1. Introduction
This Privacy Policy explains how Red Leaf Advisory Inc. collects, uses, shares and protects information when you visit www.redleaf.mom or communicate with us about our advisory services. The services described on this website are developed and operated by the independent developer RedLeafs on behalf of Red Leaf Advisory Inc., a company organized under the laws of Canada with its office at 1903-185 Roehampton Ave, Toronto - M4P 0C6, Canada (CA).
We handle personal information with care and restraint. We collect only what we need to respond to you, to operate the website and to meet our legal obligations, and we do not sell personal information to anyone. This policy is written in plain language so that you can read it in one sitting and understand exactly where you stand. By using this website you agree to the practices described here. If any part of this policy concerns you, please contact us before using the website so that we can answer your questions directly.
2. Who We Are and How to Reach Us
Red Leaf Advisory Inc. is a management advisory firm based in Toronto, in the province of Ontario, Canada. We provide strategy, operations, organizational design, financial planning, technology adoption and compliance advisory services to growing companies. The website you are reading now is the public face of that practice, and it was built and is maintained by the developer RedLeafs.
Throughout this policy, the words we, us and our refer to Red Leaf Advisory Inc. The word website refers to www.redleaf.mom and all pages published under that domain. If you have questions about this policy, about your information, or about anything else on the website, you can reach us by email at dispatch@redleaf.mom or by telephone at +15159041481 during business hours, which are Monday to Friday from 9:00 AM to 6:00 PM Eastern Time.
3. Scope of This Policy
This policy applies to information gathered through the website, through email sent to addresses published on the website, and through telephone calls made to the number listed on the website in connection with our services. It applies to prospective clients, current and former clients, website visitors, job applicants and other people who contact us.
This policy does not apply to third-party websites, tools or services that we may mention or link to from our pages. Those third parties operate under their own privacy practices, and we encourage you to review their policies before providing them with any information. It also does not govern information collected by our clients in their own operations. Where we act as an advisor to a client, the personal information of that client organization is handled under the terms of our engagement agreement in addition to this policy.
4. Information We Collect
The information we hold falls into two broad groups. The first group is information you choose to give us, such as your name, email address, telephone number, company name and the content of the messages you send us. The second group is technical information collected automatically when you browse the website, such as your browser type, device category, referring page and general region derived from your network address.
We deliberately keep both groups small. We do not ask for financial account details, government identification numbers or other sensitive categories of information through this website, and we ask you not to send such details by email. If an engagement later requires sensitive material, we will agree with you on an appropriate secure channel before anything is transferred. The sections below describe each group in detail, together with the reasons we hold the information and the length of time we keep it.
5. Information You Provide Voluntarily
When you complete the contact form, send us an email or call us, we receive the information you provide. That usually includes your name, your email address, your telephone number if you choose to include it, the name of your organization and the substance of your inquiry. We use this information to respond to you, to prepare for any consultation you request, and to keep a record of the advice we provide.
If you become a client, we keep additional records related to the engagement, such as proposals, statements of work, invoices and project documents. Those records may contain the names and contact details of your representatives. We treat that information as confidential and handle it under both this policy and the terms of our engagement. You are never required to provide more information than you feel comfortable sharing, and you may ask us at any time to correct or delete what we hold, subject to the retention rules described later in this policy.
6. Information Collected Automatically
Like most websites, ours receives certain technical information automatically when you visit. This may include the internet protocol address of the network you use, the type and version of your browser, the operating system and device category you use, the page that referred you, the pages you view on our website and the date and time of each visit. We use this information only in aggregate form to understand how the website is used and to keep it functioning and secure.
We do not attempt to build detailed individual profiles from this technical data, and we do not combine it with advertising profiles from other companies. Network addresses are short-lived operational records: they help us diagnose faults, block abusive traffic and produce aggregate statistics. Where our hosting provider retains server logs, those logs are kept for a limited period that is consistent with the retention section of this policy and with the needs of security monitoring.
7. How We Use Your Information
We use the information described above for a small number of clearly defined purposes:
- To respond to inquiries submitted through the contact form, by email or by telephone, and to schedule consultations you request.
