Privacy Policy

For the purposes of applicable privacy laws, including the EU General Data Protection Regulation (GDPR) where it may apply, the data controller is:

If you are contacting us to exercise privacy rights, please email the privacy address above. To help us confirm we are responding to the right request, include the email address you used to contact us and a short description of what you want (for example, “access request” or “delete my correspondence”).

We collect information in three main ways: (a) information you provide to us directly, (b) information collected automatically when you use the website, and (c) information from cookies and similar technologies depending on your cookie choice.

2.1 Information you provide

If you email us or submit a form on a page where we offer contact functionality, we may collect:

• Full name (if you include it in your message or a form field)
• Email address
• Phone number (only if you choose to include it)
• Message content and any information you choose to share with us

We ask that you avoid sending sensitive personal information by email. If you choose to share such details, we will treat them carefully, but email is not a secure channel.

2.2 Information collected automatically

When you visit the website, our servers and security tooling typically log limited technical information, which can include:

• IP address
• Browser and device information (such as browser type/version, operating system, device type)
• Referring page (the page you came from, if available)
• Pages visited and time stamps (to help operate and secure the site)

This information helps us keep the site reliable, mitigate abuse, and understand broad usage patterns. We do not attempt to identify you from this data alone.

2.3 Cookies and similar technologies

Cookies are small text files stored on your device. We also use local storage for storing your cookie choice so we can respect it when you return. Depending on your selection in the cookie banner, cookies may be used for strictly necessary purposes and for analytics.

We collect information through:

• Web forms and email, when you choose to contact us
• Server logs, which record limited technical data when requests are made to our website
• Cookies and local storage, including a stored cookie preference value
• Analytics tools such as Google Analytics 4, enabled only when you accept analytics cookies
• Advertising measurement pixels such as the Meta Pixel, enabled only when you accept marketing cookies if used on a page

We may test analytics or advertising measurement tools from time to time. If we do, we aim to keep them consent-based and described in this policy. If a tool changes the categories of data collected, we will update this policy accordingly.

If GDPR applies to our processing, we rely on the following legal bases depending on the context:

We use collected information for the following purposes:

• Site delivery and performance: serving pages, optimizing load times, and ensuring basic functionality.
• Security and fraud prevention: detecting suspicious activity, preventing abuse, and protecting our infrastructure.
• Customer support and communications: responding to inquiries and keeping a record of the interaction for continuity.
• Analytics (consent-based): understanding broad usage patterns such as which sections are read most often.
• Marketing measurement (consent-based): measuring the effectiveness of advertising campaigns when we run them, without changing what content a visitor sees.
• Legal compliance: meeting applicable legal requirements and enforcing our Terms.

We do not use the website to make decisions that produce legal or similarly significant effects based solely on automated processing.

We keep information only as long as needed for the purposes described above, then delete or anonymize it where feasible. Typical retention periods are:

• Form submissions and email correspondence: up to 2 years from the date of last contact, unless a longer period is needed to address a dispute or legal obligation.
• Server security logs: typically 90 days, unless an incident requires longer investigation and documentation.
• Analytics data (GA4, if enabled by consent): 14 months for user-level data controls, after which data is deleted or aggregated per tool settings.
• Cookie preference record: stored in your browser storage until you clear it or it is replaced by a new choice.
• Marketing measurement events (if enabled by consent): retained according to the tool provider’s settings, typically up to 180 days for measurement windows, subject to your consent and platform policies.

If you request deletion, we will delete information we are not required to keep, and we will confirm the outcome by email when appropriate.

We may share information with trusted service providers (data processors) who help us run the website and communicate with users. We do not sell personal information and we do not share it with third parties for their independent marketing purposes.

Categories of processors we may use include:

• Hosting and infrastructure providers: to deliver the website and store operational logs.
• Email service providers: to receive and respond to messages you send us.
• Analytics providers: Google Analytics 4, if you consent to analytics cookies.
• Advertising measurement providers: Meta (Facebook/Instagram) measurement tools, if you consent to marketing cookies and if such tools are used on a page.

We may also disclose information where required by law, to protect our rights, or to investigate fraud and security issues. If a disclosure is legally restricted, we may not be able to notify you.

We are based in Canada, but some of our service providers may process data in other countries, including the United States and countries in the European Economic Area (EEA), depending on provider infrastructure. This means personal information may be transferred and stored outside your province, territory, state, or country.

Where GDPR applies and a transfer leaves the EEA to a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (SCCs) and additional technical and organizational measures where needed.

If you want more detail about the safeguards used for a specific provider, you can contact us at [email protected].

Depending on your location, you may have rights related to your personal information. If GDPR applies, you have the following rights:

• Right of access: request a copy of personal data we hold about you.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion of your personal data in certain circumstances.
• Right to restrict processing: request that we limit use of your data in certain cases.
• Right to data portability: request a machine-readable copy of data you provided to us when processing is based on consent or contract.
• Right to object: object to processing based on legitimate interests; we will assess and respond.
• Right to withdraw consent: where processing is based on consent (for example, analytics cookies), you can withdraw it at any time.

To exercise these rights, email [email protected]. We may ask for reasonable information to verify your identity before completing a request.

You also have the right to lodge a complaint with a supervisory authority. If you are in the EEA, you can contact your local authority. For example, in Ireland the authority is the Data Protection Commission (DPC). If you are in Canada, you can contact the Office of the Privacy Commissioner of Canada (OPC).

We use the following categories of cookies and similar technologies:

10.1 Strictly necessary

These are needed for basic site operation, such as remembering your cookie preference and helping prevent abuse. Without them, the site may not function as expected.

• Cookie choice record: stored in browser storage as cott_cookie_choice; duration is until you clear browser storage or reset the value.

10.2 Analytics

If you accept analytics cookies, we may enable Google Analytics 4 to understand how the site is used in aggregate. This can include pages viewed, approximate location derived from IP (often at a city or regional level), device type, and session interactions. We use these insights to improve navigation and content clarity, not to identify individual readers.

Typical analytics cookie durations vary by provider and configuration. Where set, they may range from a session to up to 14 months.

10.3 Marketing

If you accept marketing cookies, we may enable measurement tools like the Meta Pixel to understand whether an ad led to a visit and whether visitors engage with the site. This helps us evaluate campaign performance. It does not change the content you see on the website.

Marketing cookies can be set by third parties and their durations vary. You can review provider-specific information in their help centers and adjust ad preferences within the relevant platform.

10.4 How to manage cookies

You can manage cookies in two main ways:

• Cookie banner choice: choose Accept or Reject when the banner appears.
• Browser controls: delete existing cookies, block third-party cookies, or set rules for site data in your browser settings.

If you rejected cookies and later want to change your decision, you can clear your site data for this domain in your browser and revisit the site. The banner will appear again.

This website is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided personal information to us, please contact [email protected] and we will take steps to delete it where appropriate.

We use reasonable administrative, technical, and organizational measures to protect information against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we learn of a security incident that affects your personal information, we will take appropriate steps consistent with applicable law.

We may update this Privacy Policy to reflect changes to the website, tools we use, or legal requirements. When we update the policy, we will change the “Last Updated” date at the top of this page. If changes are material, we may also provide a notice on the website.

For privacy questions or requests, contact:

For general questions about our content, you can also reach us at [email protected].