.
• Technical support and security.
• Professional services such as legal or accounting services.

Our current business systems may include services provided by HighLevel and Google.

These providers may process information on our behalf or receive information when you interact with features supported by their services.

Each third party may also be subject to its own privacy terms and data handling practices.

We seek to disclose personal information to service providers only where reasonably required for the services they provide.

We may disclose personal information:

• To employees, contractors, consultants, and service providers who require access for legitimate business purposes.
• To technology providers involved in providing or supporting our services.
• With a customer’s authorization or at the customer’s direction.
• Where required or permitted by law, legal process, court order, regulatory requirement, or lawful government request.
• Where reasonably necessary to investigate fraud, misuse, security incidents, or unlawful activity.
• Where reasonably necessary to establish, exercise, or defend legal rights.
• In connection with a proposed or completed sale, merger, financing, restructuring, acquisition, or transfer of all or part of our business or assets, subject to applicable legal requirements.

We do not sell personal information as part of our ordinary business activities.

5014051 Ontario Inc. is based in Ontario, Canada.

Some service providers we use may store or process personal information outside Canada, including in the United States or other jurisdictions.

When personal information is processed outside Canada, it may be subject to the laws of the jurisdiction in which it is stored or processed and may be accessible to courts, law enforcement agencies, national security authorities, or other governmental bodies under applicable law.

Where appropriate, we take reasonable steps to select service providers and contractual arrangements designed to protect personal information transferred outside Canada.

You may contact us if you have questions about the processing or storage of your personal information outside Canada.

We use administrative, technical, and organizational safeguards that we consider appropriate to the sensitivity of the personal information under our control.

These measures may include access controls, account security practices, contractual confidentiality requirements, system security measures, and restrictions on who may access personal information.

No electronic system, network, transmission method, or storage system can be guaranteed to be completely secure.

If we become aware of a privacy breach involving personal information under our control, we will assess and respond to the incident in accordance with applicable law.

Where required, we will notify affected individuals and the appropriate regulatory authority.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, subject to applicable legal, contractual, accounting, security, and record keeping requirements.

Retention periods may vary depending on the nature of the information and our relationship with you.

When personal information is no longer required, we may securely delete, destroy, or anonymize it, subject to any continuing legal or contractual requirements.

Information contained in backups may remain for a limited period until it is replaced or securely removed through normal backup processes.

Depending on the law that applies to your personal information, you may have rights concerning the information we hold about you.

These may include the right to:

• Ask whether we hold personal information about you.
• Request access to personal information under our control.
• Ask how your personal information has been used.
• Ask to whom your personal information has been disclosed.
• Request correction of inaccurate or incomplete personal information.
• Withdraw consent where the collection, use, or disclosure is based on consent and withdrawal is legally permitted.
• Challenge our compliance with applicable privacy requirements.

We may need to verify your identity before responding to a privacy request.

Certain legal exceptions may restrict our ability to provide access to particular information.

Where PIPEDA applies, we will generally respond to an access request within 30 days unless an extension is permitted by law.

Access will generally be provided at no cost or minimal cost. If an exceptional request would involve a permitted fee, we will inform you of the approximate cost before proceeding.

If you believe personal information we hold about you is inaccurate or incomplete, you may contact us and request a correction.

We may ask for information reasonably necessary to verify the requested correction.

Where required by applicable law, we will amend inaccurate or incomplete information and may provide corrected information to third parties that received the original information where appropriate.

If a disagreement about the accuracy of information cannot be resolved, we may record the substance of the disagreement where required by law.

If you have a question or concern about our handling of personal information, please contact our Privacy Officer at hello@northfieldtech.ca.

We will review privacy complaints and respond as reasonably appropriate in the circumstances.

If you are not satisfied with our response and PIPEDA applies, you may have the right to contact the Office of the Privacy Commissioner of Canada.

Other provincial, territorial, state, or national privacy regulators may have jurisdiction depending on the circumstances.

Our website and services are intended for businesses and adults and are not directed to children.

We do not knowingly seek to collect personal information directly from children through our website.

If we learn that personal information relating to a child has been collected in circumstances where it should not have been, we will take reasonable steps to address the matter.

Our website may contain links to websites, software, platforms, or services operated by third parties.

Their privacy practices are governed by their own policies and agreements.

5014051 Ontario Inc. is not responsible for the privacy practices of a third party service that operates independently from us.

We encourage you to review the applicable privacy information before providing personal information directly to a third party.

If 5014051 Ontario Inc. is involved in a proposed or completed business transaction such as a sale, merger, financing, restructuring, or transfer of business assets, personal information may be disclosed or transferred as permitted by applicable law.

Where required, appropriate safeguards will apply to information disclosed as part of such a transaction.

We may update this Privacy Policy when our services, technology, service providers, business practices, or legal obligations change.

The current version will be posted on our website with its effective date.

If a change materially affects the way we collect, use, or disclose personal information, we will provide any notice or obtain any consent required by applicable law.

Questions, access requests, correction requests, complaints, or other privacy related inquiries may be directed to: