Privacy Policy

This Privacy Policy explains how Exit Science Business Consulting Inc ("Exit Science", "we", "us" or "our") collects, uses, shares and protects your personal information when you visit our website at https://www.exitsci.com or contact us through it (together, the "Services"). 

Questions or concerns? Reading this Privacy Policy will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you have questions, contact us at andrew@exitsci.com.

Summary of key points

• What we collect: the name, email address and message you give us when you request a demo or contact us, plus basic technical data (such as IP address and browser type) collected automatically when you visit.

• What we don't collect: we do not collect sensitive personal information, payment details, or information from third parties, and we do not track your precise location or use analytics cookies.

• Why: to respond to your enquiry, provide and improve our Services, keep the website secure, and meet our legal obligations.

• Who we share with: service providers that host our website and manage our contacts (currently Wix and HubSpot). We do not sell or rent personal information.

• Your rights: depending on where you live, you can ask to access, correct or delete your information, or withdraw consent. See "Your privacy rights" below.

1. What information do we collect?

Information you give us

We collect personal information that you voluntarily provide when you request a demo, fill in our contact form, or otherwise contact us. This may include:

• your first and last name

• your email address

• the contents of any message you send us

We do not collect sensitive personal information (such as racial or ethnic origin, health information, or political opinions), and we do not collect payment card details through the website. All personal information you provide must be true, complete and accurate, and you should tell us if it changes.

Information collected automatically

Like most websites, we automatically collect certain technical information when you visit. This does not identify you by name but may include your IP address, browser and device type, operating system, language preferences, referring URLs, approximate country (derived from IP address), pages viewed and the dates and times of your visits. We use this information to keep the Services secure and working, and to measure performance. Some of it is collected through cookies and similar technologies — see our Cookie Policy below.

2. How do we use your information?

We process your personal information for the following purposes:

• To respond to your enquiries and provide the Services you request, such as arranging a demo of D³.

• To send administrative information, such as changes to our terms or policies.

• To protect the Services, including fraud prevention and security monitoring.

• To understand usage trends so we can improve the website.

• To comply with our legal obligations.

• To protect someone's vital interests, where necessary to prevent harm.

We may also process your information for other purposes with your prior consent.

3. What legal bases do we rely on?

If you are in Canada: we process your information where you have given express consent, or where your consent can reasonably be implied (for example, when you send us a demo request). You can withdraw your consent at any time. In limited cases permitted by law, we may process information without consent — for example, for investigations or fraud prevention, to comply with a subpoena or court order, or where the information is publicly available as specified by regulation.

If you are in the EEA or UK: the GDPR and UK GDPR require us to identify a legal basis. We rely on: your consent (which you can withdraw at any time); performance of a contract or steps at your request before entering one; our legitimate interests (such as responding to enquiries, keeping the website secure and understanding how it is used) where those do not override your rights; legal obligations; and, rarely, vital interests.

4. When and with whom do we share your information?

We share personal information only in the following situations:

• Service providers. Third parties that perform services for us and are bound by contract to protect your information. Currently these are Wix (website hosting), HubSpot (customer relationship management, where demo requests are stored), Termly (privacy request handling) and Google (web fonts).

• Business transfers. In connection with any merger, financing, sale of company assets or acquisition of all or part of our business.

• Legal requirements. Where required by law, subpoena, court order or a lawful request from a public authority, or to protect our rights, your safety or the safety of others.

We do not sell personal information, and we do not share it with third parties for their own marketing.

5. International transfers

We are based in Canada. Some of our service providers store data on servers in the United States or the European Union, so your information may be transferred to and processed in a country other than your own, where privacy laws may differ. Where we do this we take reasonable steps to ensure your information is protected in line with this Policy, including through our contracts with those providers.

6. Cookies and tracking technologies

We use cookies and similar technologies to keep the website working, remember your preferences and understand how it is used. We do not use cookies for targeted advertising. Details of the specific cookies we use, and how to control them, are in our Cookie Policy below.

7. How long do we keep your information?

We keep personal information only for as long as needed for the purposes described in this Policy — generally, for as long as needed to respond to your enquiry and maintain our business relationship with you — unless a longer period is required or permitted by law. When we no longer need it, we delete or anonymise it, or, where that is not possible (for example, in backup archives), we securely store it and isolate it from further processing until deletion is possible.

8. How do we keep your information safe?

We use appropriate technical and organisational measures to protect the personal information we process. However, no transmission over the internet or electronic storage is completely secure, and we cannot guarantee that unauthorised third parties will never defeat our safeguards. Transmission of information to and from our Services is at your own risk.

9. Information from minors

Our Services are intended for businesses and investment professionals. We do not knowingly collect information from, or market to, anyone under 18 years of age. If you believe we have collected information from a minor, contact us at andrew@exitsci.com and we will delete it.

10. Your privacy rights

Depending on where you live, you may have the right to:

• request access to and a copy of the personal information we hold about you

• request that we correct or delete it

• restrict or object to our processing of it

• receive it in a portable format

• withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal

To exercise any of these rights, email us at andrew@exitsci.com or submit a request through our data subject access request form at https://app.termly.io/dsar/e2b28ae3-8184-400c-aeab-78128ae91428. We will consider and act on any request in accordance with applicable law, and may need to verify your identity before responding.

If you are in Canada and are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada (priv.gc.ca). If you are in the EEA or UK, you may complain to your local data protection authority or, in the UK, the Information Commissioner's Office (ico.org.uk).

Opting out of marketing: you can unsubscribe from any marketing emails using the link in the email or by contacting us. We may still send you service-related messages.

Cookies: most browsers accept cookies by default; you can set your browser to refuse them, though this may affect some website features. See the Cookie Policy for details.

11. Do-Not-Track signals

Most browsers offer a Do-Not-Track ("DNT") setting. No uniform standard for recognising DNT signals has been adopted, so we do not currently respond to them. If a standard we must follow is adopted in future, we will update this Policy.

12. United States residents

If you are a resident of a US state with a comprehensive privacy law (including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah or Virginia), you may have additional rights: to know whether we process your personal data, to access, correct or delete it, to obtain a copy, to opt out of targeted advertising, sale or profiling, and not to be discriminated against for exercising these rights.

In the past twelve months we have collected the following categories of personal information: identifiers (name, email address, IP address) and internet or network activity (browsing information on our website). We have not collected any other category, including sensitive personal information, and we have not sold or shared personal information for a business or commercial purpose and will not do so.

To exercise these rights, use the contact details in section 14 or the data subject access request form linked above. If we decline your request, you may appeal by emailing andrew@exitsci.com; we will respond in writing, and if your appeal is denied you may contact your state attorney general.

13. Links to other websites

Our website may contain links to websites we do not operate. We have no control over, and accept no responsibility for, their content or privacy practices. We encourage you to review the privacy policy of every site you visit.

14. How can you contact us?

If you have questions or comments about this Policy, email us at andrew@exitsci.com or write to:

Exit Science Business Consulting Inc

1741 Lower Water St, Suite 600

Halifax, Nova Scotia B3J 0J2

Canada

15. Updates to this Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by a revised "Last updated" date at the top of this page. If we make material changes, we may also notify you by posting a notice on the website or by contacting you directly.