Privacy policy

What we collect, and why

We collect the minimum personal information needed to do what you ask of us. Our forms collect your name, business and contact details, plus the project information you choose to share (location, business profile, goals, budget ranges). Each form states its purpose at the point of collection. We do not collect social insurance numbers, banking details or tax documents through this website.

Consent

We rely on two consent bases, depending on how you reach us. When you ask us to screen funding or send you a shortlist, that request is our basis under Canada's anti-spam legislation (CASL) for following up about it for a limited period after your request; we keep evidence of the request (timestamp, form, page). When you subscribe to program-deadline alerts, you're asking to receive those alerts until you unsubscribe, and that's how we keep you posted about a program over time. Every email identifies BBN Labs Inc. and includes a working unsubscribe that takes effect promptly and stops these messages.

How your information is used

To respond to enquiries, prepare quotes, screen funding opportunities you've asked about, deliver and support projects, and follow up on your request — including deadline alerts. We do not sell personal information. Where a project involves a qualified delivery partner, we share only what's needed for the referral and tell you we're doing it.

Storage and protection

Lead and subscription data is stored server-side in our systems with access limited to the people who need it. We apply security controls including encrypted transport (HTTPS), access restrictions, rate limiting and server-side validation. Analytics, where enabled, is configured to minimize personal data.

Cookies and analytics

We use a small number of cookies to make the site work and, where enabled, Google Analytics 4 to understand which pages actually help owners — pages visited, approximate region, device type, not your name. You can refuse or delete cookies in your browser settings, and you can opt out of Google Analytics using Google's browser add-on. We don't run advertising trackers and we don't sell analytics data.

Where your information is processed

Some providers we rely on (email delivery, analytics and hosting) may process data outside your province or outside Canada. We use reputable providers that are bound to protect your information, and we share only what each one needs to do its job.

Retention and deletion

We keep enquiry and lead records only as long as needed to help you and meet our legal obligations, normally no more than 24 months after our last contact (unless you have an active project), then we delete them. Consent records are kept for the period Canada's anti-spam law requires. You may ask us at any time to access the personal information we hold about you, correct it, export it, or delete it where the law allows. Unsubscribing stops marketing immediately while preserving the consent record the law requires us to keep.

Children, and telling you about a breach

Our services are for businesses and are not directed at children; we don't knowingly collect personal information from minors. If a privacy breach ever creates a real risk of significant harm, we'll notify the people affected and the Office of the Privacy Commissioner of Canada, as the law requires.

If you're in Quebec, Alberta or B.C.

Those provinces have their own private-sector privacy laws — most notably Quebec's Law 25, which is stricter than PIPEDA. If you're in one of them, that law applies to your information and we honour the rights it gives you: access, correction, deletion and, where applicable, data portability, extra protection (express consent) for sensitive information, and notice if an automated system is used to make a decision about you. Contact our Privacy Officer to exercise any of these.

Questions and requests

Our Privacy Officer handles privacy questions, access requests and complaints — reach them through the contact page or at paul@bbnlabs.com. If you're unsatisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.

This policy describes our practices under PIPEDA and CASL in plain language; it is information, not legal advice.