Privacy Policy

Last Updated: November 16, 2025

1. Information We Collect

1.1 Information You Provide Directly

When you interact with our website, we may collect personal information you voluntarily provide through:

• Contact Forms: Name, company name, email address, phone number, industry, areas of interest, and message content
• Newsletter Subscriptions: Email address
• Blog Comments: Name, email address, and comment content

1.2 Information Collected Automatically

We collect certain information automatically when you visit our website:

• Usage Data: Pages visited, time spent on pages, links clicked, and navigation paths
• Device Information: Browser type, operating system, device type, and screen resolution
• Referral Information: The website or search engine that referred you to our site
• IP Address: Anonymized IP addresses for general location data (country/city level only)

2. How We Use Cookies and Tracking Technologies

2.1 Analytics Without Cookies

We use Google Analytics 4 (GA4) in a privacy-enhanced configuration:

• No cookies by default: Unless you submit a form, no tracking cookies are stored on your device
• IP anonymization: Your IP address is anonymized before processing
• No cross-site tracking: We do not track your activity on other websites
• No advertising features: We do not use Google Signals or advertising personalization
• Session-based measurement: Analytics data is collected per session without persistent user identification

2.2 Enhanced Tracking After Form Submission

When you submit a form on our website (contact form, newsletter subscription, or comment), we enable enhanced analytics tracking for your subsequent visits. This allows us to:

• Better understand your interests and provide more relevant information
• Track the effectiveness of our content and services
• Improve your user experience based on your preferences

This enhanced tracking uses standard Google Analytics cookies (_ga, _gid) and can be disabled at any time through our Cookie Settings page.

2.3 Google Tag Manager

We use Google Tag Manager (GTM) to manage our analytics and tracking technologies. GTM itself does not collect personal data but enables the controlled deployment of tracking tags.

2.4 reCAPTCHA

We use Google reCAPTCHA v3 to protect our forms from spam and abuse. reCAPTCHA collects hardware and software information (such as device and application data) and sends it to Google for analysis. Use of reCAPTCHA is subject to the Google Privacy Policy and Terms of Service.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 To Provide and Improve Our Services

• Respond to your inquiries and requests
• Provide consulting services and assessments
• Send you information about our services that you requested
• Improve our website functionality and user experience

3.2 For Analytics and Business Intelligence

• Understand how visitors use our website
• Analyze which services and content are most valuable to our visitors
• Measure the effectiveness of our marketing efforts
• Identify technical issues and improve website performance

3.3 For Marketing Communications

• Send newsletters and updates (only if you subscribed)
• Share relevant industry insights and blog posts
• Provide information about our services that may interest you

3.4 For Legal Compliance and Protection

• Comply with legal obligations and regulatory requirements
• Protect against fraud, security threats, and abuse
• Enforce our terms of service and other policies

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We may share your information in the following limited circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our website and business:

• Google Analytics: For website analytics and performance measurement
• Railway (Cloud Hosting): For database hosting and data storage
• Email Service Providers: For sending newsletters and communications (if applicable)

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.2 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to:

• Comply with legal processes or obligations
• Protect the rights, property, or safety of ChemiCan Consulting, our clients, or the public
• Prevent or investigate potential fraud or security issues

4.3 Business Transfers

If ChemiCan Consulting is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and provide choices regarding your information.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information:

• Encryption: Data transmitted between your browser and our servers is encrypted using HTTPS/SSL
• Database Security: Personal data is stored in secure, access-controlled databases
• Access Controls: Only authorized personnel have access to personal information
• Input Validation: Forms are protected against SQL injection and cross-site scripting (XSS) attacks
• Spam Prevention: reCAPTCHA protects against automated bot submissions
• Regular Security Reviews: We conduct periodic security assessments and updates

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

6.1 General Rights (All Users)

• Right to Access: Request a copy of the personal information we hold about you
• Right to Correction: Request correction of inaccurate or incomplete information
• Right to Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Right to Opt-Out: Unsubscribe from marketing communications or disable analytics tracking

6.2 GDPR Rights (European Economic Area Residents)

If you are located in the EEA, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to Portability: Receive your personal data in a structured, machine-readable format
• Right to Restriction: Request limitation of how we process your data
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for data processing at any time
• Right to Lodge a Complaint: File a complaint with your local data protection authority

6.3 CCPA Rights (California Residents)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request disclosure of personal information we collect, use, and share
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the "sale" of personal information (note: we do not sell personal information)
• Right to Non-Discrimination: You will not receive discriminatory treatment for exercising your privacy rights

6.4 How to Exercise Your Rights

To exercise any of these rights, please contact us at:

• Email: support@chemican.ca
• Phone: +1 (403) 880-4343
• Opt-Out of Tracking: Visit our Cookie Settings page
• Unsubscribe from Emails: Click the unsubscribe link in any email we send you

We will respond to your request within 30 days (or as required by applicable law).

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy:

• Contact Form Submissions: Retained for 3 years or until you request deletion
• Newsletter Subscriptions: Retained until you unsubscribe
• Blog Comments: Retained indefinitely unless you request deletion
• Analytics Data: Google Analytics data is retained for 14 months

After the retention period, personal information is securely deleted or anonymized.

8. International Data Transfers

ChemiCan Consulting is based in Canada. If you are accessing our website from outside Canada, your information may be transferred to, stored, and processed in Canada or other countries where our service providers operate.

We ensure that any international data transfers comply with applicable data protection laws through appropriate safeguards such as:

• Standard contractual clauses approved by the European Commission
• Privacy Shield certification (where applicable)
• Other legally approved transfer mechanisms

9. Children's Privacy

Our website is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete that information promptly.

10. Third-Party Links

Our website may contain links to third-party websites, including our social media profiles (LinkedIn, WhatsApp). This privacy policy does not apply to those websites. We are not responsible for the privacy practices of third-party sites and encourage you to review their privacy policies.

11. Do Not Track Signals

We respect your browser's "Do Not Track" (DNT) settings. If your browser sends a DNT signal, our analytics tracking will be automatically disabled.

12. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending an email notification to newsletter subscribers (for significant changes)

Your continued use of our website after changes are posted constitutes your acceptance of the updated policy.

13. Legal Basis for Processing (GDPR)

If you are in the EEA, our legal basis for collecting and processing your personal information depends on the data and context:

• Consent: When you submit a form, subscribe to our newsletter, or enable enhanced tracking
• Legitimate Interests: For cookieless analytics, website security, and business operations (balanced against your privacy rights)
• Contractual Necessity: To provide services you request or enter into a contract with you
• Legal Obligation: To comply with applicable laws and regulations

Thank you for trusting ChemiCan Consulting with your information.
We are committed to transparency, security, and respecting your privacy rights.