Privacy Policy

Compliance With International Privacy Laws (GDPR, CCPA, PIPEDA)

Valsys complies with applicable international privacy regulations, including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). Additional rights and disclosures for users in these jurisdictions are included throughout this Privacy Policy.

This Privacy Policy describes how we collect, use, disclose, and protect information when you visit our website or interact with us. This website is operated by Valsys Inc., an Ontario corporation ("we", "our", or "us"). By using our website, you consent to the practices described in this Privacy Policy.

1. Information We Collect

a. Information You Provide

When you submit a form on our website, we may collect the following information:

• Name
• Email address
• Company name
• Job title
• Phone number
• Any other information you choose to include

b. Automatically Collected Information

Our website uses HubSpot analytics. HubSpot may automatically collect:

• IP address
• Device and browser information
• Pages visited
• Referring website
• Clickstream activity

This information helps us analyze website performance and improve our services.

2. How We Use Your Information

We may use the information collected to:

• Respond to inquiries and provide customer support
• Send marketing communications (only if permitted)
• Improve our website and services
• Analyze traffic and user behavior using HubSpot analytics
• Maintain website security and integrity

3. Legal Basis for Processing

We process your personal information based on:

• Your consent, when you submit forms or accept cookies/analytics
• Legitimate business interests, such as improving our services
• Contractual necessity, when providing requested information or materials
• Compliance with applicable laws, including PIPEDA and GDPR

4. How Your Information Is Shared

We may share your information with (in compliance with GDPR, CCPA, and PIPEDA):

• HubSpot, our CRM and analytics provider
• Service providers supporting our website operations
• Regulatory authorities, if required by law

We do not sell personal information.

Data Processing Agreements (GDPR)

We maintain Data Processing Agreements (DPAs) with third-party providers, including HubSpot, to ensure they meet GDPR requirements, including:

• Data security
• Confidentiality
• Standard Contractual Clauses (SCCs) for international data transfers

HubSpot may store your information on servers outside of Canada, including in the United States. HubSpot adheres to recognized security and compliance standards.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience. HubSpot may also place cookies for analytics and tracking.

GDPR Cookie Notice

If you are located in the EU, UK, or EEA, non-essential cookies (e.g., analytics) will only be activated with your explicit consent.

CCPA Notice Regarding Cookies

California residents may opt out of certain tracking or analytics activities considered "sharing" under the CCPA.

You may adjust cookie preferences through your browser settings or via our cookie consent banner (where applicable).

6. Data Retention

We retain personal information only as long as necessary for business, legal, or contractual reasons.

Retention Criteria

Retention periods may be determined based on:

• Legal and regulatory requirements
• Contractual obligations
• The nature and purpose of collected data
• Security, fraud prevention, and operational needs

Where possible, we anonymize or securely delete personal information when it is no longer required.

7. Security

We use reasonable safeguards to protect your information, including:

• Administrative measures
• Technical measures
• Physical measures

However, no method of transmission over the internet is 100% secure.

International Data Transfers

Your information may be transferred to and stored in countries outside of your jurisdiction, including the United States. These countries may have different data protection laws than your home jurisdiction.

Where required, we use safeguards such as Standard Contractual Clauses (SCCs) and contractual protections to ensure an adequate level of protection.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access your personal information
• Request corrections
• Withdraw consent
• Request deletion (where applicable)
• Restrict or object to processing (GDPR)
• Request data portability (GDPR)
• Opt out of the sale or sharing of personal information (CCPA)
• Designate an authorized agent to make CCPA requests on your behalf

We will respond to verified requests in accordance with applicable privacy laws.

CASL Consent (Canada)

By submitting forms on our website, you may be providing express consent under Canada's Anti-Spam Legislation (CASL). You may withdraw consent at any time by using the unsubscribe link in our communications or contacting us directly.

To exercise privacy rights or withdraw consent, contact us at privacy@valsys.io .

9. Third‑Party Links

Our website may contain links to external websites. We are not responsible for their privacy practices.

10. Updates to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with a revised "Last updated" date.

11. Privacy Officer (PIPEDA Requirement)

We designate a Privacy Officer responsible for overseeing privacy practices and compliance.