Last Updated: January 12, 2026

Introduction

Cambonu (“we”, “us”, “our”) is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

By using our Service, you agree to the collection and use of information in accordance with this policy.

This Privacy Policy complies with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

Quick Summary

What we collect: Name, email, business info, website usage data Why we collect it: To provide services, communicate with you, improve our offerings Who we share with: Service providers only (no selling of data) Your rights: Access, correct, delete your data; withdraw consent How we protect: Encryption, secure servers, limited access Your choices: Opt out of marketing, request data deletion

Read below for complete details.

1. Who We Are

Cambonu AI Strategy Consulting and Development Ontario, Canada

Contact:

Website: www.cambonu.com

Email: [email protected]

2. Scope of This Policy

This Privacy Policy applies to:

✅ Our website www.cambonu.com
✅ AI Strategy Consultation services
✅ Workflow Automation services
✅ Intelligent Chatbot services
✅ Custom AI Development services
✅ All communications and interactions with Cambonu

This policy does NOT cover:
❌ Third-party websites we link to (they have their own policies)
❌ Services after we deliver to you (your use of deliverables is your responsibility)
❌ Data processing you conduct using systems we build for you (you become the data controller)

3. Information We Collect

3.1 Information You Provide Directly

When you contact us:

  • First and last name
  • Email address
  • Phone number (optional)
  • Company name and role
  • Website
  • Country
  • Business challenges and goals (for consultation)
  • Area of interest
  • Industry and company size

When you book a consultation or engage our services:

  • Name and email
  • Phone Number
  • Payment and billing information
  • Preferred consultation date/time
  • Business information necessary to provide services
  • Technical requirements and infrastructure details
  • Project communications and feedback
  • Payment and billing information
  • Any information you choose to share

During project delivery:

  • Business information necessary to provide services
  • Technical requirements and infrastructure details
  • Project communications and feedback
  • Payment and billing information
  • Any information you choose to share

3.2 Information We Collect Automatically

Website Usage Data:

  • IP address
  • Browser type and version
  • Device type and operating system
  • Pages visited and time spent
  • Referring website
  • Geographic location (city/country level)
  • Date and time of visit

Cookies and Tracking Technologies: We use cookies and similar technologies to:

  • Remember your preferences
  • Understand how you use our site
  • Improve user experience
  • Track marketing effectiveness

See Section 10 for cookie details.

3.3 Information from Third Parties

We may receive information from:

Public sources: Company information from LinkedIn, company websites (when researching for consultation)

Booking platforms (Calendly, etc.): Appointment details

Payment processors (Stripe, PayPal, etc.): Payment confirmation, billing details

Analytics services (Google Analytics, etc.): Website usage patterns

Public sources: Company information from LinkedIn, company websites (when researching for consultation)

4. How We Use Your Information

We use your personal information for the following purposes:

4.1 Primary Service Delivery

✅ Provide Services: Deliver AI consultations, development, and support
✅ Process Bookings: Schedule and confirm appointments
✅ Communicate: Answer questions, provide updates, deliver materials
✅ Payment Processing: Bill for services and process payments
✅ Customer Support: Respond to inquiries and resolve issues

4.2 Business Operations

✅ Improve Services: Analyze usage to enhance our offerings
✅ Develop New Services: Understand needs and create relevant solutions
✅ Internal Operations: Accounting, legal compliance, business analytics
✅ Security: Detect and prevent fraud, abuse, and security issues

4.3 Marketing and Communications

✅ Marketing: Send information about our services (with your consent)
✅ Newsletter: Deliver content you subscribed to
✅ Surveys: Request feedback to improve services
✅ Promotional Offers: Share special offers and promotions

You can opt out anytime (see Section 8).

✅ Compliance: Fulfill legal and regulatory requirements
✅ Protection: Enforce our terms and protect our rights
✅ Legal Process: Respond to subpoenas, court orders, or legal requests

Under PIPEDA, we process your personal information based on:

1. Consent: You provide consent when:

  • Booking a consultation
  • Engaging our services
  • Subscribing to our newsletter
  • Using our website (implied consent for analytics)

2. Contract Performance: Processing necessary to deliver services you’ve purchased

3. Legitimate Interests: Improving services, security, and business operations (balanced against your privacy rights)

4. Legal Obligation: Compliance with tax, financial, and regulatory requirements

6. How We Share Your Information

We DO NOT sell, rent, or trade your personal information to third parties.

