Effective Date: September 27, 2026
1. Introduction and Company Information
This Privacy Policy explains how Ridge Advisory Inc. (“Ridge Advisory Inc.”, “we”, “us”, or “our”) collects, uses, discloses, stores, and protects personal information in the course of providing consulting services and operating the website bixzat.pro.
Ridge Advisory Inc. is located at:
100 King Street West, Suite 5600
Toronto, ON M5X 1C9
Canada
Company Registration / CIN: 1599552158
Email: [email protected]
Phone: +1 416 555 0198
This Privacy Policy is intended to comply with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (“PIPEDA”) and, where applicable, other provincial privacy laws. By using our website, contacting us, or engaging our services, you acknowledge that your personal information may be handled as described in this Privacy Policy.
2. Data Collection and Processing
We collect personal information that is necessary for legitimate consulting, business, administrative, security, and legal purposes. Depending on your interaction with us, we may collect the following categories of personal information:
- Identification and contact information: name, email address, phone number, company name, job title, mailing address, and other contact details.
- Business and inquiry information: information you provide in consultation requests, project briefs, communications, meeting notes, and service-related correspondence.
- Client and service information: records related to contracts, invoices, payment status, service history, deliverables, and account administration.
- Website and device information: IP address, browser type, device identifiers, pages visited, timestamps, referral data, and usage analytics collected through cookies or similar technologies.
- Communication records: emails, phone calls, messages, feedback, support requests, and any recordings or transcripts where permitted by law and disclosed to you.
- Compliance information: information required for identity verification, fraud prevention, recordkeeping, tax, accounting, and legal compliance.
We generally collect personal information directly from you, such as when you complete a form, communicate with us, request a consultation, subscribe to updates, or engage our services. We may also collect information from third-party service providers, business partners, public sources, and analytics providers, where permitted by law.
We limit collection to what is reasonable and necessary for the identified purposes. We do not knowingly collect personal information from minors without appropriate consent or authorization, and our services are not directed to children.
3. Purpose of Data Processing
We use personal information for the following purposes:
- To respond to inquiries and provide consulting services.
- To assess client needs, prepare proposals, and enter into service agreements.
- To manage client relationships, communications, invoicing, billing, and administration.
- To operate, maintain, secure, and improve our website and business operations.
- To personalize and optimize user experience and understand website usage trends.
- To send service-related notices, administrative messages, and, where permitted, marketing communications.
- To detect, prevent, investigate, and address fraud, unauthorized access, cybersecurity incidents, and other misuse.
- To comply with legal, regulatory, accounting, tax, and contractual obligations.
- To establish, exercise, or defend legal claims and enforce our agreements.
Where required by law, we will obtain your consent before using personal information for purposes that are not obvious from the circumstances or not otherwise permitted under applicable law.
4. Legal Basis for Processing
In Canada, personal information must be collected, used, and disclosed only for purposes that a reasonable person would consider appropriate in the circumstances. Where applicable, we rely on the following grounds to process personal information:
- Consent: where you have given express or implied consent, as appropriate.
- Contractual necessity: where processing is required to provide services, prepare proposals, fulfill agreements, or manage our relationship with you.
- Legal and regulatory obligations: where processing is required to comply with applicable laws, regulations, court orders, or lawful requests.
- Legitimate business purposes: where processing is necessary for our reasonable business operations, security, fraud prevention, service improvement, and recordkeeping, provided such purposes are appropriate in the circumstances and do not override your rights.
Where applicable provincial laws require a specific legal basis or notice, we will comply with those requirements.
5. Data Sharing and Third Parties
We do not sell personal information. We may disclose personal information to third parties only as necessary and consistent with this Privacy Policy, including:
- Service providers: vendors that support website hosting, IT support, cloud storage, analytics, email delivery, accounting, payment processing, customer relationship management, and security services.
- Professional advisers: lawyers, accountants, auditors, insurers, and similar advisers bound by confidentiality obligations.
- Business partners: where required to deliver requested services or collaborate on a client engagement, subject to appropriate safeguards.
- Authorities and regulators: where disclosure is required or permitted by law, including to comply with legal process, enforce our rights, or protect the safety of individuals or property.
- Transaction counterparties: in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, subject to confidentiality protections where appropriate.
