Legal

Privacy Notice

What data is collected, how it is used, and how to exercise your rights.

Last updated: 6 June 2026

1

What Do I Collect?

Only what is necessary: names, contact details, technical info, and business data.

I collect only the necessary personal information from you, such as:

  • Information needed for product and service purchases
  • Your name, email address, company, and contact information
  • Feedback you have provided from any services offered
  • Correspondence you have with me
  • Your social media accounts if you interact with me on my profiles
  • Technical information such as your IP address and browser when using my site
  • Information related to or required by a professional service I am providing you
2

How Do I Collect Your Data?

Through my scheduler, website, email, social media, events, and online courses.

I collect data when you (or your employer):

  • Book a meeting with me through my scheduler
  • Contact me via email, phone, or website
  • Connect, contact, or follow me on social media
  • Sign up for my newsletter or updates
  • Engage me for services or enrol for an event
  • Click through to my website from ads or social media content
  • Attend my events
  • Browse my website
  • Purchase products through my reseller partnerships
  • Enroll in my online courses
3

Why Do I Process Your Data?

Legal obligation, your consent, contractual need, or legitimate interest.

I only process your data:

  • Where I am required to do so by law
  • Where you have provided consent for me to do so (such as for marketing and updates)
  • Where we are pursuing a contractual agreement, services, talks, courses, or products
  • Where there is a legitimate interest to do so, such as improving my offerings or securing your data
4

How Do I Use Your Data?

To communicate, deliver services, manage engagements, and improve my offerings.

Depending on the circumstance, I process your data to:

  • Comply with legal obligations
  • Communicate with you
  • Manage our relationship
  • Keep you up to date with services, events, and offerings
  • Provide services and advisory you requested
  • Conduct research and development
  • Improve my service offerings
  • Manage product purchases and affiliate agreements
  • Refer you to partners and associates if requested
  • Use AI-assisted tools to support drafting of advisory deliverables and technical outputs. No personal information is entered into these tools (see Section 6).
5

Data Sharing and Third-Party Providers

I use reputable sub-processors and will never sell your data.

Some of my services may require sharing with another partner. As such, I may share your data with:

  • Technology vendors whose products you purchase as part of my professional services
  • Additional subject matter experts that I need to engage (with your consent) for the services you have hired me for
  • Legal or regulatory authorities when required

To run my business, I make use of several reputable technology and professional service providers who may be sub-processors of your information. I will always ensure that these service providers are bound by contractual agreements that ensure implementing security safeguards.

Microsoft 365Productivity, meetings, email, and file storage
CalendlyAppointment scheduling
ZohoCRM, marketing emails, billing, and invoicing
Zoho FlowIntegration and automation services
LinktreeMarketing and “Link in Bio”
Zoom and Microsoft TeamsOnline meetings and presentations
Stripe, PayPal, and WisePayment processing
Web Hosting CanadaWebsite hosting
ZenlerLearning management
LinkedIn and RedditSocial media marketing
Anthropic (Claude and Claude Code)AI-assisted drafting, research, and development
CloudflareWebsite security, performance, and bot protection
CookieYesCookie consent management
AcronisBackups and archiving

I am a reseller or partner for

1PasswordPassword management
AltitudeSync (Acronis)Backup and archiving
CookieYesCookie consent management

In some circumstances, you may be engaging directly with one of these partners. In those cases, please review that partner’s own privacy notice for more information.

I will never sell your data or use it for unrelated marketing. Should I receive a law enforcement request for your information, I will, unless prohibited by law, push back on these requests and refer the requester directly to you.
6

A Note on AI Usage

I use Claude by Anthropic internally. As a rule, no client personal data is submitted.

As a rule, no personal information is submitted to Anthropic. Client communications and meetings are not connected to Claude, and Claude Cowork is not in use for this purpose.

In the rare case where personally identifiable information (PII) may be submitted, it is only done where consistent with applicable privacy laws, or after being deidentified. For clients based in the EEA or UK, PII is not submitted to Anthropic without your explicit consent. Measures are in place to ensure that Anthropic does not train on data submitted through my account.

7

International Data Transfers

I prioritise Canada-based hosting and require appropriate safeguards from all providers.

Your information may be stored and processed outside of the country or region where it was originally collected. Some of these countries may offer fewer rights regarding your personal information than you have in your country of residence. I ensure that I enter into agreements with all service providers to ensure that appropriate safeguards are in place at all times. Wherever possible, I try to host your information with service providers in Canada.

8

How Long Do I Retain Your Data?

For the duration of your engagement, plus three years, unless you instruct otherwise.

I keep your data only for as long as necessary, typically for the duration of service and any applicable legal retention periods that apply to the information.

If your service agreement with me reaches its natural conclusion or is terminated for any reason, I will retain your information for three years after termination unless otherwise instructed, in order for you to re-engage me for additional services without hassle or rework.

I may retain information for longer should you provide consent for me to do so or where the information has been anonymized and you are no longer able to be identified.

9

Your Data Protection Rights

Access, correct, delete, restrict, or transfer your data. Just get in touch.

Depending on your location and jurisdiction, you have rights under data protection laws that may include:

  • Accessing the data I hold about you
  • Requesting corrections or deletions
  • Restricting or objecting to certain data processing
  • Portability (transferring your data elsewhere)

If you’d like to exercise any of these rights, please use my contact form or email me at the address below.

10

How Do I Protect Your Data?

Strong security practices, reputable providers, and limited access controls.

Data security is of paramount importance to me. I make sure that supplementary security measures are in place for all of my systems, and follow good practice in terms of password management, using reputable providers, and keeping access limited to those who are authorized. Should you wish to find out more about my security practices, please reach out using the email address on this page.

11

Cookies and Tracking Technologies

I provide notice and choices for managing non-essential cookies and tracking.

My website makes use of cookies and other forms of tracking. In all cases, I provide notice and choices for managing them. Please use the cookie banner to manage your consent preferences at any time.

Forms on this site use Cloudflare Turnstile for bot protection. Unlike traditional CAPTCHAs, Turnstile runs invisibly in the background: no puzzles, no traffic lights, no interruptions. It analyses browser and network signals to determine whether a submission is from a human. As part of this process, Cloudflare may process technical data including your IP address and browser characteristics. I do not receive or control this data; it is processed by Cloudflare under their own privacy policy. You can review Cloudflare’s Turnstile Privacy Policy for more information.

My assessment tools at assess.rossgsaunders.com and calculator at devcostcalc.rossgsaunders.com work differently: they use only strictly necessary cookies, for security and to keep a form submission safe, alongside cookieless analytics that collect no personal information. Because nothing there is used for advertising or tracking, no consent banner is shown and none is required under PECR, the EU ePrivacy rules, or Quebec's Law 25. The full detail is in the cookie notice for the assessment tool and in the Terms of Service for the calculcator.

12

Marketing Preferences

Opt-in only. Unsubscribe from marketing communications at any time.

You’ll only receive marketing communications if you’ve opted in. You can change your preferences anytime by selecting the opt-out link at the bottom of communications. You are also welcome to use the contact form on this page to exercise your right to opt out of marketing communications.

In some instances, communications are not commercial in nature and may be a required part of our engagement. In these cases, you are not able to opt out automatically. Please contact me directly if you have a concern about service-related messages.

13

Changes to This Notice

Any updates will be posted here. Last updated 6 June 2026.

I may update this notice from time to time. Any changes will be posted here. This notice was last updated on the 6th of June, 2026.