1) Scope & Who We Are
This Privacy Policy explains how garnerOne Consulting “we,” “us,” or “our”) collects, uses, discloses, and protects personal information obtained through our informational B2B website (the “Site”). We do not provide user accounts or e‑commerce on the Site.
2) Personal Information We Collect
2.1 Information You Provide
- Contact & Business Details: name, email, phone, company, job title, country/region.
- Form Submissions: inquiry details, meeting requests, service interests, message content.
- Content Downloads: information submitted to access gated resources (e.g., white papers, guides).
- Marketing Preferences: newsletter opt‑ins, event registrations, topic interests.
2.2 Information Collected Automatically
- Device/Usage Data: IP address, browser type, device identifiers, pages viewed, time on page, referring/exit pages.
- Cookies/Tags: as described in the Cookies section below.
We do not intentionally collect sensitive personal information via the Site.
3) How We Use Personal Information (Purposes & Legal Bases)
- Respond to Inquiries & Provide Information: to respond to requests, schedule calls, or send materials. (GDPR legal bases: Contract; Legitimate Interests)
- Marketing & Communications: to send newsletters, invites, and relevant content per your preferences and applicable laws. (Consent; Legitimate Interests)
- Download Access: to deliver gated resources and follow up with related content. (Consent; Legitimate Interests)
- Site Operation & Improvement: to operate, secure, and improve the Site, including analytics. (Legitimate Interests; Legal Obligation for security where applicable)
- Legal Compliance: to comply with laws, enforce terms, and protect rights, safety, and property. (Legal Obligation; Legitimate Interests)
You may opt out of non‑essential marketing at any time via unsubscribe links or by contacting us.
4) How We Share Information
We do not sell personal information. We may share information with:
- Service Providers/Processors: hosting, CRM/marketing platforms, analytics providers, email delivery, and form tools bound by contractual confidentiality and data‑protection obligations.
- Professional Advisors: legal, accounting, or insurance advisors under confidentiality.
- Legal & Compliance: if required by law or to protect rights and safety.
- Business Transactions: as part of a merger, acquisition, or similar event, with appropriate safeguards.
5) Cookies, Analytics & Similar Technologies
We use cookies and similar technologies to operate the Site, understand usage, and improve content relevance.
5.1 Types of Cookies
- Strictly Necessary: required for core Site functionality.
- Performance/Analytics: measure visits and engagement (e.g., page views, time on page).
- Functionality: remember preferences where applicable.
- Marketing: tailor communications and measure campaign performance, if enabled.
5.2 Managing Cookies
You can manage cookies via your browser settings. Where required by law, we present a consent banner for non‑essential cookies and honor your choices.
5.3 Analytics
We may use analytics tools (e.g., Google Analytics). Learn about Google’s practices and opt‑out options at Google’s opt‑out.
6) International Data Transfers
We are based in Canada and may process information in Canada, the United States, the EEA, the UK, or other jurisdictions where our providers operate. For transfers from the EEA/UK to countries without an adequacy decision, we rely on safeguards such as the European Commission’s Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum.
7) Data Security
We implement technical and organizational measures designed to protect personal information (e.g., encryption in transit, access controls, least‑privilege, vendor due diligence). No method is 100% secure; we cannot guarantee absolute security.
8) Data Retention
We retain personal information only as long as necessary for the purposes described here, to comply with legal, accounting, or reporting obligations, or to resolve disputes. When no longer needed, data is securely deleted or anonymized.
9) Your Rights (PIPEDA — Canada)
- Request access to personal information we hold about you.
- Request corrections to inaccurate or incomplete information.
- Withdraw consent for non‑essential processing (subject to legal/contractual limits).
To exercise rights, contact us. You may also complain to the Office of the Privacy Commissioner of Canada: Report a Concern.
10) Your Rights (GDPR — EEA/UK)
- Access to your personal data.
- Rectification of inaccurate data.
- Erasure in certain circumstances.
- Restriction of processing in certain cases.
- Portability of data in a usable format.
- Objection to processing based on legitimate interests or to direct marketing.
- Withdraw Consent where processing is based on consent.
- Automated Decisions: not to be subject solely to automated decisions where applicable.
To exercise rights, contact us. You may also complain to your local supervisory authority (EEA) or the UK Information Commissioner’s Office (ICO).
11) Children’s Privacy
The Site is intended for business professionals and is not directed to children. We do not knowingly collect personal information from individuals under 16.
12) Changes to This Policy
We may update this Policy periodically. Material changes will be highlighted on this page or via a notice on the Site.
13) Contact
Contact us with any Privacy Inquiries at contact us.