All third-party service providers are expected to protect personal information using safeguards appropriate to the sensitivity of the information and to use it only for authorized purposes.
6. Data Transfer to Third Countries
Your personal information may be stored or processed outside of Canada, including in jurisdictions such as the United States or other countries where our service providers or affiliates operate. In those jurisdictions, personal information may be subject to access by courts, law enforcement, or regulatory authorities under applicable laws.
When personal information is transferred outside Canada, we use contractual, technical, organizational, and legal safeguards designed to protect it in a manner appropriate to the sensitivity of the information. These safeguards may include confidentiality commitments, access controls, encryption, and vendor due diligence.
By providing personal information to us, you acknowledge that cross-border processing may occur as described above.
7. Storage Duration
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, to comply with legal and regulatory obligations, to resolve disputes, and to enforce agreements.
Retention periods vary depending on the type of information, the nature of the relationship, and applicable legal requirements. Examples include:
- Inquiry and lead information: retained for a reasonable period to manage follow-up and business development.
- Client and contract records: retained for the duration of the relationship and afterward as required for legal, tax, accounting, and audit purposes.
- Website and analytics data: retained for a period necessary for operational, security, and analytical purposes.
- Security and incident records: retained as needed for investigation, defense, and compliance.
When personal information is no longer required, we will securely delete, destroy, anonymize, or de-identify it, as appropriate.
8. User Rights
Subject to applicable law, you may have the following rights in relation to your personal information:
- Access: the right to request access to the personal information we hold about you and information about how it has been used and disclosed.
- Rectification: the right to request correction of inaccurate, incomplete, or outdated personal information.
- Erasure: the right to request deletion of personal information in certain circumstances, subject to legal retention obligations and exceptions.
- Restriction: the right to request that we limit certain processing in appropriate circumstances.
- Data portability: where applicable, the right to receive certain personal information in a structured, commonly used, and machine-readable format and, where technically feasible, have it transferred to another organization.
- Objection: the right to object to certain processing, including where processing is based on legitimate business interests, subject to applicable legal exceptions.
To exercise any of these rights, please contact us using the details provided in the Contact Information section. We may need to verify your identity before responding to your request. We will respond within the time required by applicable law.
9. Withdrawal of Consent
Where our processing is based on your consent, you may withdraw that consent at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.
If you withdraw consent, we may no longer be able to provide certain services or respond to certain requests. We will explain the consequences where relevant. To withdraw consent, contact us at [email protected].
10. Right to Complain
If you have concerns about our privacy practices, we encourage you to contact us first so we can attempt to resolve the matter promptly.
You may also have the right to file a complaint with the Office of the Privacy Commissioner of Canada or, where applicable, a provincial privacy regulator. If you believe we have failed to comply with applicable privacy laws, you may submit a complaint to the relevant authority.
Contact information for the Office of the Privacy Commissioner of Canada can be found on its official website.
11. Data Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification. These safeguards may include:
- Access restrictions and role-based permissions;
- Encryption in transit and, where appropriate, at rest;
- Secure storage and backup practices;
- Monitoring and logging of systems and access activity;
- Employee confidentiality obligations and privacy training;
- Vendor assessment and contractual safeguards.
No method of transmission over the Internet or electronic storage is completely secure. While we take reasonable measures to protect personal information, we cannot guarantee absolute security.
If we become aware of a privacy or security incident involving personal information, we will respond in accordance with applicable legal requirements, which may include containment, investigation, notification, and remediation.
12. Contact Information
If you have any questions, concerns, requests, or complaints regarding this Privacy Policy or our handling of personal information, please contact:
Ridge Advisory Inc.
100 King Street West, Suite 5600
Toronto, ON M5X 1C9
Canada
Email: [email protected]
Phone: +1 416 555 0198
We will make reasonable efforts to respond to your inquiry in a timely manner.
13. Changes to Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or business operations. When we make material changes, we will post the revised Privacy Policy on our website and update the effective date above, and where appropriate we may notify you by email or other reasonable means.
We encourage you to review this Privacy Policy periodically to stay informed about how Ridge Advisory Inc. protects personal information.
By using our website, communicating with us, or engaging our services, you acknowledge that you have read and understood this Privacy Policy.