- To prepare proposals, statements of work and deliverables for current and prospective clients.
- To provide advisory services under signed engagements, including communications about project work, meetings and invoicing.
- To operate, maintain and improve the website, including diagnosing technical problems and understanding which pages are useful to visitors.
- To protect the website and our communications against spam, abuse, unauthorized access and other harmful activity.
- To keep the business records we are required to keep under Canadian law, including accounting and tax records.
We do not use your information for automated decision making that produces legal effects concerning you, and we do not sell or rent personal information. We also do not use your contact details to send marketing newsletters unless you have asked us to stay in touch, and even then every message we send includes a simple way to stop receiving further messages.
8. Legal Bases for Processing
Where privacy laws require us to identify a legal basis for processing, we rely on the following. When you contact us and ask us to respond, we process your information on the basis of your consent, given through your request, and on the basis of taking steps at your request before a possible contract. When we provide services under an engagement, processing is necessary for the performance of that contract. When we keep accounting records, respond to lawful requests or meet filing obligations, processing is necessary for compliance with our legal obligations. When we secure the website and our systems against misuse, we rely on our legitimate interest in operating a safe and functioning service.
Where we rely on consent, you may withdraw it at any time by contacting us, and withdrawal will not affect processing that took place before your withdrawal. If you have questions about which basis applies to a specific use of your information, write to dispatch@redleaf.mom and we will explain in plain language.
10. Analytics and Site Performance
To understand which pages help visitors and which need improvement, we may use privacy-conscious analytics. These tools produce aggregate reports about page views, visit duration, general geographic region and referral sources. Reports never identify you personally, and we do not attempt to re-identify individuals from them.
We also monitor technical performance, such as page load times and error rates, because a slow or broken website wastes the time of everyone who visits it. Performance data is reviewed by the people who maintain the website, including the developer RedLeafs, and is used solely to keep the site fast and reliable. If you have questions about the analytics we use, or if you would like to know how to exclude yourself from measurement, contact us at dispatch@redleaf.mom and we will describe the current arrangement and the options available to you.
12. Service Providers and Processors
Like every modern business, we depend on a small number of trusted providers to deliver our services. Our website is hosted by a commercial hosting provider, our email is handled by a reputable email service, and our accounting is supported by standard bookkeeping software. Each of these providers processes information on our instructions and under contractual duties of confidentiality and security.
We select providers with care, review their security practices before engaging them, and keep the list short. When a provider no longer serves us, we ask it to delete or return the information we entrusted to it, in line with the retention rules in this policy. If you would like a current description of the categories of providers we use, write to dispatch@redleaf.mom. We answer such questions freely because we believe that transparency about infrastructure is part of treating people decently.
13. International Data Transfers
Red Leaf Advisory Inc. operates in Canada, and our primary business records are held in Canada. Some of our service providers, however, operate globally, and it is possible that information could be processed in the United States or another country. Where information crosses borders, we take reasonable steps to ensure it receives a level of protection consistent with this policy, including contractual protections and provider certifications recognized under applicable privacy laws.
Laws in other jurisdictions may allow access to information by courts or authorities under local rules. If that concerns you, contact us and we will explain where the relevant provider stores and processes data for the services you use. We keep this section under review as providers change their infrastructure, and we update this policy whenever our transfer practices change in a way that matters to you.
14. Data Retention
We keep personal information only as long as we have a genuine need for it. Inquiry messages and related correspondence are kept for up to twenty-four months after our last contact, so that we can pick up the thread if you return. Client engagement records, including proposals, deliverables and communications, are kept for the duration of the engagement and for seven years afterwards, which reflects standard professional practice and Canadian requirements for business and tax records.
Technical logs held by our hosting providers are kept for short operational periods, generally measured in weeks. Analytics data is kept in aggregate form and does not identify individuals. When information no longer serves the purpose for which it was collected, and no law requires us to keep it, we delete it or anonymize it so that it can no longer be associated with you. If you ask us to delete information sooner, we will do so where the law allows, and we will tell you honestly if a legal requirement requires us to retain particular records.
15. Data Security
We use reasonable administrative, technical and physical safeguards to protect information from loss, theft and unauthorized access. Our measures include encrypted connections for data in transit, access controls so that only people who need information can reach it, device security on the equipment our advisors use, and careful limits on what is stored where. The website is maintained, patched and monitored by the developer RedLeafs together with our hosting provider.
No method of transmission or storage is completely secure, and we do not pretend otherwise. What we promise is proportionate care: we assess risks sensibly, we respond quickly to incidents, and we notify affected individuals and authorities where the law requires notification. If you ever believe that information you sent us has been compromised, or if you notice a security problem on the website, please tell us immediately at dispatch@redleaf.mom so that we can investigate and act.
16. Your Privacy Rights
Depending on where you live, you have rights over the personal information we hold about you. In Canada, the Personal Information Protection and Electronic Documents Act gives you the right to access your information and to challenge its accuracy. Similar rights exist under other laws that may apply to you, including rights of access, correction, deletion, restriction and objection, and in some places the right to data portability.
To exercise any of these rights, send a request to dispatch@redleaf.mom or call +15159041481. Describe what you are asking for, and include enough detail for us to identify you and the information concerned. We will confirm receipt, verify your identity if needed, and respond within the time required by the applicable law. We will not refuse a request unreasonably, and we will never charge a fee for a first straightforward response. If you are not satisfied with our answer, you may raise the matter with the Office of the Privacy Commissioner of Canada or with the privacy regulator in your jurisdiction, and we will cooperate fully with any such review.
17. Privacy for Children
Our website and our services are intended for business audiences, and we do not knowingly collect personal information from children. The website is not directed to children, and the content is written for founders, executives and managers of companies. We do not create profiles of children, we do not market to children, and we do not allow behavior that would suggest child use of the website to continue unexamined.
If you are a parent or guardian and believe that a child has provided us with personal information, please contact us at dispatch@redleaf.mom. When we confirm that we have received personal information from a child without verifiable parental consent, we will delete that information promptly and, where appropriate, take steps to prevent a recurrence. This commitment applies regardless of where you live, because it reflects how we choose to operate rather than the minimum any law requires.
18. Third-Party Links and Websites
Our website may contain links to third-party websites, such as professional associations, industry publications and tools we find useful. Those links are provided for convenience and context. When you follow a link to another website, this policy no longer applies, because the other website is operated by someone else under its own practices.
We choose links thoughtfully and favor reputable organizations, but we do not control third-party websites and we are not responsible for their content or their privacy practices. We encourage you to read the privacy policy of every website you visit, especially before submitting personal information. If you find that a website we link to behaves badly with personal information, tell us at dispatch@redleaf.mom. We review such reports and will remove links that no longer meet a reasonable standard of care.
19. Changes to This Privacy Policy
We may update this policy from time to time as our practices, services or the law evolve. When we make changes, we will revise the last updated date at the top of this page, and for material changes we will describe the substance of the change in a short notice on the website. If a change affects how we use information we already hold about you in a way that requires consent under applicable law, we will seek that consent before proceeding.
We keep past versions of this policy on file so that we can show how our practices evolved if a question ever arises. We encourage you to revisit this page occasionally, particularly before providing new information to us. Continuing to use the website after an updated policy takes effect means you accept the updated policy, so if a change troubles you, please contact us first and give us the chance to explain or adjust.
20. Contact Us
If you have any question, request or complaint about this Privacy Policy or about how we handle personal information, we want to hear from you. You can reach us in any of the following ways. By mail: Red Leaf Advisory Inc., 1903-185 Roehampton Ave, Toronto - M4P 0C6, Canada (CA). By email: dispatch@redleaf.mom. By telephone: +15159041481 during business hours, which are Monday to Friday from 9:00 AM to 6:00 PM Eastern Time.
We treat every privacy question seriously, and we answer in plain language within one business day wherever possible. Questions about the technical operation of the website may be forwarded to the developer RedLeafs, who maintains the site on our behalf, but accountability for the answers always remains with us. Thank you for reading this policy and for the trust it represents.