Privacy Policy

1. Who We Are

This website is owned and operated by Jerts Consulting Inc., a Canadian federal corporation headquartered in Toronto, Ontario. Throughout this policy, "we", "us", and "our" refer to Jerts Consulting Inc.

2. Our Commitment and Accountability

We are accountable for personal information in our custody and control and for our compliance with PIPEDA. Questions, requests, and complaints about how we handle personal information can be sent to privacy@jerts.com.

3. Information We Collect

We collect personal information that you provide to us directly, and limited technical information collected automatically when you visit this site:

• Information you provide — your name, email address, telephone number, company name, and the contents of any message you send through our contact form or by email.
• Automatically collected information — pages visited, time on site, referring source, approximate geographic location, browser and device type, and similar standard analytics data, collected via Google Analytics (GA4).
• Product analytics data — with your consent, we use PostHog to collect additional usage analytics including page views, click interactions, scroll depth, session recordings (visual replays of how you navigate the site), and heatmap data. This data helps us understand how visitors interact with specific page elements so we can improve layout, content, and usability. PostHog does not collect form input values, passwords, or payment information. This data is only collected after you accept cookies via our consent banner.

4. Why We Collect It (Purposes)

We use personal information for the following purposes:

• To respond to your inquiries and discuss potential projects.
• To provide and deliver the consulting services you have engaged us for.
• To maintain business records as required by applicable Canadian law.
• To understand how visitors use this website and to improve its content and structure.

We do not sell, rent, or trade personal information to third parties for their marketing purposes.

5. Legal Basis — Consent

Our handling of your personal information is based on your consent. By submitting our contact form or emailing us, you provide express consent for us to use your information to respond to you and to discuss potential work. By continuing to use this website, you provide implied consent for our use of standard web analytics. You may withdraw consent at any time by contacting us at privacy@jerts.com, subject to legal or contractual restrictions and reasonable notice. Withdrawing consent may affect our ability to provide services to you.

6. Cookies and Analytics

This website uses Google Analytics 4 to collect anonymized usage data. Google Analytics uses cookies to recognize repeat visitors and to track interactions. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on, or by disabling cookies in your browser.

PostHog Analytics: We also use PostHog, a product analytics platform, to better understand how visitors use our website. PostHog may collect:

• Page views, clicks, scroll depth, and navigation paths
• Session recordings — visual replays of your browsing session (form inputs, passwords, and sensitive fields are automatically masked)
• Heatmaps — aggregated visualizations of where visitors click and scroll on each page
• Device type, browser, operating system, and approximate location

PostHog analytics are loaded only after you accept cookies via our consent banner. If you do not accept, no PostHog data is collected. PostHog data is hosted in the United States. You can withdraw your consent at any time by clearing your browser cookies for this site; the consent banner will reappear on your next visit.

We do not use advertising cookies, retargeting pixels, or third-party tracking beyond Google Analytics and PostHog.

7. Service Providers and Third Parties

We rely on a small number of third-party service providers to operate this website and our business:

• Google Analytics — website usage analytics
• PostHog — product analytics, session recordings, and heatmaps (loaded only after cookie consent is accepted). See PostHog's Privacy Policy.
• Google reCAPTCHA v3 — invisible bot detection on our contact form; Google receives visitor interaction data from the page for the purpose of distinguishing humans from automated traffic. See Google's Privacy Policy and Terms of Service.
• Google Fonts — web typography
• Tailwind CSS CDN — website styling
• Microsoft 365 / Outlook — email correspondence and contact form delivery (SMTP)
• Our Canadian web hosting provider — site hosting; contact form submissions are processed server-side on this infrastructure

Contact form submissions are handled by a small PHP script on our own hosting and are delivered directly to our Microsoft 365 mailbox. The submission itself is not stored by any third-party form service. These providers process personal information only for the purposes for which we have engaged them, and are bound by their own privacy and security obligations.

8. International Data Transfers

Some of the service providers listed above (Google Analytics, PostHog, Google reCAPTCHA, Google Fonts, the Tailwind CSS CDN, and Microsoft 365) are based in the United States, and information collected from your visit may be processed or stored outside of Canada. While the data is in another jurisdiction, it may be subject to the laws of that jurisdiction, including lawful access requests by foreign government authorities. We take reasonable steps to ensure providers offer comparable levels of protection. By using this website or submitting information through it, you acknowledge this cross-border transfer.

9. Safeguards

We protect personal information using physical, organizational, and technical safeguards that are appropriate to its sensitivity. These include access controls, encryption in transit (HTTPS), reputable cloud and email providers, limited internal access on a need-to-know basis, and routine review of our practices. No system is perfectly secure, but we work to maintain protections appropriate to a small professional services firm.

10. Data Retention

We keep personal information only as long as necessary for the purposes for which it was collected, or as required by Canadian tax, corporate, and professional record-keeping laws. Contact form submissions and email correspondence are retained for the duration of the business relationship and for a reasonable period afterward. Analytics data is retained according to Google Analytics' default retention settings. When personal information is no longer required, it is securely deleted or anonymized.

11. Your Rights Under PIPEDA

Subject to certain legal exceptions, you have the right to:

• Be informed about what personal information we hold about you.
• Access your personal information and request a copy.
• Request correction of personal information that is inaccurate or incomplete.
• Withdraw your consent (subject to legal and contractual restrictions).
• Request deletion of personal information that we are not legally required to retain.

To exercise any of these rights, contact us at privacy@jerts.com. We will respond within 30 days, as required by PIPEDA. We may need to verify your identity before fulfilling a request.

12. Data Breach Notification

In the event of a breach of security safeguards involving personal information that creates a real risk of significant harm to an individual, we will notify affected individuals and report the breach to the Office of the Privacy Commissioner of Canada (OPC), as required by PIPEDA's mandatory breach reporting rules. We also maintain internal records of any such breaches.

13. Complaints

If you have a concern or complaint about how we handle personal information, please first contact us at privacy@jerts.com so we can try to resolve it directly. If you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada:

• Website: www.priv.gc.ca
• Toll-free: 1-800-282-1376

14. Children's Privacy

This website is intended for businesses and adult professionals. We do not direct our services to children under the age of 13 and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

15. Canada's Anti-Spam Legislation (CASL)

We comply with Canada's Anti-Spam Legislation (CASL). When you contact us, our reply messages are sent in response to your request and are considered solicited / transactional. We do not send unsolicited commercial electronic messages, and we do not add contact-form submitters to a marketing list without their separate, express consent.

16. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our service providers, or applicable law. The "Last updated" date at the top of this page indicates when it was last revised. We encourage you to review the policy periodically.

17. Governing Law

This Privacy Policy is governed by the laws of the Province of Ontario and the federal laws of Canada applicable therein.

18. Contact Us

Jerts Consulting Inc.
Toronto, Ontario, Canada

Privacy inquiries: privacy@jerts.com
General inquiries: info@jerts.com