6.1 Service Providers

We share information with trusted service providers who help us operate:

  • Payment processors (Stripe, PayPal): Payment processing
  • Email services: Email delivery
  • Analytics: Website usage analysis
  • Hosting providers: Website and data hosting
  • CRM systems: Customer relationship management

These providers:

  • Are contractually obligated to protect your data
  • Can only use information to provide services to us
  • Must comply with PIPEDA or equivalent privacy laws

6.2 Business Transfers

If Cambonu is involved in a merger, acquisition, or sale of assets, your information may be transferred. You will be notified via email and/or prominent notice on our website of any change in ownership or use of your personal information.

We may disclose information if required by law or in good faith belief that such action is necessary to:

  • Comply with legal obligations or court orders
  • Protect and defend Cambonu’s rights or property
  • Prevent or investigate possible wrongdoing
  • Protect personal safety of users or the public
  • Protect against legal liability

We may share information for other purposes with your explicit consent.

7. International Data Transfers

Our primary operations are in Canada. However, some service providers (hosting, analytics, email) may process data in the United States or other countries.

When data is transferred outside Canada:

  • We ensure adequate safeguards are in place
  • Service providers comply with privacy frameworks (PIPEDA, GDPR, Privacy Shield alternatives)
  • Data is protected by contractual obligations

Your consent to this Privacy Policy includes consent to these transfers.

8. Your Privacy Rights (PIPEDA Rights)

Under PIPEDA, you have the following rights:

8.1 Right to Access

You can request:

  • Confirmation of whether we hold your personal information
  • Access to your personal information
  • Information about how we use and share your data

8.2 Right to Correction

You can request correction of inaccurate or incomplete personal information.

You can withdraw consent for:

  • Marketing communications (unsubscribe links in emails)
  • Newsletter subscriptions
  • Non-essential data processing

Note: Withdrawal may affect our ability to provide certain services.

8.4 Right to Data Portability

You can request your personal information in a structured, commonly used format for transfer to another service provider (where technically feasible).

8.5 Right to Erasure (“Right to be Forgotten”)

You can request deletion of your personal information, subject to:

  • Legal obligations to retain data (tax records, contracts)
  • Legitimate business needs (defending legal claims)
  • Technical limitations

8.6 Right to Object

You can object to processing of your personal information for:

  • Direct marketing (opt out anytime)
  • Processing based on legitimate interests (we will assess and respond)

8.7 How to Exercise Your Rights

Contact us:

  • Email: [email protected]
  • Subject: “Privacy Rights Request”
  • Include: Your name, contact info, and specific request

Response timeline: We will respond within 30 days (may extend to 60 days for complex requests with notice).

Verification: We may request identification to verify your identity before processing requests.

No fee: Requests are free unless excessive or repetitive (we may charge reasonable administrative fee).

9. Data Retention

9.1 Retention Periods

We retain personal information for as long as necessary to fulfill the purposes described in this policy:

  • Active clients: Duration of engagement + 7 years (tax/legal requirements)
  • Consultation data: 7 years from consultation date (legal, tax requirements)
  • Marketing contacts: Until you unsubscribe or request deletion
  • Website analytics: 26 months (Google Analytics default)
  • Support communications: 3 years from last contact
  • Payment records: 7 years (tax requirements)
  • Contracts and SOWs: 7 years after completion (legal requirements)

9.2 Deletion Process

After retention period expires:

  • Data is securely deleted or anonymized
  • Backups are overwritten according to backup rotation schedules
  • Physical records (if any) are shredded

We may retain data longer if required by legal obligations, disputes, or regulatory investigations.

10. Cookies and Tracking Technologies

10.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us understand how you use our site and improve your experience.

10.2 Types of Cookies We Use

Essential Cookies (Required):

  • Enable basic website functionality
  • Remember your preferences (language, region)
  • Support security features

Analytics Cookies (Optional):

  • Track website usage and performance
  • Understand visitor behavior
  • Improve user experience
  • Provider: Google Analytics

Marketing Cookies (Optional):

  • Track effectiveness of marketing campaigns
  • Retargeting and advertising
  • Provider: Google Ads, Facebook Pixel

Browser Settings: Configure your browser to:

  • Block all cookies
  • Block third-party cookies
  • Delete cookies after each session
  • Notify you when cookies are set

Opt-Out Tools:

  • Google Analytics Opt-Out: Browser Add-On
  • Cookie preference settings

Impact of Blocking Cookies:

  • Website functionality may be limited
  • We cannot remember your preferences
  • Analytics will not track your usage

