Legal

Privacy Notice

Last updated 22 August 2026.

1. Who we are and how to reach us

Blaecwood is a security and compliance advisory practice operating from Toronto, Canada. This notice explains how we handle personal information collected through blaecwood.com and the booking flow reachable from it, in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and any provincial private-sector privacy law that applies to you.

Privacy enquiries, including requests for access or correction, go to privacy@blaecwood.com. This role-based address is monitored so that a request reaches us whoever is on duty.

2. What this notice covers

This notice covers personal information we collect for our own purposes through this website. It does not cover information we handle on a client's behalf during an engagement; in that work, the engagement agreement and the client's own privacy practices govern.

3. What we collect

3.1 Through the website

When you load a page, our hosting and content delivery infrastructure receives the technical information needed to serve it and keep it secure: your IP address, the date and time of the request, the pages requested, the referring page where one is sent, and your browser and device type.

Each page requests the Inter typeface from Google Fonts. That request is made by your browser directly to Google and discloses your IP address and browser details to Google. The site still works if your browser blocks third-party font requests.

There is no analytics provider, tag manager or advertising pixel on this website. Nothing on these pages measures your behaviour, builds a profile of you, or reports your visit to a third party.

3.2 Through the booking flow

Nothing is requested from our booking provider, Cal.com, while you are simply reading the site. The booking calendar loads only when you select a booking control. Once you open the calendar and make a booking, you provide your name, email address, time zone, your chosen date and time, and anything you enter in the booking form. We receive the booking and the calendar entry that follows from it. Calls are typically held over a video conferencing service, which processes the meeting connection.

3.3 Direct correspondence

If you email us, or reply to a message from us, we hold that correspondence and whatever you choose to include in it.

4. Why we collect it, and consent

We collect and use personal information for these purposes:

Where you book a call or write to us, your consent to the handling described here is implied by that action, as PIPEDA permits for information volunteered for an evident purpose. We do not use the information for a materially different purpose without telling you and, where required, obtaining fresh consent. We do not sell personal information, and we do not use it for third-party advertising.

5. Who receives it

Personal information described in this notice is handled by the service providers we use to run the practice, each limited to its role:

We may also disclose personal information to professional advisers where we need advice on a matter it concerns, and to a regulator, court or law enforcement authority where the law requires or permits it.

6. Where it is processed

Some of the providers above operate outside Canada, including in the United States, so personal information may be stored and processed there and may be accessible to the authorities of those jurisdictions under their laws. We remain accountable for personal information transferred to a provider for processing and use contractual means to require a comparable level of protection.

7. How long we keep it

We keep personal information only as long as necessary for the purposes above, and afterwards for any period required by law, professional obligation or the defence of legal claims. Enquiry and booking records are kept while the relationship is active and for a reasonable period afterwards. When information is no longer needed, it is deleted or anonymised.

8. How we protect it

We apply safeguards appropriate to the sensitivity of the information: access limited to those who need it, encryption in transit, and assessment of the security practices of the providers we engage. No system is perfectly secure, and we do not claim otherwise. Where a breach of security safeguards creates a real risk of significant harm to you, we will report it to the Office of the Privacy Commissioner of Canada and notify you as PIPEDA requires.

9. Access and correction

You can ask whether we hold personal information about you, request a copy of it, and ask us to correct information that is inaccurate or incomplete. Send your request to privacy@blaecwood.com with enough detail for us to find your records. We will verify that the request comes from you, respond within 30 days of a verified request, and tell you if we need longer and why. Access is free; where PIPEDA permits a minimal cost, we will tell you before proceeding. You can also withdraw consent to handling that relies on it, subject to legal and contractual restrictions, and we will explain the consequences of withdrawal at the time.

10. Complaints

We would rather hear from you first, because most issues are resolved fastest that way. You are also entitled to complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca, or to your provincial privacy regulator where provincial law applies.

11. Changes to this notice

We review this notice when what we collect, why, who receives it or how long we hold it changes. The date at the top is the date of the current version. Where a change materially affects how we use personal information about you, we will bring it to your attention directly.

Read this notice with the Terms of Use, which govern your use of this website.