Privacy Policy

The person responsible for the protection of personal information at EGil Inc. is:

You can contact this person at any time with questions about this policy, about how we handle your personal information, or to exercise the rights described in Section 9.

We collect only the personal information we need for the purposes described in this policy. The information we collect depends on how you interact with us.

Information you give us directly

• Newsletter sign-up: your first name, last name, and business email address, along with the language version of the site you signed up from, and the date, source, and method of your consent.
• Contact form and discovery-call requests: your first name, last name, business email address, what you need help with, and any information you choose to include in your message, along with the language version of the site you wrote from.
• Discovery-call booking: your name, email address, and the time you select. Your calendar entry and any information you provide when booking.
• Client engagements: if you become a client, we collect the business and contact information needed to deliver our services and manage the engagement, including billing details for invoicing.
• Direct communications: if you email or otherwise contact us, we keep a record of that correspondence.

Contact form submissions and newsletter subscriptions are held under separate consents. Submitting the contact form allows us to reply to you and to follow up about your inquiry. It does not add you to our newsletter. We only send you marketing communications if you have separately and expressly consented to receive them.

Information collected automatically when you visit our website

Our hosting provider records standard server logs, including your IP address, the pages requested, and basic technical information about your browser and device. This logging is necessary to deliver and secure the website and happens on every visit.

Separately, the analytics and advertising technologies described in Section 5 collect information about how you use our site. These do not operate unless you consent to them. Advertising technologies may record actions you take on our site and associate them with your account on the relevant platform.

We do not intentionally collect sensitive personal information, such as information about health, race, religion, or political opinions, and we ask that you not send us such information.

We use your personal information only for the following purposes:

• To send you our newsletter and marketing communications, where you have expressly consented to receive them. Our newsletter is published in English.
• To respond to your inquiries, schedule and hold discovery calls, and follow up on your requests.
• To provide, manage, and invoice for our services to clients.
• To operate, maintain, and secure our website.
• Where you have consented, to understand how our website is used and to improve it.
• Where you have consented, to measure the effectiveness of our advertising and to show you relevant advertising on third-party platforms.
• To comply with our legal and regulatory obligations.

We do not use your personal information to make automated decisions that produce legal effects concerning you or that otherwise significantly affect you. Grouping subscribers by language or interest is used only to send relevant communications and does not affect your access to our services.

We will not use your personal information for a new purpose that is incompatible with those above without first obtaining your consent, unless permitted or required by law.

We ask for your consent separately for each purpose that requires it, and you can give one without giving another.

• Replying to you. When you send us a message or book a call, we use your contact details to respond. This is the purpose you provided them for.
• Marketing communications. We send our newsletter and other marketing messages only where you have expressly opted in, by ticking the marketing consent box on one of our forms, which is always optional and never required to contact us or submit a form. We record the date, method, and source of that consent.
• Analytics and advertising technologies. These require your consent through our cookie banner and do not operate before you give it. See Section 5.

You may withdraw your consent at any time, and doing so is as easy as giving it. You can unsubscribe from our newsletter using the link in any newsletter email, change your cookie choices through the cookie settings link in our website footer, or contact us at the address in Section 1. Withdrawing consent may mean we can no longer provide you with certain communications or services.

Our website uses cookies and similar technologies in three categories:

• Strictly necessary. Required for the website to function and for security. These cannot be switched off.
• Analytics. Help us measure and improve site performance. Used only where you have consented.
• Advertising. Allow advertising platforms to measure our campaigns and show you relevant advertising. Used only where you have consented.

The tools we use are:

• Google Analytics 4 (Google LLC): measures how visitors find and use our site, collecting information such as approximate location, device, and browsing activity on our site.
• Meta Pixel (Meta Platforms, Inc.): measures the effectiveness of advertising on Facebook and Instagram and allows us to reach relevant audiences there. It may associate your activity on our site with your Meta account.
• LinkedIn Insight Tag (LinkedIn Corporation): measures the effectiveness of advertising on LinkedIn and allows us to reach relevant audiences there. It may associate your activity on our site with your LinkedIn account.

None of these load or transmit anything until you consent. When you first visit our site, a consent banner lets you accept or refuse analytics and advertising independently. Refusing is presented as prominently and requires no more steps than accepting. Until you consent, only strictly necessary cookies are active. You can change your choice at any time through the cookie settings link in our website footer, and you can also manage cookies through your browser settings.

Consistent with Quebec law, technologies capable of identifying, locating, or profiling you are deactivated by default, and we inform you of the means available to enable or disable them.

We do not sell your personal information.

