Privacy Policy

1. Organization identity and accountability

Data Narrative Inc. is the organization responsible for personal information under this policy. We are a professional training provider headquartered at 222 Bay Street, Suite 1805, Toronto, Ontario M5J 2J1, Canada. Business Number: 814927563 RC0001.

Our Privacy Officer may be reached at [email protected] or by mail at the address above. We have designated an individual accountable for compliance with PIPEDA principles and for responding to access requests within statutory timeframes.

2. Scope of this policy

This policy applies to personal information collected through our website, contact forms, workshop enrollment, corporate training contracts, email correspondence, and in-person interactions at our Toronto studio. It does not apply to third-party websites linked from our pages, nor to AI tools (ChatGPT, Copilot, Claude) that participants may use independently during or after training — those services are governed by their respective providers' policies.

3. What personal information we collect

We collect only information reasonably necessary for the purposes identified below:

• Contact and identity: name, email address, telephone number, job title, and organization name when you submit an enquiry or register for a programme.
• Enrollment details: billing address, purchase order references, dietary requirements, accessibility accommodations, and emergency contact where relevant to workshop delivery.
• Communication records: messages you send via our contact form, email threads with our enrollment team, and notes from briefing calls.
• Website technical data: IP address, browser type, pages visited, and referral source when you use our site — primarily through cookies described in our Cookie Policy.
• Payment information: processed by our payment processor; we do not store full credit card numbers on our servers.

We do not knowingly collect sensitive personal information such as government identifiers, health records, or financial account credentials through our website forms. Workshop exercises may involve anonymized sample datasets only — participants are instructed not to submit live confidential client data through our systems.

4. Purposes for collection and use

We collect personal information for identified purposes and do not use it for unrelated purposes without consent, except as permitted by law:

• Responding to narrative module enquiries, corporate training requests, and workshop registrations.
• Delivering training programmes, sending schedules, materials, and post-workshop resources.
• Processing payments and issuing receipts in CAD.
• Improving our website and understanding aggregate traffic patterns (with consent for analytics cookies).
• Complying with legal obligations, including tax and corporate registry requirements.
• Protecting our rights and preventing fraud, including honeypot spam detection on contact forms.

5. Legal bases and consent

Under PIPEDA, we rely primarily on meaningful consent. When you submit our contact form, you must actively check a consent box confirming you agree to our collection and use of your information to respond to your enquiry. Consent is not pre-selected. For enrollment contracts, consent is obtained through signed agreements or explicit email confirmation.

You may withdraw consent for non-essential communications at any time by emailing [email protected]. Withdrawal does not affect the lawfulness of processing before withdrawal, nor our ability to retain records required for legal or contractual purposes.

Where consent is not required, we may process information based on legitimate interests (e.g., network security logs) or legal obligation (e.g., tax record retention).

6. Disclosure to third parties

We do not sell or rent personal information. We may share data with:

• Service providers: email delivery, payment processing, cloud hosting, and enrollment management tools bound by confidentiality agreements.
• Professional advisers: accountants or legal counsel when necessary.
• Authorities: when required by law, court order, or to protect safety.

Service providers may store data in Canada or the United States. When information crosses borders, we ensure contractual protections consistent with PIPEDA accountability requirements.

7. Retention

We retain personal information only as long as necessary for the purposes collected:

• Contact form submissions: up to twenty-four months unless an enrollment relationship continues.
• Enrollment and billing records: seven years from the end of the fiscal year, per Canadian tax requirements.
• Cookie consent preferences: six months, then re-prompted.
• Analytics data: aggregated reports retained up to twenty-six months.
• Corporate training contracts and signed agreements: duration of contract plus seven years for audit purposes.
• Alumni forum accounts: active for the subscribed period plus twelve months after expiry, then deleted unless you request earlier removal.

When retention periods expire, we securely delete or anonymize information. Anonymized aggregate statistics may be retained indefinitely for programme improvement reporting.

7a. Cross-border transfers

Some service providers may process data in the United States or other jurisdictions. When personal information is transferred outside Canada, Data Narrative Inc. remains accountable under PIPEDA and uses contractual clauses requiring comparable protection. You may request details of cross-border subprocessors by contacting [email protected].

8. Your individual access rights

Under PIPEDA, you have the right to:

• Request access to personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Withdraw consent where applicable.
• Challenge our compliance with PIPEDA principles.

Submit requests to [email protected]. We respond within thirty days unless an extension is permitted. We may verify identity before releasing information. Access may be limited where disclosure would reveal third-party personal information or privileged records.

9. Office of the Privacy Commissioner of Canada

If you believe we have not addressed your privacy concern satisfactorily, you may contact:

Office of the Privacy Commissioner of Canada
30 Victoria Street, Gatineau, QC K1A 1H3
Toll-free: 1-800-282-1376
Website: www.priv.gc.ca

10. Cookies and tracking

Our website uses essential and optional analytics cookies. Details including categories, durations, and opt-out instructions are in our Cookie Policy. You may manage preferences through our cookie banner (Accept all, Reject all, or Customise).

11. Security safeguards

We implement administrative, technical, and physical safeguards appropriate to the sensitivity of information: HTTPS encryption on datanarrative.pro, access controls for enrollment systems, staff training on confidentiality, and secure disposal of paper records. No method of transmission over the Internet is completely secure; we encourage strong passwords on any alumni forum accounts we provide.

Specific measures include: role-based access to enrollment databases, encrypted backups stored in Canadian data centres where available, periodic review of vendor security practices, and incident response procedures. In the event of a breach posing real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by law.

11a. Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals. Spam detection on contact forms uses simple honeypot fields reviewed manually if triggered — not algorithmic scoring of individuals.

12. Children

Our services target adult professionals and Canadian business teams. We do not knowingly collect personal information from individuals under sixteen. If you believe a minor has submitted information, contact us for deletion.

12a. Marketing communications

We may send programme announcements or alumni resource updates to individuals who have enrolled or explicitly opted in. You may unsubscribe from marketing emails at any time using the link in each message or by emailing [email protected]. Transactional messages related to bookings you have made — confirmations, schedule changes, receipts — are not marketing and may still be sent.

12b. Complaints process

We take privacy complaints seriously. Contact our Privacy Officer first with a written description of your concern. We acknowledge receipt within five business days and aim to resolve matters within thirty days. If you remain unsatisfied, you may escalate to the Office of the Privacy Commissioner of Canada as described in Section 9.

13. Changes to this policy

We may update this Privacy Policy to reflect legal, technical, or operational changes. Material updates will be posted on this page with a revised "Last updated" date. Continued use of our services after changes constitutes acceptance of the updated policy where permitted by law.

14. Change log

• 27 June 2026 — Initial publication of privacy policy for datanarrative.pro.

15. Contact

Privacy Officer, Data Narrative Inc.
222 Bay Street, Suite 1805, Toronto, ON M5J 2J1
[email protected]