Privacy Policy

1. Who we are and what this covers

Grand Advisions ("we", "us", "our") is a digital growth, branding, and advertising agency operating from Ontario, Canada. This policy explains how we handle personal information when you visit our website, submit an enquiry, subscribe to our materials, apply for a role, or engage us as a client.

We are the organisation responsible for the personal information described here. Questions about this policy can be sent to our privacy contact listed at the end of this page.

2. Our approach: local core, global reach

Our compliance model works as a hub with spokes. The hub is our core operation in Ontario, Canada — the place where decisions about personal information are made, where our records live, and where our obligations under Canadian federal law and Ontario provincial law are met first.

The spokes are the jurisdictions our visitors, applicants, and clients reach us from. Because our work is delivered digitally and we serve clients worldwide, some individuals we interact with are protected by additional or stricter local rules. Where a spoke imposes a requirement that is stronger than our hub baseline — for example, certain consent, notice, or data-subject rights — we apply the stronger requirement to that individual rather than treating our baseline as a ceiling.

This means our baseline commitments are set by:

• The Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's federal private-sector privacy law.
• Ontario's consumer protection and accessibility obligations that touch on how we communicate and handle information.
• Our own contractual commitments to clients, including confidentiality and data-processing terms in client agreements.

Where you are located in a jurisdiction with its own privacy framework — such as the European Economic Area, the United Kingdom, Switzerland, California, or Brazil — you may hold additional rights described in section 9. We do not use a lower standard somewhere else simply because the local rule is lighter.

3. What we collect

When you browse the site

We keep browsing collection to a minimum. We do not run advertising or behavioural-tracking scripts on this website. Our hosting and content infrastructure records ordinary technical information needed to serve pages and keep the site secure, such as request logs and error reports. Preference data — like the cookie choice you make — is stored in your own browser.

When you get in touch

Our enquiry form collects the information you choose to provide so we can respond usefully: your name, email address, phone number, company, website, the services you are interested in, your industry, budget range, current and target revenue, timing, and anything you write in the free-text fields.

When you subscribe to our materials

Our email signup collects your email address and a record that you consented, along with the time you consented and where the signup came from. We keep this so we can prove consent and honour withdrawals.

When you apply for a role

Applications collect your name, email, phone, location, the role you applied for, your written responses, links to your work, and any files you attach. Files you attach are stored privately and are only accessible to the people reviewing applications.

When you become a client

Client engagements involve business contact details, billing information, and the account and campaign information needed to run advertising. We collect what the engagement requires and nothing more.

4. How we use personal information

We use personal information only for the purposes we collected it for, or for purposes a reasonable person would consider consistent with them:

• Responding to enquiries and preparing proposals.
• Delivering, managing, and improving the services a client has engaged us for.
• Sending the materials someone asked for, and honouring a withdrawal of consent when they ask us to stop.
• Assessing job applications and communicating with applicants.
• Keeping records, issuing invoices, and meeting our accounting and legal obligations.
• Protecting the site and our systems against abuse, fraud, and security incidents.

We do not sell personal information. We do not use enquiry or applicant information to build advertising audiences.

5. Why we are allowed to use it

Under Canadian law, we rely on your consent — express or implied by your conduct — for most collection, use, and disclosure. You may withdraw consent at any time, subject to legal and contractual restrictions and reasonable notice.

Where a stricter jurisdiction applies to you, we map our processing to the lawful bases that jurisdiction recognises. In practice that means:

• Consent — for marketing emails, optional cookies, and applications you choose to submit.
• Contract — to deliver services a client has engaged us for, and to take steps at someone's request before entering a contract.
• Legitimate interests — for responding to a business enquiry, securing our systems, and keeping ordinary business records, balanced against your rights.
• Legal obligation — for tax, accounting, and record-keeping requirements.

6. Cookies and similar technologies

We keep our own use of cookies and browser storage to what the site needs to function, plus one optional category that is off until you turn it on. Our Cookie Policy lists each item and explains how to change your choice.

7. Who we share information with

We share personal information only in the limited circumstances below.

• Service providers who process information on our behalf — application hosting and database services, private file storage, email delivery, and business email and calendar tools. They act on our instructions and are bound by confidentiality.
• Advertising platforms — only in the course of running a client's campaigns, and only with the account and contact information that work requires. Client campaign data belongs to the client.
• Professional advisers — accountants, insurers, and legal counsel, where needed.
• Authorities — where we are required by law, or where disclosure is necessary to establish or defend a legal claim.

We require service providers to protect personal information with safeguards comparable to our own and to use it only for the purposes we specify.

8. Where your information goes

Our core records are held for an agency based in Ontario, Canada, but the service providers we rely on may store or process information in Canada, the United States, or the European Union. When information crosses a border, it may be accessible to authorities in that country under its laws.

We choose providers with established security practices, keep the set of providers small, and limit cross-border transfers to what a service actually requires. Where a transfer out of the EEA, the UK, or Switzerland is subject to those frameworks, we rely on appropriate safeguards such as standard contractual clauses.

9. How long we keep it

We keep personal information only as long as it serves the purpose it was collected for, or as long as the law requires:

• Enquiries that do not become engagements — normally up to 24 months, so we can pick up a conversation that resumes later.
• Email subscribers — until you unsubscribe, plus a minimal suppression record so we do not contact you again by mistake.
• Job applications — up to 24 months, unless you ask us to remove them sooner.
• Client records, invoices, and campaign data — for the length of the engagement and the retention period required by Canadian tax and corporate law.

When a retention period ends we delete or anonymise the information.

10. Your rights and choices

Subject to the law that applies to you, you can ask us to:

• Tell you what personal information we hold about you and give you access to it.
• Correct information that is inaccurate or incomplete.
• Delete information we no longer have a lawful reason to keep.
• Provide a portable copy of information you gave us.
• Withdraw consent, or object to and restrict certain processing.
• Stop sending you marketing messages — every marketing email includes an unsubscribe link, and you can also simply ask us.

Send a request to the contact details below and we will respond within the timeframe the applicable law sets. We may need to verify your identity before acting. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada, the Information and Privacy Commissioner of Ontario, or the supervisory authority where you live.

11. How we protect information

We use administrative, technical, and physical safeguards proportionate to the sensitivity of the information: access is limited to people who need it, accounts are protected by authentication controls, uploaded files are held in private storage rather than public links, and we keep our systems updated. No method of transmission or storage is completely secure, so we cannot promise absolute security — but we will notify affected individuals and the relevant authorities if a breach creates a real risk of significant harm, as Canadian law requires.

12. Children

Our services are aimed at businesses and adults. We do not knowingly collect personal information from children under 16. If you believe a child has given us information, contact us and we will remove it.

13. Changes to this policy

We review this policy periodically and update it when our practices or the law change. The date at the top of the page shows the current version. Material changes will be flagged on this page.

14. Contact us

Privacy questions, access requests, and complaints go to GrandAdvisions@gmail.com or 226-966-4264. Please include enough detail for us to identify you and understand the request.