Privacy Policy

Effective date: March 30, 2026 Last updated: March 30, 2026

EvolvedStack (“we”, “us”, or “our”) is a Canadian corporation. We are committed to protecting your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec’s Act Respecting the Protection of Personal Information in the Private Sector (Law 25), and all applicable provincial privacy legislation.

1. Privacy Officer

The person responsible for our privacy practices is:

Privacy Officer EvolvedStack Email: privacy@evolvedstack.com

You may contact our Privacy Officer with any questions, concerns, or requests related to your personal information.

2. Information We Collect

We collect only the personal information necessary to operate our website. This may include:

• Analytics data — IP address, browser type, device information, pages visited, and other usage data collected automatically by Google Analytics
• Contact information — name and email address, only when you voluntarily submit them through our contact form or email

We do not collect sensitive personal information (health data, biometric data, etc.).

3. Purposes of Collection

We collect and use personal information for the following specific purposes:

1. Communication — to respond to inquiries you submit through our contact form or email
2. Website operation — to maintain and improve our website’s functionality and security
3. Legal compliance — to comply with applicable laws and regulations

We will not use your personal information for any purpose beyond what is stated here without first obtaining your consent.

4. Consent

We obtain your consent before collecting, using, or disclosing your personal information. When you submit our contact form, you provide express consent for us to use your information to respond to your inquiry.

You may withdraw your consent at any time by contacting our Privacy Officer.

5. Limiting Collection and Retention

We collect only the personal information necessary for the purposes identified above. We retain personal information only as long as necessary to fulfill those purposes or as required by law.

Typical retention periods:

• Contact form submissions — 1 year, unless a client relationship is established
• Website analytics data — 26 months

When personal information is no longer needed, we securely delete or anonymize it.

6. Disclosure and Third Parties

We do not sell your personal information. We may share it with third parties only in these circumstances:

• Service providers — trusted partners who help us operate our website (e.g., hosting providers, analytics services), bound by confidentiality agreements
• Legal requirements — when required by law, court order, or regulatory authority
• Business transfers — in connection with a merger, acquisition, or sale of assets, with notice to affected individuals

Third-party services we use include:

7. Cross-Border Transfers

Some of our third-party service providers are located outside Canada, primarily in the United States. When your personal information is transferred outside Canada, it may be subject to the laws of that jurisdiction.

We take reasonable steps to ensure that third parties outside Canada provide a comparable level of protection for your personal information. However, we are required to inform you that personal information stored or processed outside Canada may be accessible to law enforcement and government authorities in those jurisdictions.

8. Cookies and Tracking Technologies

Our website uses cookies and similar technologies:

• Strictly necessary cookies — required for the website to function (no consent required)
• Analytics cookies — help us understand how visitors use our website (require your consent)

We do not use marketing or advertising cookies. You can manage your cookie preferences through your browser settings. Disabling non-essential cookies will not affect the core functionality of our website.

9. Security Safeguards

We protect your personal information with measures appropriate to the sensitivity of the data, including encryption of data in transit (TLS/SSL) and secure hosting infrastructure. If we become aware of a security breach that poses a real risk of significant harm, we will notify affected individuals and the relevant privacy commissioner as required by law.

10. Your Rights

Under Canadian privacy law, you have the right to:

1. Access — request a copy of the personal information we hold about you
2. Correction — request that we correct inaccurate or incomplete information
3. Deletion — request that we delete your personal information, subject to legal retention requirements
4. Withdraw consent — withdraw your consent to our collection, use, or disclosure of your personal information

To exercise any of these rights, contact our Privacy Officer at privacy@evolvedstack.com. We will respond to your request within 30 days. If we cannot fulfill your request, we will explain why and inform you of your recourse options.

11. Complaints

If you are not satisfied with how we handle your personal information, you may:

1. Contact our Privacy Officer to file a complaint — we will investigate and respond within 30 days
2. File a complaint with the Office of the Privacy Commissioner of Canada
3. File a complaint with the Commission d’accès à l’information du Québec (for Quebec residents)
4. File a complaint with the applicable provincial privacy commissioner

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on this page with a revised “Last updated” date. We encourage you to review this policy periodically.

13. Contact Us

For any privacy-related questions or requests:

EvolvedStack — Privacy Officer Email: privacy@evolvedstack.com