Privacy policy

Altshuler Inc. ("we", "us") respects your privacy. This policy explains what personal information we collect through this website, why, and the choices and rights you have. It applies to visitors from every region we serve, with region-specific sections below.

Who is responsible

Altshuler Inc., a Canadian corporation, is responsible for personal information collected on this site. Our Privacy Officer oversees how we handle it. You can reach the Privacy Officer through our contact form by choosing "Privacy request".

What we collect

• Information you send us. When you use the contact form: your name, work email, company (optional), topic, message, and whether you asked for updates.
• Technical information. Our hosting provider processes standard request data such as IP address, browser type and the pages requested, to deliver the site and protect it from abuse.

We do not use advertising pixels, cross-site tracking or analytics. This site sets no cookies. See Cookies and similar technologies.

Why we use it

• To reply to your message and manage our relationship with you (legitimate interest, or steps before a contract).
• To send occasional updates, only if you tick the separate opt-in box (consent). You can withdraw consent at any time using the unsubscribe link in any update or by contacting us.
• To keep the site secure and working (legitimate interest).
• To meet legal obligations.

We never sell or rent personal information, and we do not share it for cross-context behavioural advertising.

Who we share it with

We share personal information only with service providers that help us run this site and reply to you, under contracts that require them to protect it. These are our website hosting and security provider and our form delivery and email providers. They may process data outside your country, including in Canada, the United States and the European Union. Where required, we use safeguards such as the European Commission's Standard Contractual Clauses.

How long we keep it

We keep contact messages only as long as needed to respond and to maintain business records, then delete or anonymise them. If you become a client, our client agreement sets the retention period. Opt-in records are kept while you remain subscribed and for a short period after, as proof of consent.

How we protect it

We use encrypted connections (HTTPS), strict security headers, access limited to the people who need it, and reputable providers. No method is perfectly secure, and we will notify you and the authorities of a breach where the law requires it.

Your rights

Depending on where you live, you can ask to access, correct, delete or receive a copy of your personal information, object to or restrict how we use it, and withdraw consent. To make a request, use our contact form. We will verify your request and reply within the time the law requires, usually 30 days. We will not treat you differently for using your rights.

Regional information

Canada (PIPEDA and Quebec Law 25)

You may contact the Office of the Privacy Commissioner of Canada, or in Quebec, the Commission d'accès à l'information. Quebec residents may also ask how their information is used and request that it be communicated in a structured, commonly used technological format.

European Union and United Kingdom (GDPR and UK GDPR)

Our legal bases are described above. You may complain to your local data protection authority or, in the UK, the Information Commissioner's Office.

California and other US states

In the last 12 months we have collected identifiers (name, email, IP address) and internet activity (pages requested) for the purposes above. We do not sell or share personal information, and we do not use or disclose sensitive personal information. You can use an authorised agent to make a request.

Israel

You may exercise your rights under the Protection of Privacy Law, including access and correction, by contacting us.

Cookies and similar technologies

A cookie is a small text file that a website places on your device. Similar technologies include local storage, session storage, pixels, web beacons, software development kits and device fingerprinting.

This website does not place any cookies on your device, and does not use local storage, session storage, pixels, web beacons, fingerprinting or any other technology that stores information on your device or tracks you. The site's own script only checks, inside your browser, whether you have turned on a privacy signal (see Your privacy choices); it stores nothing and sends nothing. It does not use analytics, advertising, social media or other third-party tracking tools, and it does not load fonts, scripts or other content from third parties while you browse.

Because we use no non-essential cookies or similar technologies, no consent is required under Article 5(3) of the EU ePrivacy Directive (2002/58/EC) as implemented in EU member states, the UK Privacy and Electronic Communications Regulations 2003, the General Data Protection Regulation (EU) 2016/679, the UK GDPR, the Personal Information Protection and Electronic Documents Act (PIPEDA), or Quebec's Act respecting the protection of personal information in the private sector (Law 25), and we therefore do not display a cookie consent banner. Our hosting and security provider may process the technical request data described above, strictly to deliver the site and protect it from abuse, without placing cookies on your device.

If we ever introduce cookies or similar technologies that are not strictly necessary, we will update this section before doing so, obtain your prior, freely given, specific, informed and unambiguous consent, and provide controls on this page that let you refuse or withdraw consent as easily as you gave it. Strictly necessary technologies, if any, will be listed here with their purpose and duration.

Your privacy choices

Do Not Sell or Share My Personal Information. We do not sell personal information and do not share it for cross-context behavioural advertising, as those terms are defined in the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) and similar US state laws. No opt-out is needed, and none is required to use this site.

Global Privacy Control. We honour the Global Privacy Control (GPC) signal as a valid request to opt out of the sale or sharing of personal information and of targeted advertising, under the CCPA/CPRA and other applicable laws. We apply it to your browser automatically, without requiring you to identify yourself.

Do Not Track. We also respect the Do Not Track (DNT) browser setting. Because we do not track visitors across websites, our practices are the same whether or not the signal is sent.

To exercise any other right described in this policy, use our contact form and choose "Privacy request".

Children

This site is intended for businesses and is not directed to children under 16. We do not knowingly collect their information.

Changes

We will post any changes to this policy on this page and update the date above.