Privacy & data protection.
How we collect, use, protect, and retain your information. Transparency is a core value at Orchestrator, and this policy explains our practices in plain terms.
Your privacy and the security of your data are fundamental to how we operate.
This policy outlines what information Orchestrator AI Systems Ltd. ("Orchestrator") collects, how we use and protect it, and the choices you have. We collect the minimum necessary, never sell personal data, and design for privacy by default.
On compliance: Orchestrator is currently pursuing SOC 2 and aligns its controls to that framework. We handle personal information in line with applicable Canadian privacy law, including Alberta's Personal Information Protection Act (PIPA) and the federal PIPEDA.
The information we gather
Consultation Requests
When you schedule a consultation, we collect:
- First and last name
- Email address
- Your automation goals and transformation objectives
Website Usage Analytics
We collect usage data to understand how our site is used and to measure the performance of our marketing:
- Pages visited and time spent
- Referral sources
- The campaign tags on a marketing link you arrive through (for example utm_campaign) and the page you landed on, kept in your browser for the length of your visit and sent along with any form you submit, only if you allow analytics
- General location (country or region only)
- Device type and browser
- Cross-site advertising and analytics identifiers set by Google, Meta, and LinkedIn, only if you opt in (see Third-Party Services)
Our own usage metrics are aggregated. Google, Meta, and LinkedIn's tools are off by default: nothing from any of them loads until you choose to allow it through the cookie banner shown on your first visit. See Third-Party Services for what each does and how to change your choice at any time.
What your information is for
Communication
Respond to consultation requests and provide information about our services.
Service Delivery
Coordinate meetings and deliver AI consulting services tailored to your needs.
- ✓Encryption in transit (TLS)
- ✓Encryption at rest
- ✓Access controls and authentication
- ✓Periodic security review
- ✓Least-privilege access
- ✓Minimal data collection
- ✓Logical separation of customer data
- ✓No selling of personal data
We use carefully selected providers to operate our services and to understand how our website is used. Only the first is on by default; the rest require your consent, which you give (or withdraw) through the cookie banner shown on your first visit:
- Our email delivery provider, for consultation confirmations — necessary, always on
- Google (Google Analytics and Google Tag Manager), for site analytics — Analytics category, off until you opt in
- Meta (Meta Pixel), for advertising measurement. Meta Pixel sets its own cookies and shares visitor activity with Meta to measure and build advertising audiences across sites — Advertising category, off until you opt in
- LinkedIn (LinkedIn Insight Tag), for advertising measurement. Insight Tag sets its own cookies and shares visitor activity with LinkedIn to measure conversions and build advertising audiences — Advertising category, off until you opt in
Providers that process personal data are reviewed before use and tracked through our vendor management process. Change your Analytics or Advertising choice anytime via . Google, Meta, and LinkedIn also offer their own controls, if you'd rather use those instead: the Google Analytics Opt-out Browser Add-on, your Meta Ad Preferences, and your LinkedIn Ad Settings. Most browsers also let you block third-party cookies directly.
We do not sell your personal data, and we do not share it except as needed to deliver our services, to operate the analytics and advertising tools described above (and only once you've consented to them), or as required by law.
- Request access to your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Request a copy of your data
- Withdraw consent or opt out of communications
You may also contact the Office of the Privacy Commissioner of Canada with a concern. To exercise any right, email privacy@orchestrator.ca.
How long we keep it
Consultation Requests
Retained for 2 years or until you request deletion.
Project Data
Deleted within 30 days after project completion, unless otherwise agreed.
Website Analytics
Our own aggregated metrics are retained for up to 13 months. Google and Meta retain the identifiers they set under their own retention policies.
We may update this policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make material changes, we will update the effective date above and, where appropriate, notify affected customers.
This page is a summary of our practices, not a contract. Specific commitments are governed by the applicable agreement between Orchestrator and the customer.
Questions about your privacy?
For privacy questions or to exercise any of your rights, email privacy@orchestrator.ca. We are here to help.