top of page

Privacy Policy

Last Updated: January 2026

CASPAL (“CASPAL,” “we,” “us,” or “our”) is committed to protecting the privacy, confidentiality, and security of personal information. This Privacy Policy describes how we collect, use, disclose, retain, and safeguard information when you access or use our website (the “Website”).

By using this Website, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.

1. Scope and Applicability

This Privacy Policy applies solely to information collected through the CASPAL Website and related digital communications. It does not apply to information collected under client consulting agreements, which are governed by separate contractual confidentiality, data protection, and security provisions.

2. Information We Collect

a) Personal Information (Voluntarily Provided)

We may collect personal information that you voluntarily submit, including:

  • Full name

  • Business email address

  • Company name

  • Job title

  • Phone number

  • Information included in inquiries, forms, or correspondence

b) Automatically Collected Information

When you access the Website, we may automatically collect:

  • IP address

  • Browser type and version

  • Device and operating system information

  • Pages visited, timestamps, and navigation data

  • Referring and exit URLs

This information is collected for security, analytics, and operational integrity purposes.

3. Lawful Basis for Processing (GDPR)

For individuals located in the European Economic Area (EEA), United Kingdom, or Switzerland, CASPAL processes personal data under one or more of the following lawful bases:

  • Legitimate business interests (e.g., responding to inquiries, improving services)

  • Consent, where explicitly provided

  • Performance of pre-contractual or contractual obligations

  • Compliance with legal or regulatory obligations

 

4. How We Use Information

We use collected information strictly for legitimate business purposes, including:

  • Responding to inquiries and communications

  • Providing and improving Website functionality

  • Business development and professional correspondence

  • Website security, monitoring, and fraud prevention

  • Compliance with legal, regulatory, and contractual obligations

CASPAL does not use personal information for automated decision-making or profiling.

 

5. Cookies and Tracking Technologies

The Website may use cookies or similar technologies to:

  • Ensure Website functionality

  • Analyze usage patterns

  • Enhance security and performance

You may manage cookie preferences through your browser settings. Disabling cookies may impact Website functionality.

 

6. Disclosure of Information

CASPAL may disclose information only in limited and controlled circumstances:

  • To trusted service providers acting under contractual confidentiality and data protection obligations

  • To comply with applicable laws, regulations, subpoenas, or lawful requests

  • To protect CASPAL’s legal rights, operations, or security

  • In connection with a corporate transaction (e.g., merger, acquisition, restructuring), subject to confidentiality safeguards

CASPAL does not sell personal information.

 

7. Data Retention

Personal information is retained only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law, regulation, or contractual obligation.

 

8. Data Security and Enterprise Safeguards

CASPAL implements commercially reasonable administrative, technical, and organizational measures designed to protect personal information, including:

  • Access controls and least-privilege principles

  • Secure systems and encrypted communications where appropriate

  • Internal confidentiality obligations

  • Vendor due diligence and contractual safeguards

Despite these measures, no system can guarantee absolute security. CASPAL disclaims liability for unauthorized access beyond reasonable control.

 

9. GDPR Rights (EEA / UK / Switzerland)

If you are located in a GDPR-covered jurisdiction, you have the right to:

  • Access your personal data

  • Request correction or deletion

  • Restrict or object to processing

  • Request data portability

  • Withdraw consent where processing is based on consent

  • Lodge a complaint with a supervisory authority

Requests may be submitted using the contact details below.

 

10. CCPA / CPRA Rights (California Residents)

If you are a California resident, you have the right to:

  • Know what personal information is collected, used, or disclosed

  • Request deletion of personal information (subject to legal exceptions)

  • Correct inaccurate personal information

  • Opt out of the sale or sharing of personal information (CASPAL does not sell personal data)

  • Not be discriminated against for exercising privacy rights

Requests will be verified prior to fulfillment, as required by law.

 

11. International Data Transfers

Information collected may be processed or stored in jurisdictions outside your country of residence. Where required, CASPAL implements appropriate safeguards to ensure lawful data transfers, including contractual protections.

 

12. Third-Party Websites

The Website may contain links to third-party websites. CASPAL is not responsible for the privacy practices, security controls, or content of third-party sites. Accessing third-party sites is at your own risk.

 

13. Children’s Privacy

The Website is intended for business and professional use only and is not directed at individuals under the age of 18. CASPAL does not knowingly collect personal information from minors.

 

14. Changes to This Privacy Policy

CASPAL reserves the right to update this Privacy Policy at any time. Updates will be effective immediately upon posting to the Website. Continued use of the Website constitutes acceptance of the revised Privacy Policy.

 

15. Contact Information

For privacy-related inquiries, data access requests, or regulatory questions, contact:

Email: info@caspal.ca

bottom of page