Privacy Policy
Last Updated: January 2026
CASPAL (“CASPAL,” “we,” “us,” or “our”) is committed to protecting the privacy, confidentiality, and security of personal information. This Privacy Policy describes how we collect, use, disclose, retain, and safeguard information when you access or use our website (the “Website”).
By using this Website, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.
1. Scope and Applicability
This Privacy Policy applies solely to information collected through the CASPAL Website and related digital communications. It does not apply to information collected under client consulting agreements, which are governed by separate contractual confidentiality, data protection, and security provisions.
2. Information We Collect
a) Personal Information (Voluntarily Provided)
We may collect personal information that you voluntarily submit, including:
-
Full name
-
Business email address
-
Company name
-
Job title
-
Phone number
-
Information included in inquiries, forms, or correspondence
b) Automatically Collected Information
When you access the Website, we may automatically collect:
-
IP address
-
Browser type and version
-
Device and operating system information
-
Pages visited, timestamps, and navigation data
-
Referring and exit URLs
This information is collected for security, analytics, and operational integrity purposes.
3. Lawful Basis for Processing (GDPR)
For individuals located in the European Economic Area (EEA), United Kingdom, or Switzerland, CASPAL processes personal data under one or more of the following lawful bases:
-
Legitimate business interests (e.g., responding to inquiries, improving services)
-
Consent, where explicitly provided
-
Performance of pre-contractual or contractual obligations
-
Compliance with legal or regulatory obligations
4. How We Use Information
We use collected information strictly for legitimate business purposes, including:
-
Responding to inquiries and communications
-
Providing and improving Website functionality
-
Business development and professional correspondence
-
Website security, monitoring, and fraud prevention
-
Compliance with legal, regulatory, and contractual obligations
CASPAL does not use personal information for automated decision-making or profiling.
5. Cookies and Tracking Technologies
The Website may use cookies or similar technologies to:
-
Ensure Website functionality
-
Analyze usage patterns
-
Enhance security and performance
You may manage cookie preferences through your browser settings. Disabling cookies may impact Website functionality.
6. Disclosure of Information
CASPAL may disclose information only in limited and controlled circumstances:
-
To trusted service providers acting under contractual confidentiality and data protection obligations
-
To comply with applicable laws, regulations, subpoenas, or lawful requests
-
To protect CASPAL’s legal rights, operations, or security
-
In connection with a corporate transaction (e.g., merger, acquisition, restructuring), subject to confidentiality safeguards
CASPAL does not sell personal information.
7. Data Retention
Personal information is retained only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law, regulation, or contractual obligation.
8. Data Security and Enterprise Safeguards
CASPAL implements commercially reasonable administrative, technical, and organizational measures designed to protect personal information, including:
-
Access controls and least-privilege principles
-
Secure systems and encrypted communications where appropriate
-
Internal confidentiality obligations
-
Vendor due diligence and contractual safeguards
Despite these measures, no system can guarantee absolute security. CASPAL disclaims liability for unauthorized access beyond reasonable control.
9. GDPR Rights (EEA / UK / Switzerland)
If you are located in a GDPR-covered jurisdiction, you have the right to:
-
Access your personal data
-
Request correction or deletion
-
Restrict or object to processing
-
Request data portability
-
Withdraw consent where processing is based on consent
-
Lodge a complaint with a supervisory authority
Requests may be submitted using the contact details below.
10. CCPA / CPRA Rights (California Residents)
If you are a California resident, you have the right to:
-
Know what personal information is collected, used, or disclosed
-
Request deletion of personal information (subject to legal exceptions)
-
Correct inaccurate personal information
-
Opt out of the sale or sharing of personal information (CASPAL does not sell personal data)
-
Not be discriminated against for exercising privacy rights
Requests will be verified prior to fulfillment, as required by law.
11. International Data Transfers
Information collected may be processed or stored in jurisdictions outside your country of residence. Where required, CASPAL implements appropriate safeguards to ensure lawful data transfers, including contractual protections.
12. Third-Party Websites
The Website may contain links to third-party websites. CASPAL is not responsible for the privacy practices, security controls, or content of third-party sites. Accessing third-party sites is at your own risk.
13. Children’s Privacy
The Website is intended for business and professional use only and is not directed at individuals under the age of 18. CASPAL does not knowingly collect personal information from minors.
14. Changes to This Privacy Policy
CASPAL reserves the right to update this Privacy Policy at any time. Updates will be effective immediately upon posting to the Website. Continued use of the Website constitutes acceptance of the revised Privacy Policy.
15. Contact Information
For privacy-related inquiries, data access requests, or regulatory questions, contact:
Email: info@caspal.ca
