Privacy Policy

This domain name sbainsights.com (“Website” or “Site”) is owned by SBA Insights Inc., (hereinafter referred to as “SBA”). SBA places its highest value on your trust and considers protecting your Personal Information (as defined herein) as a priority. This privacy policy (“Policy”) explains how SBA will collect, use, share and process Personal Information in relation to the services provided on the Website.
‍
At SBA Insights Inc. we are committed to safeguarding the privacy and personal information of our clients, employees, and stakeholders. This Privacy Policy outlines how we collect, use, disclose, and protect personal information in compliance with applicable laws, including but not limited to the Personal Information Protection and Electronic Documents Act (S.C. 2000, c. 5) (PIPEDA) of Canada.
‍
By engaging with SBA, you acknowledge and consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy.

For the purpose of this Privacy Policy, wherever the context so requires "You" or "User" shall mean any natural or legal person who has either registered on the Site by providing relevant registration data as registered user or can also refer to an unregistered guest User. SBA allows the User to surf the Site or make purchases without registering on the Site. The term "We", "Us", "Our", “Company” shall mean “SBA”.

By accepting this Policy, you understand and agree to the collection, use, sharing and processing of your Personal Information (as defined hereinbelow). If you provide SBA with Personal Information about someone else, you confirm that they are aware that you have provided their information and that they consent to SBA’s use of their information according to this Policy. This Policy applies to all the current and former visitors, users and others who access this Site.
‍
Scope of this Policy
‍
This Privacy Policy applies to SBA Insights Inc., headquartered in Canada, and its operations.

This Policy is an electronic record in the form of an electronic contract formed under the applicable law.

This Policy does not require any physical, electronic or digital signature.

By accessing or using the Site or otherwise giving us your information through this website or otherwise, you undertake that you have the capacity to enter into a legally binding contract vide this Policy, which constitutes a legally binding document between you and the Company under the applicable law.
‍
SBA will collect and process your personal and third-party data carefully, only for the purposes described in this Policy and only to the extent necessary as defined herein and within the scope of the applicable legal regulations.
‍
This Policy seeks to ensure that any Personal Information or third-party information handled by us is managed in a way that is ethical, compliant and adheres to best industry practices.
‍
Please read the terms and conditions of this Policy carefully, before accessing or using this Site. By accessing or using the Site including any purchase of Products or services, you agree to the terms of this Policy. If you are accepting this Policy on behalf of another person or company or other legal entity, you represent and warrant that you have full authority to bind such person, company or legal entity to these terms.
‍
This Policy describes the types of information we collect, why and how we use the information, with whom we share it, and the choices you can make about our use of the Information (as defined hereinbelow). We also describe the measures we take to protect the security of your Information and how you can contact us about our privacy practices.
‍
This Policy describes our current data protection policies and practices and may be amended/updated from time to time. Any changes to this Policy will become effective upon posting of the revised Policy on the Site. It is recommended that you regularly check this Policy to apprise yourself of any updates. Your continued use of Site or provision of data or information thereafter will imply your unconditional acceptance of such updates to this Policy.

Information We Collect
‍In the course of providing our services, we may collect personal and business information that is necessary to fulfill our contractual obligations and business purposes. The types of information we may collect include, but are not limited to:
‍
Personal Information: Name, address, email address, phone number, and other identifying information.
‍
As SBA Insights Inc. does not engage in direct data collection, we only collect personal information that you voluntarily provide to us, such as through service inquiries, pricing enquiries, contact forms, or communication initiated by you.
‍
We will ensure that all data collection and processing are conducted in accordance with applicable data protection laws, including but not limited to, PIPEDA.
‍
Where personal information is transferred across borders, (if required in order to provide services, with your consent) we ensure such transfers comply with applicable laws and are protected through contractual and technical safeguards designed to maintain the security and integrity of the data.
‍

Purpose of Data Collection

We collect personal information for the following purposes:

To provide, deliver, and improve our services.
To communicate with clients regarding inquiries, agreements, or services.
To comply with legal and regulatory obligations.
To analyze data for operational and strategic insights.

We do not collect, use, or disclose personal information beyond these stated purposes unless required by law or with your explicit consent.
‍

Consent

By accessing or using this website, you hereby acknowledge and consentto the collection, use, and disclosure of your personal information in accordance with this Privacy Policy, to the extent permitted by applicable law.

We obtain your consent to handle your personal information, except where otherwise permitted or required by law. Depending on the context, your consent may be:

Implied: For example, when you access our website, submit an inquiry, or voluntarily provide information through a form, we infer your consent to use that information to respond to your request or provide the associated service.
Explicit: In situations where required by law or where we handle sensitive personal information, we will seek your express consent, such as by requiring you to check a box or sign a form.

