What we collect, why, who is accountable for it, and what you can ask us to do about it.
Effective 31 August 2026. This policy explains what personal information The Alpha Nova collects, why, and what you can do about it. It follows the ten principles in Schedule 1 of Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
Athif Shaffy, Co-Founder & Software Lead is the individual accountable for The Alpha Nova's compliance with this policy and with PIPEDA. That accountability is assigned in writing and does not transfer with delegation: other staff may handle a request, but responsibility for the outcome stays with the Privacy Officer.
Privacy Officer, The Alpha Nova
1545 Maley Drive, Greater Sudbury, Ontario, P3A 4R7, Canada
info@thealphanova.com · +1 437 424 5384
We identify the purpose before or at the point of collection. In practice we collect personal information for three reasons only:
You give consent by choosing to contact us, book a call, or enter into an engagement. We do not sell personal information, and we do not add you to a marketing list because you made an enquiry. You may withdraw consent at any time by writing to the Privacy Officer, subject to legal and contractual limits we will explain at the time.
When you submit a form on this site, we receive the fields you complete: your name, email address, phone number, organization, subject, message, and where the form asks, indicative budget and timeline. These are emailed to info@thealphanova.com. We do not store form submissions in a database on this website.
When you browse, our analytics provider records standard usage data such as pages viewed, approximate region, referring site, and device and browser type.
When you book a call, our scheduling provider collects the name, email and any details you enter to create the booking.
We do not knowingly collect personal information from children, and we do not ask for sensitive information such as health, financial account or government identifier data through this website.
Loading any page on this site causes your browser to contact these providers, which means they receive your IP address and basic request data. We list them so the disclosure is meaningful rather than implied:
Some of these providers are based outside Canada, so information handled by them may be stored or processed in another country and may be accessible to that country's courts and law enforcement. Where we act for a client under contract, data residency and hosting location are set by that contract.
We collect only what the stated purpose needs. We use information for the purpose it was given and do not repurpose it without asking. Enquiry correspondence is kept for up to 24 months from last contact unless it becomes part of a client engagement, in which case records follow the retention terms of that contract. Information that is no longer needed is deleted or destroyed.
We keep personal information as accurate and current as the purpose requires, and we will correct information you tell us is wrong.
We protect personal information with measures appropriate to its sensitivity: encryption in transit (HTTPS across this site), access limited to the people who need it to do the work, credentials and secrets kept out of source control, and prompt patching of the systems we operate. No safeguard is perfect, which is why we also maintain a breach response policy.
You may ask what personal information we hold about you, what we have used it for, and to whom it has been disclosed. Write to the Privacy Officer. We will respond within 30 days. We may ask you to confirm your identity before releasing information. Access is free unless a request is unusually costly, in which case we will tell you the cost before proceeding. If we refuse a request we will explain why in writing and tell you how to challenge it.
If you think we have handled your information badly, we want to hear it. Our complaint process names a real person, commits to timelines, and explains how to escalate to the Office of the Privacy Commissioner of Canada if you are not satisfied with our answer.
If we change this policy we will update the effective date above. Material changes affecting how we treat information already collected will be communicated to affected individuals where we can reach them.
Tell us what you're trying to build. We'll spend 30 minutes understanding the problem and tell you how we'd approach it.
Book a 30-Minute Discovery Call