Privacy Policy
Last Updated: January 15, 2026
Introduction
Arbrus respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, engage our consulting services, or communicate with us.
This policy applies to information collected through our website at arbrusianed.world and through direct communications with our firm. By using our website or engaging our services, you consent to the data practices described in this policy.
Information We Collect
Personal Information
We collect personal information that you voluntarily provide to us when you:
- Submit an inquiry through our contact form
- Request information about our consulting services
- Engage us for consulting services
- Subscribe to communications from us
- Participate in surveys or feedback requests
The personal information we collect may include your name, email address, phone number, business name, job title, and any other information you choose to provide in your communications with us.
Automatically Collected Information
When you visit our website, we automatically collect certain information about your device and browsing activity, including:
- IP address and general location information
- Browser type and version
- Operating system
- Pages visited and time spent on pages
- Referring website addresses
- Date and time of visits
This information is collected through cookies and similar technologies. Please see our Cookie Policy for more details about our use of cookies.
How We Use Your Information
We use the information we collect for the following purposes:
Service Delivery
- Responding to your inquiries and providing information about our services
- Delivering consulting services you have engaged us to provide
- Communicating with you about ongoing engagements
- Managing our business relationship with you
Business Operations
- Maintaining and improving our website and services
- Analyzing website usage to enhance user experience
- Conducting internal research and development
- Ensuring security and preventing fraud
Marketing Communications
- Sending you information about our services (with your consent)
- Sharing relevant industry insights and thought leadership content
- Inviting you to events or webinars we organize or sponsor
You may opt out of marketing communications at any time by following the unsubscribe instructions in our emails or contacting us directly.
Legal Basis for Processing
Under Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA), we process your personal information based on the following legal grounds:
- Consent: You have given explicit consent for us to process your personal information for specific purposes
- Contract: Processing is necessary to fulfill our contractual obligations to you
- Legitimate interests: Processing is necessary for our legitimate business interests, such as improving our services, while not overriding your privacy rights
- Legal obligation: Processing is required to comply with applicable laws and regulations
Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances:
Service Providers
We may share information with third-party service providers who perform services on our behalf, such as website hosting, data analysis, email delivery, and customer service. These providers are contractually obligated to maintain the confidentiality and security of your information and may only use it for the purposes for which we disclose it to them.
Professional Advisors
We may share information with professional advisors (such as lawyers, accountants, or auditors) when necessary for professional services.
Legal Requirements
We may disclose information if required to do so by law, court order, or other legal process, or if we believe such disclosure is necessary to protect our rights, your safety, or the safety of others.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.
Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit and at rest
- Secure server infrastructure with regular security updates
- Access controls limiting employee access to personal information
- Regular security assessments and audits
- Staff training on data protection and privacy practices
However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security.
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Retention periods vary depending on the type of information and the purpose for which it was collected:
- Client engagement data: Retained for seven years following completion of services, in accordance with professional standards and legal requirements
- Marketing communications data: Retained until you opt out or request deletion
- Website usage data: Typically retained for 12 to 24 months for analytical purposes
- Inquiry and contact form data: Retained for three years or until you request deletion
When we no longer need your personal information, we securely delete or anonymize it in accordance with our data retention and destruction policies.
Your Privacy Rights
Under Canadian privacy law, you have the following rights regarding your personal information:
Access
You have the right to request access to the personal information we hold about you and to receive information about how we process it.
Correction
You have the right to request correction of inaccurate or incomplete personal information we hold about you.
Deletion
You have the right to request deletion of your personal information, subject to certain exceptions (such as legal retention requirements).
Objection and Restriction
You have the right to object to certain types of processing or request that we restrict processing of your personal information.
Withdrawal of Consent
Where we rely on your consent to process personal information, you have the right to withdraw that consent at any time.
Data Portability
You have the right to receive your personal information in a structured, commonly used format and to transmit it to another organization.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days as required by PIPEDA.
Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze site usage. For detailed information about the cookies we use and how to manage your cookie preferences, please review our Cookie Policy.
Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.
Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.
International Data Transfers
Your personal information is primarily stored and processed in Canada. If we transfer information outside of Canada, we ensure appropriate safeguards are in place to protect your information in accordance with Canadian privacy law.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this policy and, where appropriate, by sending you an email notification or displaying a prominent notice on our website.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
How to Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
Complaints
If you believe we have not handled your personal information in accordance with applicable privacy laws, you have the right to file a complaint. We encourage you to contact us first so we can address your concerns.
If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada: