Privacy Policy

Effective Date: October 1, 2024. This policy applies to all visitor interactions with the xelvornbitca.org domain and governs how XelvornBitCa collects, processes, stores, and protects personal information submitted through consultation forms, engagement requests, and operational assessments.

  1. Information Collection and Processing

    We collect personal information exclusively through consultation request forms, engagement initiation submissions, and operational assessment inquiries submitted through the xelvornbitca.org domain. This information includes full names, business email addresses, organizational affiliations, and technical environment descriptions provided during discovery phase communications. All submitted data transmits through encrypted channels and routes exclusively to our administrative mailing system for review by authorized program architects. We do not deploy fingerprinting scripts, location trackers, or third-party advertising pixels on any page within the xelvornbitca.org domain.

  2. Essential Cookies and Stored Identifiers

    We use essential cookies to maintain platform reliability, preserve form input values during page transitions, and record acceptance status for the cookie preference control banner. The session_token identifier maintains navigation state and modal focus until browser closure. The form_preserve identifier retains input values during multi-page form transitions until browser closure. The cookie_pref identifier records acceptance status for the control banner and remains stored for 12 months. All essential cookies require explicit user consent through the cookie preference controls and are never deployed without prior user acknowledgment.

  3. Data Retention and Deletion Procedures

    Consultation request data remains stored in our administrative mailing system for a period of 24 months from the date of initial submission, after which all personal information is permanently deleted through automated data lifecycle procedures. Engagement-related data that transitions into active consulting contracts is transferred to our secure contract management system and governed by separate data retention schedules defined in signed service agreements. Users may request deletion of any stored personal information at any time by contacting [email protected], and we will process such requests within 30 calendar days.

  4. User Rights and Control Mechanisms

    Users have the right to access all personal information stored about them, request corrections to inaccurate data, request deletion of their stored information, withdraw consent for cookie deployment, and opt out of any data processing activities that are not strictly necessary for platform operation. These rights may be exercised by contacting our data protection contact at [email protected] with a written request specifying the applicable right. We will respond to all valid requests within 30 calendar days and provide documentation of all actions taken in response.

  5. Legal Basis for Processing

    We process personal information based on your explicit consent through form submissions and cookie acceptance controls, our legitimate interest in operating and improving our consultation request platform, and our contractual obligations under signed engagement agreements. Processing activities are conducted exclusively for the purposes of initiating consultation discussions, scheduling discovery calls, and delivering structured operational assessments as requested by individual users. We do not process personal information for automated decision-making, profiling, or targeted advertising purposes under any circumstances.

  6. Security Measures and Access Controls

    All stored personal information is encrypted at rest using AES-256 encryption protocols and transmitted over TLS 1.3 encrypted channels. Access to personal data is restricted to authorized program architects and legal compliance personnel who require such access for engagement purposes. Our administrative systems undergo annual security reviews and quarterly vulnerability assessments conducted by independent third-party security firms. We maintain incident response procedures that notify affected users within 72 hours of any confirmed data breach affecting their personal information.

  7. International Data Transfers and Jurisdiction

    All personal information is stored and processed within Canada, specifically within our Toronto-based administrative infrastructure located at 128 Front Street West, Suite 404, Toronto, ON M5V 2S8. We do not transfer, process, or store personal information outside Canadian jurisdiction under any circumstances. Canadian federal privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA), and applicable provincial privacy statutes govern all data processing activities conducted through our platform.

  8. Contact and Inquiries

    If you have questions regarding this privacy policy, wish to exercise your data rights, or require clarification about our data handling practices, please contact our data protection officer at [email protected]. You may also write to us at our Toronto office address for formal written inquiries. We verify all data rights requests within 30 calendar days and provide comprehensive documentation of all processing activities in response to legitimate inquiries.