You may withdraw your consent at any time by contacting us at varshav@sbainsights.com. Please note that withdrawing consent may limit our ability to provide certain services, and may be subject to legal or contractual limitations.

Where you withdraw consent, we will take reasonable steps to comply with your request within a reasonable timeframe, subject to applicable laws. However, withdrawal of consent does not affect the lawfulness of processing based on consent provided before its withdrawal.
‍

Data Subject Rights

Subject to applicable laws, you have the following rights regarding your personal information. Please note that the exercise of these rights may be subject to certain legal, contractual, or operational restrictions:

Right to Access: You have the right to request confirmation of whether we process your personal information and access to the personal information we hold about you. Requests for access may require identity verification to protect your data.
Right to Rectification: You may request corrections to inaccuracies or incomplete information in your personal data. Where the accuracy of your request is disputed, we may add a note indicating your concerns without altering the original data.
Right to Data Portability (where applicable):
‍You may request a copy of your personal information in a structured, commonly used, and machine-readable format, where feasible. This right applies only to information provided directly by you and processed based on your consent or contractual necessity.
Right to Withdraw Consent:
‍You have the right to withdraw your consent for the processing of your personal information at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to its withdrawal and may impact the services we can provide.
Right to Erasure(‘Right to be Forgotten’):
‍You may request the deletion of your personal information, subject to the following exceptions: Legal or regulatory obligations requiring data retention. Contractual requirements or legitimate business interests, such as dispute resolution or fraud prevention.
Right to Restrict Processing:
‍You may request the restriction of processing under the following circumstances: You contest the accuracy of your personal information. Processing is unlawful, but you oppose erasure. We no longer need the data, but you require it for legal claims.
Right to LodgeComplaints:
‍You have the right to file a complaint with the relevant data protectionauthority:
‍In Canada: The Office of the Privacy Commissioner of Canada (OPC).
Right to Object to Processing:
‍You may object to the processing of your personal information for direct marketing, profiling, or other purposes based on legitimate interests

How to Exercise Your Rights

To exercise your rights, submit a written request to varshav@sbainsights.com. Please provide sufficient information to verify your identity and specify the nature of your request. We will respond within the timeframes specified by applicable laws.

Data Retention and Deletion

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, or resolve disputes. Once retention is no longer required, personal information is securely erased, anonymized, or destroyed in accordance with established data retention guidelines. Data retention schedules are periodically reviewed to ensure compliance with evolving regulatory requirements.

Security of Personal Information

We employ industry-standard technical, organizational, and physical measures to safeguard personal information against unauthorized access, loss, or misuse. These measures include, but are not limited to:

Technical Measures

Secure encryption protocols, firewalls, multi-factor authentication, and advanced monitoring tools.

Organizational Measures

Access controls, role-based data access, and data classification policies.

Physical Measures:

Restricted access to facilities, data centers, and storage systems.

RegularAudits:

Conducting periodic security assessments, vulnerability testing, and compliance audits to ensure continuous protection.

All employees and third parties with access to personal information are bound by confidentiality obligations and trained on data protection protocols. In the unlikely event of a data breach, we will notify affected individuals and relevant authorities promptly, providing details of the breach, its potential impact, and mitigation measures, in accordance with PIPEDA.

Data Sharing and Third Parties

We may share your personal information in the following limited circumstances:

With Service Providers: We may engage trusted third-party service providers to perform certain functions on our behalf, such as IT support, website hosting, cloud storage, analytics, or customer support. These providers are contractually obligated to protect your information and may only use it to perform the services we’ve requested. We do not sell, rent, or disclose your personal information to third parties for marketing or commercial purposes without your explicit consent, unless required by law or as part of a business transaction (such as a merger, acquisition, or sale of company assets). In such cases, you will be notified in accordance with applicable legal requirements. Whenever we engage third parties, we take reasonable steps to ensure they handle your information responsibly. However, please note that we do not control the privacy practices of these third parties and are not responsible for how they handle your data. We encourage all partners and vendors to follow strong privacy and security standards.

Data Breach Notifications

In the event of a data breach involving your personal information, SBA will comply with the notification requirements under:

PIPEDA: Notification to the Office of the Privacy Commissioner of Canada (OPC) and affected individuals if there is a real risk of significant harm.

Such notifications will include:

A description of the breach, including its nature and scope.
Possible consequences and potential risks arising from the breach.
Steps taken to mitigate harm and prevent recurrence.
Guidance for affected individuals on how to protect themselves.

Jurisdiction-Specific Privacy Compliance

SBA Insights Inc. is committed to upholding all applicable privacy and data protection laws in Canada. In addition to compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA), which governs the collection, use, and disclosure of personal information in the course of commercial activity at the federal level, we also acknowledge and comply with relevant provincial privacy legislation where applicable, as outlined below:

British Columbia: We comply with the Personal Information Protection Act (PIPA), overseen by the Office of the Information and Privacy Commissioner for British Columbia, in relation to the handling of personal information of individuals, persons and clients located in B.C.
Alberta: We comply with Alberta’s Personal Information Protection Act, overseen by the Office of the Information and Privacy Commissioner of Alberta, when collecting or managing personal information from individuals, persons and clients in Alberta.
Quebec: We comply with the Act Respecting the Protection of Personal Information in the Private Sector, enforced by the Commission d’accès à l’information du Québec, for data collected from Queb residents.

Please note that while these provincial privacy laws may apply to organizations operating within those respective provinces, PIPEDA continues to apply in the following contexts:

To all federal works, undertakings, or businesses (FWUBs), including organizations in sectors such as banking, telecommunications, and interprovincial transportation;
To the cross-border transfer of personal information, including international data flows between Canada, and other jurisdictions;
To businesses operating in provinces and territories without substantially similar provincial legislation, including the Northwest Territories, Yukon, and Nunavut, which remain subject to PIPEDA.

Updates to the Privacy Policy

We reserve the right to update this Privacy Policy periodically to reflect changes in legal, regulatory, or operational requirements. All updates will be published on our official website. For significant changes affecting your rights or obligations, we will notify you via appropriate channels, such as email or website announcements. Continued engagement with SBA following such updates constitutes acceptance of the revised Privacy Policy.

Indemnity

To the maximum extent permitted by law, you agree to defend, indemnify and hold harmless the Company and our affiliates, and our respective officers, directors, employees and agents, from and against any and all claims, damages, obligations, losses, liabilities, costs and expenses (including but not limited to attorney's fees) arising from: (i) your use of, or inability to use, the Site; (ii) your interaction with any Site user(as defined in the Terms of Use); (iii) The creation, uploading, sharing, or promotion of products or services, including any claims of intellectual property infringement, defamation, or violation of rights; or (iv) Any breach of this Privacy Policy, including failure to deliver services as agreed upon, cancellation of orders without notice or valid reason, or any violation of applicable laws or regulations. This indemnification obligation shall survive the termination or suspension of the your account and the use of the Site. (v)any and all claims in relation to any and all services that are promoted, listed, or purchased and/or consumed by you on the Site.

Limitation of Liability

The Company is not responsible for any breach of security or for any actions or inactions of any third parties that receive your Personal Information.

The Company shall and will not be liable for(i) a loss including, but not limited to, loss of use, loss of goodwill, loss of data, if such loss is caused as by tort (including negligence), breach of contract or otherwise, if reasonably foreseeable, or (ii) damage caused by viruses or other technologically harmful material that may infect either Company’s or your computer equipment, computer programs, data or other proprietary material loss of business or anticipated savings, due to the products and services provided by SBA.

To the fullest extent permissible by law, the Company shall not be liable for any damages arising under these terms or out of your use of, or inability to use the Site, for any direct, indirect, exemplary, special, consequential, or incidental damages of any kind, or for any loss of data, revenue, profits or reputation, arising under this Privacy Policy or out of your use of, or inability to use, the Site, even if SBA has been advised of the possibility of such damages or losses.

Not with standing anything contained in this Policy or elsewhere, the Company shall not be held responsible for any loss, damage or misuse of your Personal Information, if such loss, damage, or misuse is attributable to a Force Majeure Event.

As stated hereinabove, the term “Force Majeure Event” shall mean any event that is beyond the reasonable control of SBA and shall include, without limitation, sabotage, fire, flood, explosion, acts of god, civil commotion, strikes, lockouts or industrial action of any kind, riots, insurrection, war, acts of government, computer hacking, civil disturbances, unauthorised access to computer data and storage device, computer crashes, breach of security and encryption, pandemic or national/state lockdown due to any reason and any other similar events not within the control of the Company and which the Company is not able to overcome.

Applicability of the Terms of Use

This Policy shall be supplementary to the Terms of Use. Words and expressions used in this Policy but not defined herein shall have the meanings ascribed to them in the Terms of Use. To the extent any provision of this Policy does not conflict with the Terms of Use, the Terms of Use shall apply to this Policy. In the event of any conflict between this Policy and the Terms of Use, the interpretation placed by SBA shall be final and binding on you.

Governing Laws and Dispute Resolution

This Privacy Policy is governed by the laws of Canada. Any disputes arising out of or related to this Privacy Policy will be subject to the exclusive jurisdiction of the courts in Ontario, Canada, unless otherwise agreed in writing.

Contact Us

For inquiries, complaints, or requests relating to this Privacy Policy, please contact:

Privacy Officer, SBA Insights Inc.

Email: varshav@sbainsights.com