Who this applies to
Zeluxa Corp runs zeluxa.com. This policy covers the personal information we handle when you visit the site or send us an enquiry through it.
Canada's Personal Information Protection and Electronic Documents Act governs how we handle that information. If you live in Quebec, Quebec's Law 25 also applies, and section 10 sets out the extra rights it gives you.
Our consulting engagements sit outside this policy. When you become a client, the agreement we sign with you governs the information you share during that work.
What we collect
Information you type in
Our contact form asks for your first and last name, email address, company, area of interest, and whatever you write in the message field. You choose what goes in that message. Please leave out anything confidential until we have an agreement in place.
Information your browser sends
Our host records standard server logs: the IP address you connect from, your browser and operating system, the pages you open, and the time you opened them. Every web server keeps these. They help us keep the site online and spot abuse.
What we do not collect
This site sets no cookies. We run no analytics, no advertising pixels, and no session tracking. Nothing gets written to your browser's local storage. Our Cookie Policy covers this in more detail.
Why we collect it
| Information | What we do with it |
|---|---|
| Name and email | Reply to your enquiry and carry on the conversation. |
| Company and area of interest | Work out whether we can help, and route your enquiry to the right person. |
| Your message | Understand what you need before we respond. |
| Server logs | Keep the site running, investigate faults, and block abuse. |
We will not sell your information. We will not rent it, trade it, or hand it to advertisers.
Consent, and how to withdraw it
Submitting the contact form gives us your consent to use those details to answer you. That is the whole of it.
Withdraw that consent whenever you like by emailing privacy@zeluxa.com. We will delete what we hold, unless a law requires us to keep a record, and we will tell you if that happens.
Withdrawing consent means we can no longer respond to the enquiry you sent. Nothing else changes.
Who else handles your information
Three outside services touch data from this site. Each one does a narrow job.
FormSubmit
Our contact form posts through FormSubmit, which forwards the submission to our inbox at info@zeluxa.com. FormSubmit processes your form contents in transit. It operates outside Canada.
Web Hosting Canada
WHC hosts the site and keeps the server logs described above. Their servers sit in Canada.
Google Fonts
The site loads two typefaces from Google's font servers. Your browser requests those files directly from Google, so Google sees your IP address when a page loads. We receive nothing from Google in return, and Google gets no other information about your visit from us.
We may also disclose personal information when a Canadian court, regulator, or law compels us to. We have not received such a demand.
Where your information travels
Zeluxa keeps offices in Toronto, Austin, and Istanbul. A colleague in the United States or Türkiye may read your enquiry when your question suits their market. FormSubmit also processes submissions outside Canada.
Your information therefore leaves Canada, and while it sits in another country, that country's courts and authorities can reach it under their own laws. Canadian privacy law lets us transfer information this way as long as we tell you plainly, which is what this section does, and as long as we hold the receiving party to comparable protection.
Email privacy@zeluxa.com if you would rather we keep your enquiry inside Canada. We will handle it that way.
How long we keep it
- Enquiries that go nowhere: deleted within 24 months of your last message to us.
- Enquiries that become engagements: kept for the length of the engagement, then for seven years afterward, which is what Canadian tax and limitation rules expect of business records.
- Server logs: our host rotates these on its own schedule, measured in months rather than years.
Ask us to delete your information sooner and we will, subject to those record-keeping duties.
How we protect it
The site runs over HTTPS, so traffic between your browser and our server travels encrypted. Access to our mail accounts requires a password and a second factor. We limit who inside Zeluxa can open client correspondence.
No website can promise perfect security, and we will not pretend otherwise. What we can promise is that we will tell you quickly if something goes wrong, and section 12 explains how.
Your rights
Under Canadian privacy law you can ask us to:
- Tell you what personal information we hold about you, and what we have done with it.
- Correct anything inaccurate or incomplete.
- Delete what we hold, subject to the retention rules above.
- Stop using your information, by withdrawing your consent.
Write to privacy@zeluxa.com. We answer within 30 days, and we do not charge for it. We may ask you to confirm who you are before we release anything, which protects you rather than us.
If you live in Quebec
Law 25 gives Quebec residents everything above, plus:
- Portability. Receive the information you gave us in a structured, commonly used electronic format.
- De-indexing. Ask us to stop distributing your information, or to remove links to it, where distribution causes you serious injury.
- Automated decisions. Be told when a decision about you comes from automated processing alone. Zeluxa makes no such decisions, and we will update this line if that ever changes.
Our privacy officer answers Law 25 requests at privacy@zeluxa.com.
Email and CASL
Canada's Anti-Spam Legislation governs commercial email sent to Canadian addresses. We reply to enquiries you send us, which CASL treats as a response to your own request.
We do not run a marketing list from this site. Should we start one, we will ask you to opt in with a deliberate action, we will never pre-tick a box for you, and every message will carry a working unsubscribe link and our contact details.
If something goes wrong
A breach that creates a real risk of significant harm to you triggers three duties on our side. We notify you. We notify the Office of the Privacy Commissioner of Canada, and the Commission d'accès à l'information for anyone in Quebec. We keep a record of the breach for two years.
Our notice to you will describe what happened, what information it touched, what we have done about it, and what you can do to protect yourself.
Changes to this policy
We will update this page as our practices change or as the law does. The date at the top always reflects the current version.
For a change that materially affects how we handle information you already gave us, we will email you before it takes effect.
Reaching us, and filing a complaint
Privacy questions and requests
privacy@zeluxa.com
Everything else
info@zeluxa.com
Bring your concern to us first. We would rather fix it directly.
If our answer does not satisfy you, take it to the Office of the Privacy Commissioner of Canada. Quebec residents can instead approach the Commission d'accès à l'information du Québec. Neither costs you anything.