11. How We Protect Your Information

11.1 Security Measures

We implement reasonable administrative, technical, and physical safeguards:

Technical:

  • SSL/TLS encryption for data in transit (HTTPS)
  • Encryption at rest for sensitive data
  • Secure hosting infrastructure
  • Regular security updates and patches
  • Firewalls and intrusion detection
  • Secure backup systems

Administrative:

  • Employee training on privacy and security
  • Limited access (need-to-know basis)
  • Confidentiality agreements with staff and contractors
  • Incident response procedures
  • Regular security audits

Physical:

  • Secure data centers (third-party hosting)
  • Restricted access to facilities
  • Environmental controls

11.2 No Absolute Security

Important: No method of transmission or storage is 100% secure. While we implement reasonable measures, we cannot guarantee absolute security. You transmit information at your own risk.

11.3 Data Breach Notification

In the event of a data breach affecting your personal information:

  • We will notify you promptly (as required by law)
  • We will report to the Office of the Privacy Commissioner of Canada if required
  • We will provide information about the breach and remedial measures

12. Children’s Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children under 18.

If you are a parent/guardian and believe your child has provided personal information, contact us immediately. We will delete such information.

If you are under 18, do not use our Service or provide any personal information.

Our website may contain links to third-party websites (resources, case studies, tools).

We are not responsible for:

  • Privacy practices of third-party sites
  • Content or services on third-party sites

Review their privacy policies before providing any personal information.

14. Changes to This Privacy Policy

14.1 Updates

We may update this Privacy Policy from time to time to reflect:

  • Changes in our practices
  • Legal or regulatory requirements
  • New services or features
  • Feedback from users or regulators

14.2 Notification

Material changes:

  • Prominent notice on our website
  • Email notification to active clients
  • Updated “Last Updated” date at top of policy

Non-material changes:

  • Updated “Last Updated” date
  • Continued use of Services constitutes acceptance

14.3 Review Regularly

We encourage you to review this Privacy Policy periodically.

15. Contact Us and Complaints

15.1 Privacy Questions or Concerns

Contact us:

Email: [email protected] Subject: “Privacy Inquiry”

Mail: Cambonu Inc. – Privacy Officer 1-1-511 Lacolle Way, Suite #8241 Ottawa, K4A 5B6, Ontario, Canada

We will respond within 30 days.

15.2 Complaints Process

If you believe we have not complied with privacy laws:

Step 1: Contact us directly (details above)

  • We will investigate and respond within 30 days

Step 2: Office of the Privacy Commissioner of Canada

  • If unresolved, you may file a complaint with:
    Office of the Privacy Commissioner of Canada 30 Victoria Street Gatineau, QC K1A 1H3
    Phone: 1-800-282-1376 
    Website: www.priv.gc.ca 
    Online complaint: File a Complaint

16. Language

In the event of any discrepancy between the English and French versions of this Privacy Policy, the English version shall prevail.

Dans le cas d’une divergence entre les versions anglaise et française de la présente politique de confidentialité, la version anglaise prévaudra.

BY USING OUR SERVICES OR WEBSITE, YOU CONSENT TO THE COLLECTION, USE, AND DISCLOSURE OF YOUR PERSONAL INFORMATION AS DESCRIBED IN THIS PRIVACY POLICY.

If you do not agree, please do not use our Services.

You can withdraw consent at any time (see Section 8), subject to legal or contractual restrictions.

18. Accessibility

We are committed to making this Privacy Policy accessible. If you have difficulty accessing this policy, please contact us and we will provide it in an alternative format.

PIPEDA Compliance Statement

This Privacy Policy is designed to comply with:

  • Personal Information Protection and Electronic Documents Act (PIPEDA)
  • Ontario’s privacy legislation
  • Canadian Anti-Spam Legislation (CASL)

We adhere to PIPEDA’s 10 Fair Information Principles:

  1. Accountability
  2. Identifying Purposes
  3. Consent
  4. Limiting Collection
  5. Limiting Use, Disclosure, and Retention
  6. Accuracy
  7. Safeguards
  8. Openness
  9. Individual Access
  10. Challenging Compliance

Summary of Key Points

TopicWhat You Need to Know
What we collectName, email, business info, website usage
Why we collectProvide services, communicate, improve offerings
How we protectEncryption, secure servers, limited access
Who we share withService providers only (no selling)
Your rightsAccess, correct, delete, opt-out
CookiesAnalytics and functional (you can opt-out)
Retention7 years for business records (legal requirement)
Contact[email protected]