Privacy Policy

This Privacy Policy explains how ELEMONT ("ELEMONT," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit elemont.ca, use our marketing pages, contact us, or access the ELEMONT dashboard and related services (collectively, the "Services").

ELEMONT is a Canadian company. We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. Where the EU General Data Protection Regulation (GDPR) applies to our processing, we provide the rights and safeguards described below.

1. Who we are

Data controller: ELEMONT
Privacy contact: privacy@elemont.ca
General support: support@elemont.ca

2. Information we collect

Information you provide

• Contact details such as name, work email, company name, and message content
• Account registration details such as name, email, and organization information
• Billing and subscription information processed through our payment provider
• SR&ED claim, payroll, contractor, and evidence data you upload to the platform
• Communications with our team, including meeting preferences and support requests

Information collected automatically

• Device and browser information, IP address, and approximate location derived from IP
• Pages viewed, referral URLs, and interactions with our website
• Authentication session identifiers stored in secure cookies when you sign in
• Cookie consent preferences

Information from third parties

• Payment status and billing metadata from Stripe
• Email delivery and engagement data from our email service provider
• Analytics metrics from Google Analytics, only if you consent to analytics cookies

3. How we use personal information

We use personal information to:

• Provide, operate, secure, and improve the Services
• Authenticate users and maintain sessions across our website and dashboard
• Respond to contact requests, consultations, and support inquiries
• Prepare, review, and deliver SR&ED, AI consultation, and related professional services
• Process subscriptions, invoices, and account administration
• Send service, security, and transactional communications
• Measure website performance and marketing effectiveness where permitted
• Comply with legal, regulatory, and professional obligations

4. Legal bases for processing (GDPR)

Where GDPR applies, we rely on:

• Contract: to provide accounts, dashboard access, and requested services
• Legitimate interests: to secure our Services, prevent abuse, and improve product quality, balanced against your rights
• Consent: for non-essential cookies such as analytics
• Legal obligation: for accounting, recordkeeping, and regulatory requirements

5. Cookies and similar technologies

We use essential cookies to maintain secure sign-in sessions across our marketing site and dashboard. Analytics cookies are used only if you opt in through our cookie banner. See our Cookie Policy for details.

6. How we share information

We do not sell personal information. We may share information with:

• Service providers that help us host, secure, email, bill, and analyze our Services
• Professional advisors and consultants engaged to deliver services you request
• Authorities where required by law or to protect rights, safety, and security
• A successor entity in connection with a merger, acquisition, or asset sale

Our providers are required to process information only on our instructions and subject to appropriate safeguards.

7. International transfers

ELEMONT is based in Canada. Some service providers may process information in Canada, the United States, or other countries. Where required, we implement appropriate safeguards such as contractual protections and vendor diligence.

8. Retention

We retain personal information only as long as necessary for the purposes described in this policy, including to meet legal, accounting, and professional recordkeeping requirements. Claim, billing, and client service records may be retained for longer periods where required by law or legitimate business needs.

9. Security

We use administrative, technical, and organizational measures designed to protect personal information, including encrypted transport, access controls, and monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your rights

Depending on your location, you may have the right to:

• Access and receive a copy of your personal information
• Request correction of inaccurate information
• Request deletion, subject to legal and contractual limits
• Withdraw consent for optional processing such as analytics cookies
• Object to or restrict certain processing under GDPR
• Request portability of information you provided in a structured format
• Lodge a complaint with a supervisory authority or the Office of the Privacy Commissioner of Canada

To exercise these rights, contact privacy@elemont.ca. We may need to verify your identity before responding.

11. Children

The Services are intended for business users and are not directed to children under 16. We do not knowingly collect personal information from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the effective date. Material changes may also be communicated through the Services or by email where appropriate.

13. Contact us

Questions about this Privacy Policy or our privacy practices can be sent to privacy@elemont.ca or through our contact page.