Privacy Policy

1. Overview

Expresso Services Inc. ("Expresso," "we," "us," or "our") is committed to protecting the privacy and personal information of our clients, prospective clients, website visitors, and other individuals with whom we interact. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information in accordance with the Personal Information Protection Act (PIPA, Alberta) and, where applicable, Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

By visiting our website or using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the terms described herein, please do not use our website or services.

2. Information We Collect

We may collect the following categories of personal information:

2.1 Information You Provide Directly

• Contact details: name, email address, phone number, mailing address
• Professional information: company name, job title, industry
• Enquiry and correspondence content: messages submitted via our contact form, emails sent to us, or notes from phone or video calls
• Contractual information: service agreements, statements of work, invoices, and related documents
• Payment information: billing details processed through our secure payment processors (we do not store raw card numbers)

2.2 Information Collected Automatically

• Technical data: IP address, browser type and version, operating system, referring URLs, pages visited, and timestamps
• Cookie and tracking data: session cookies and optional analytics cookies (see Section 5)

2.3 Information from Third Parties

We may receive information about you from referral partners, publicly available business directories, or social/professional networking platforms (such as LinkedIn) when you have made that information publicly available or consented to sharing it.

3. How We Use Your Information

We use personal information to:

• Respond to enquiries and provide requested information about our services
• Deliver, manage, and improve our business services and client engagements
• Process payments and manage billing
• Send transactional communications (proposals, invoices, project updates)
• Send marketing and promotional communications where you have opted in (you may opt out at any time)
• Comply with legal obligations and resolve disputes
• Conduct internal analytics to improve our website and service delivery
• Protect the rights, safety, and property of Expresso Services Inc. and others

We will not use your personal information for purposes materially different from those described above without obtaining your consent.

4. Disclosure of Information

We do not sell, rent, or trade your personal information. We may share it with:

• Service providers: trusted vendors who assist us in delivering services (e.g., cloud hosting, email platforms, payment processors, project management tools) who are contractually bound to protect your information
• Professional advisors: accountants, lawyers, or auditors under duties of confidentiality
• Law enforcement or regulators: when required by applicable law, court order, or government authority
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to confidentiality obligations

All third-party service providers are required to maintain appropriate data protection measures consistent with this Privacy Policy.

5. Cookies & Tracking Technologies

Our website uses cookies — small text files stored on your device — to enhance your browsing experience. We use the following types:

• Essential cookies: necessary for the website to function correctly (e.g., session management). Cannot be disabled.
• Analytics cookies: help us understand how visitors interact with our website (page views, navigation paths). Collected in aggregated, anonymized form. You may decline these.
• Preference cookies: remember your settings and choices for a better experience.

Most web browsers allow you to control cookies through their settings. Disabling essential cookies may affect website functionality. We do not use cookies for targeted advertising or cross-site tracking.

6. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this Policy or as required by applicable law. Specifically:

• Contact enquiry records: up to 3 years from last contact
• Client engagement records: 7 years following the end of the engagement, to comply with Canadian tax and business records obligations
• Marketing opt-in records: retained until you withdraw consent
• Website analytics data: up to 26 months in aggregated form

When personal information is no longer needed, we securely delete or anonymize it.

7. Security Safeguards

We implement reasonable administrative, technical, and physical safeguards to protect personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encrypted data transmission (TLS/HTTPS) for all website communications
• Access controls limiting information to authorized personnel on a need-to-know basis
• Regular security reviews and staff privacy training
• Secure password management and multi-factor authentication for internal systems

No method of transmission over the internet is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. In the event of a material data breach, we will notify affected individuals and relevant authorities as required by law.

8. Your Privacy Rights

Subject to applicable law, you have the right to:

• Access: request a copy of the personal information we hold about you
• Correction: request correction of inaccurate or incomplete information
• Withdrawal of consent: withdraw consent for non-essential processing at any time (withdrawal does not affect prior lawful processing)
• Erasure: request deletion of your personal information where we have no legal obligation to retain it
• Complaint: lodge a complaint with the Office of the Information and Privacy Commissioner of Alberta (OIPC) if you believe your rights have been infringed

To exercise any of these rights, please contact our Privacy Officer at sales@expressos.ca. We will respond within 30 days of receiving a verifiable request.

9. Third-Party Links

Our website may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.

10. Children's Privacy

Our services are directed at business professionals and are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately so we can delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or technology. Material changes will be communicated by posting a notice on our website with an updated effective date. We encourage you to review this Policy periodically. Your continued use of our website or services following the posting of changes constitutes acceptance of those changes.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact our Privacy Officer:

You may also contact the Office of the Information and Privacy Commissioner of Alberta (OIPC) at oipc.ab.ca or by telephone at 1-888-241-2550.