Privacy Policy

Last updated: September 2026

Ofnex Consulting Inc. ("Ofnex," "we," "us," or "our") respects your privacy. This policy explains what personal information we collect through ofnexconsulting.ai (the "Site"), why we collect it, and how it's handled, in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

1. Information we collect

We collect information in two ways:

Information you provide directly

• Contact form submissions: name, company/organization, email address, and message content.
• Discovery call bookings made through Calendly: name, email, and any details you choose to share about your business.
• Any information you send us by email or during an engagement, which is separately governed by the mutual NDA and engagement agreement signed before any operational or client data is discussed.

Information collected automatically

• Google Analytics (GA4), only if you click "Accept analytics" on the cookie notice: pages visited, approximate location (city/region level), device and browser type, and referring site. GA4 does not log or store full IP addresses. If you decline, or ignore the notice, the analytics script is never loaded.
• Standard server logs maintained by our hosting provider.

We do not use cookies or scripts for cross-site advertising, and we do not sell personal information.

2. How we use your information

• To respond to inquiries and schedule discovery calls.
• To understand how visitors use the Site, so we can improve it (only where you've accepted analytics).
• To send occasional updates you've explicitly opted into (such as the Insights newsletter), which you can unsubscribe from at any time.
• To meet legal, accounting, or regulatory obligations.

We do not use information submitted through this Site to train AI models, and we do not share it with third parties for their own marketing purposes.

3. Who we share information with

We use a small number of third-party service providers to operate this Site and our business, each of which processes data under its own privacy terms:

• Formspree — processes contact form submissions and relays them to our email.
• Calendly — processes discovery call bookings.
• Google Analytics — processes website usage data, only with your consent.

Some of these providers may process or store data on servers located outside Canada, including in the United States. Where that is the case, your information may become subject to the laws of that jurisdiction, including lawful access by its government and courts.

4. Cookies

The Site sets no cookies unless you accept analytics. If you do, Google Analytics sets cookies (names beginning with _ga) to distinguish visitors. Your choice is stored in your browser's local storage so we don't ask again. You can change it at any time with the Cookie settings link in the footer; choosing Decline stops analytics and removes its cookies. Declining does not affect your ability to use the Site or contact us.

5. Data retention

Contact form and booking information is retained only as long as needed to respond to your inquiry and, where an engagement follows, as required by our engagement agreement and applicable tax and corporate record-keeping obligations. Analytics data is retained per Google Analytics' standard retention settings.

6. Security

We apply reasonable administrative and technical safeguards appropriate to the sensitivity of the information involved. Operational or client data shared during an active engagement is handled under the security controls described in that engagement's NDA and statement of work — typically deployed into your own cloud environment rather than a shared platform. See our Trust & security page for details.

7. Your rights

Under PIPEDA, you may request access to the personal information we hold about you, ask us to correct inaccuracies, or withdraw consent to further collection or use (subject to legal or contractual restrictions). To make a request, contact us using the details below — we will respond within a reasonable time, generally within 30 days.

8. Children's privacy

This Site is intended for business audiences and is not directed at children. We do not knowingly collect personal information from children.

9. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. The "last updated" date above reflects the most recent revision.

10. Contact us

Questions about this policy, or requests regarding your personal information, can be sent to info@ofnexconsulting.ai.