Service providers acting on our instructions. These providers process personal information only to perform services for us, under contract, and may not use it for their own purposes:

• Netlify, Inc. — website hosting.
• MailerLite (UAB "MailerLite") — storage of contact and subscriber information, and delivery of our newsletter and communications.
• Microsoft Corporation — our email, calendar, discovery-call booking, and video conferencing tools, and the storage of client and correspondence records.
• Google LLC — website analytics (Google Analytics 4), where you have consented.

Advertising platforms acting for their own purposes as well as ours. Where you consent to advertising technologies, the following platforms receive information about your activity on our site. They act as independent parties and also use that information for their own purposes, including improving their advertising products, in accordance with their own terms and privacy policies:

• Meta Platforms, Inc. — meta.com/privacy
• LinkedIn Corporation — linkedin.com/legal/privacy-policy

If you refuse advertising cookies, no information is sent to these platforms.

We may also disclose personal information where required by law, to protect our rights, or in connection with a business transaction such as a merger or sale of assets.

We separately use Google Search Console, which reports on how our site appears in Google search results. It places nothing on your device and does not collect personal information about individual visitors.

The providers listed in Section 6 store and process personal information on servers located outside Quebec, including in the United States, the European Union, and other jurisdictions.

Before communicating personal information outside Quebec, we conduct a privacy impact assessment that considers the sensitivity of the information, the purposes for which it will be used, the protection measures in place, and the legal framework of the destination jurisdiction. Each such communication is governed by a written agreement with the recipient.

Personal information communicated outside Canada may be subject to the laws of the jurisdiction where it is stored, including lawful access requests by authorities in that jurisdiction.

We keep your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law.

• Newsletter subscribers: until you unsubscribe or ask us to delete your information.
• Contact and discovery-call inquiries: up to 24 months after our last contact, unless the inquiry becomes a client engagement. If you also subscribed to our newsletter, that subscription continues independently until you unsubscribe.
• Client records and invoicing information: for the duration of the engagement and for the period required by applicable tax and accounting law, generally 6 to 7 years, afterward.
• Server logs: retained by our hosting provider according to its own retention practices, which we do not control.
• Analytics data: retained in Google Analytics for 14 months, after which it is automatically deleted.
• Advertising platform data: retained by Meta and LinkedIn according to their own retention policies, which we do not control.

When personal information is no longer needed, we securely destroy, delete, or anonymize it.

Subject to applicable law, you have the following rights regarding your personal information:

• Access — to be informed of and obtain a copy of the personal information we hold about you.
• Rectification — to have inaccurate, incomplete, or out-of-date information corrected.
• Destruction and cessation of use — to ask us to delete your personal information or stop using it where it is no longer necessary for the purposes it was collected for, or where you withdraw your consent.
• Withdrawal of consent — to withdraw your consent at any time, including unsubscribing from communications and refusing analytics or advertising technologies.
• Portability — to receive the computerized personal information you provided to us in a structured, commonly used technological format, or to have it transferred to another organization where technically feasible.
• Deindexing and cessation of dissemination — in certain circumstances, to request that we stop disseminating your personal information or deindex a link to it.
• Complaint — to file a complaint with us or with the regulator (see Section 13).

To exercise any of these rights, contact the person responsible for the protection of personal information listed in Section 1. We will respond within 30 days. If we refuse a request in whole or in part, we will tell you why and inform you of your right to seek review by the Commission d'accès à l'information du Québec. If we do not respond within 30 days, our silence is deemed a refusal. We may ask you to verify your identity before acting on your request.

We take reasonable security measures to protect your personal information against loss, theft, and unauthorized access, disclosure, copying, use, or modification. These measures include technical and organizational safeguards appropriate to the sensitivity of the information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

In the event of a confidentiality incident that presents a risk of serious injury, we will notify affected individuals and the Commission d'accès à l'information du Québec as required by law, keep a register of the incident, and take reasonable measures to reduce the risk of harm.

Our website and services are intended for businesses and professionals and are not directed at children. Under Quebec law, personal information about a person under 14 may only be collected with the consent of a person having parental authority. We do not knowingly collect personal information from anyone under 14. If you believe a child has provided us with personal information, please contact us and we will delete it.

Our website may contain links to third-party websites, including social media platforms. We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policy of any third-party site you visit.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact the person responsible for the protection of personal information listed in Section 1.

If you are not satisfied with our response, you have the right to file a complaint with the relevant regulator:

• In Quebec: Commission d'accès à l'information du Québec (CAI) — cai.gouv.qc.ca
• Elsewhere in Canada: Office of the Privacy Commissioner of Canada (OPC) — priv.gc.ca

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. When we make material changes, we will update the "Last updated" date at the top of this policy. Where a change materially affects how we use personal information we already hold, we will notify affected individuals directly. We encourage you to review this policy periodically.

This Privacy Policy is provided for general informational purposes and reflects the practices of EGil Inc. (operating as EGil Marketing) as of the effective date above.