Privacy Policy

Exit Grid Group, based in Oshawa, Ontario, is responsible for the personal information in our care. Our Privacy Officer can be reached at info@exitgridgroup.ca.

We do not knowingly collect information from anyone under 18, and we do not collect sensitive categories such as health information.

• —To respond to your enquiry and prepare a proposal
• —To deliver, support, and bill for our services
• —To complete filings and set up accounts you have asked us to set up
• —To send service updates and, with your consent, marketing emails
• —To understand how the site is used and improve it
• —To meet our legal, tax, and record-keeping obligations

We do not use your information for any new purpose without asking you first, unless the law requires it.

You give consent by submitting a form, booking a call, signing a proposal, or opting in to our emails. You can withdraw consent at any time by emailing us or using the unsubscribe link in any marketing message. Withdrawing consent may mean we can no longer provide a service to you. We will keep information the law requires us to keep.

Our commercial messages follow Canada’s Anti-Spam Legislation (CASL). Every marketing email identifies us, includes our contact details, and has a working unsubscribe link that we action within 10 business days. We send marketing email only where we have your express consent or a business relationship that gives us implied consent under CASL. We do not sell or rent our email list.

We do not sell your personal information. We share it only with service providers who help us run the business, and only as much as they need:

Some of these providers store data outside Canada, including in the United States. While there, information may be accessible to foreign courts and law enforcement under the laws of that country. We choose providers who commit to appropriate protection.

We may also disclose information where the law requires it, or to protect our rights.

Our site uses cookies to keep it working, remember your preferences, measure traffic, and support advertising. You can block or delete cookies in your browser settings; parts of the site may stop working properly if you do. You can opt out of Google Analytics with Google’s browser add-on, and adjust advertising preferences in your Meta account settings.

Where you give us access to your accounts, we store credentials in an encrypted password manager, limit access to team members who need it, and remove our access when the engagement ends or you ask us to. We ask you to change shared passwords after handoff.

• —Enquiries that do not become clients: up to 24 months, then deleted
• —Client records and project files: 7 years after the engagement ends, to meet CRA record-keeping requirements
• —Financial records: 7 years
• —Marketing consent records: for as long as you are subscribed, plus 3 years

We use encrypted storage and transmission, two-factor authentication on business accounts, access limited to who needs it, and a password manager for credentials. No system is perfectly secure. If a breach creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as PIPEDA requires.

You can ask us to:

• —Tell you what personal information we hold about you and how we have used it
• —Correct anything inaccurate
• —Delete information we are not legally required to keep
• —Stop sending you marketing messages

Email info@exitgridgroup.ca and we will respond within 30 days. We may need to verify your identity first.

If you are not satisfied with how we have handled your information, contact us first so we can try to fix it. You can also contact the Office of the Privacy Commissioner of Canada at priv.gc.ca or 1-800-282-1376.

We may update this policy. The effective date at the top shows when it last changed. Material changes affecting how we use your information will be communicated directly where we can.