Privacy Policy

2. Information we collect

2.1 Information you give us directly

• Contact details: name, email address, phone number, postal address, company name, role.
• Business context: details you share about your company, team, processes, revenue, or operational challenges through forms, discovery calls, calculators, or engagement work.
• Communication content: the substance of emails, messages, call notes, and meeting recordings (where you've consented to recording).
• Assessment responses: answers you provide to DISC assessments, Insights questionnaires, or similar evaluation tools.
• Payment information: billing details handled by our invoicing platform. We do not store full credit card or bank account numbers on our systems.

2.2 Information we collect automatically

• Technical data: IP address, browser type and version, device type, operating system, referring URLs.
• Usage data: pages visited, time on page, click paths, scroll depth, form interactions.
• Behavioural analytics: we use Microsoft Clarity to capture heatmaps and session replays. Clarity processes information on Microsoft's infrastructure and is governed by the Microsoft Privacy Statement.

2.3 Sensitive financial information (calculators)

Several of our calculators (notably the Business Valuation Estimate Calculator) ask for inputs that could be considered commercially sensitive: annual revenue, profitability, owner compensation, customer concentration. Where these inputs are tied to an email address for delivery of results, they are stored in encrypted form on our infrastructure, accessed only by Expansive EDGE personnel who need them to deliver the requested output, and retained for no longer than 24 months unless you consent to a longer period for an engagement.

Calculator inputs are never sold, shared with advertising networks, or used outside the purpose for which you submitted them.

3. How we use your information

We use your personal information for these specific purposes, and only these:

• Deliver the service or content you requested (a discovery call, an Insights report, a downloadable resource, a paid engagement).
• Communicate with you about a project, an inquiry, or a request you've made.
• Send marketing communications (newsletters, articles, event invitations) only with your express opt-in consent, with a one-click unsubscribe option in every email, per CASL.
• Improve our website and services through aggregated, de-identified analytics.
• Meet legal, regulatory, or accounting obligations, including tax record retention under the Canada Revenue Agency's requirements.

We do not use your personal information for automated decision-making with legal or similarly significant effects on you.

4. Who we share your information with

We do not sell your personal information. We share information only with the following categories of third parties, and only as needed to deliver the service:

4.1 Service providers (processors)

These vendors process personal information on our behalf, under contractual obligations to keep it confidential and use it only for the purpose we direct:

We periodically update this list as our toolkit evolves. The current version is always the authoritative one.

4.2 Legal disclosures

We may disclose personal information when required to do so by law, to comply with a court order, to enforce our agreements, or to protect the rights, property, or safety of Expansive EDGE, our clients, or others.

4.3 Business transfers

If Expansive EDGE is involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you (by email and/or a prominent notice on this website) of any such change and the choices you have regarding your information.

5. AI-augmented services

Expansive EDGE uses generative AI tools (primarily Anthropic's Claude) to draft Insights reports, accelerate Playbook construction, and process unstructured client information at scale. When AI is involved:

• The AI provider processes the information only to produce the requested output for us; it does not retain client data for training purposes under the API terms we operate under.
• Every AI-generated deliverable is reviewed by an Expansive EDGE operator before it reaches a client.
• Where information you submit is sensitive (financial detail, employee names, client lists), we redact or aggregate before AI processing wherever it does not compromise the output.
• You can request that your engagement be delivered without AI involvement. This may extend timelines and affect pricing; we will discuss the trade-offs before any change.

6. International data transfers

Most of our service providers are based in the United States or operate global infrastructure. By using our website or services, you acknowledge that your personal information may be processed outside of Canada, including in jurisdictions whose data protection laws differ from Alberta's and Canada's.

Where required, we rely on standard contractual clauses, vendor adequacy commitments, or your explicit consent as the legal basis for those transfers.

7. How long we keep your information

• Marketing list subscribers: until you unsubscribe or until 24 months of inactivity, whichever comes first.
• Contact and discovery call inquiries: 24 months from last interaction.
• Calculator submissions: 24 months from submission.
• Engaged client records: 7 years from end of engagement, to meet Canadian tax and professional records requirements.
• Website analytics: typically 90 days in identifiable form (Microsoft Clarity default); aggregated indefinitely.

You can request earlier deletion at any time. We'll comply unless we are legally required to retain the information (for example, to satisfy tax record obligations).

8. Your rights

Under PIPEDA, Alberta PIPA, and (where applicable) the GDPR or CCPA, you have the right to:

• Access the personal information we hold about you.
• Correct any inaccurate or incomplete information.
• Withdraw consent for marketing communications at any time.
• Request deletion of your personal information, subject to legal retention obligations.
• Object to or restrict certain processing.
• Receive a copy of your information in a portable format (where the GDPR applies).
• Opt out of "sale" of your information (where the CCPA applies). We do not sell personal information, but you can confirm that with us at any time.

To exercise any of these rights, email [email protected] or [email protected]. We will respond within 30 days.

9. Cookies and tracking technologies

Our website uses cookies and similar technologies in three categories:

• Strictly necessary cookies for site security, session handling, and core functionality. These cannot be disabled.
• Analytics cookies from Microsoft Clarity (and similar) that measure how the site is used. You can disable these in your browser, or by visiting Clarity's opt-out mechanisms.
• Marketing cookies from HubSpot and similar marketing platforms, used to attribute conversions and personalise content. You can disable these in your browser settings.

We do not currently display a cookie consent banner because we use only first-party and processor cookies as described. Where future processors require explicit consent (for example, retargeting pixels), we will add a banner at that time.

10. Children's privacy

Our website and services are directed at business owners and operators. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Security

We implement reasonable technical and organisational safeguards to protect personal information against unauthorised access, alteration, disclosure, or destruction, including encryption in transit (HTTPS) and at rest, restricted access by role, and contractual security obligations with all processors.

No internet transmission or storage system is 100% secure. In the event of a privacy breach that creates a real risk of significant harm, we will notify affected individuals and the Office of the Information and Privacy Commissioner of Alberta as required under PIPA, and the Office of the Privacy Commissioner of Canada where applicable under PIPEDA.

12. Changes to this policy

We may update this Privacy Policy from time to time as our practices or the law evolves. We will update the "Last updated" date at the top, and for material changes we will email registered contacts and post a notice on this page for at least 30 days.

13. Contact us or file a complaint

Privacy questions, concerns, or formal access requests:

If you are not satisfied with our response, you may file a complaint with:

• Office of the Information and Privacy Commissioner of Alberta
• Office of the Privacy Commissioner of Canada