Privacy Policy

At a glance

• We collect only what we need to respond to you, deliver the services you ask for and keep this website working.
• We do not sell personal information, and we do not share it for third-party advertising.
• Marketing emails go only to people who have asked for them or whom the law allows us to contact. You can unsubscribe at any time.
• We are based in Canada. Your information may be processed in Canada and in the countries of our service providers, with safeguards described in Section 7.
• You can access, correct or delete your information, or withdraw consent, by emailing hello@olivearkpartners.com.

1. Who is responsible for your information

"OliveArk Partners", "OliveArk", "we", "us" and "our" mean:

Airova Inc., operating as OliveArk Partners, Toronto, Ontario, Canada,

Airova Inc. is the organization responsible for personal information collected through this website.

Privacy Officer: Chief Executive Officer · hello@olivearkpartners.com · Toronto, Ontario, Canada (mailing address available on request)

What this policy covers. It covers personal information of website visitors, people who contact us and newsletter subscribers.

What it does not cover.

• Data we access inside a client's Salesforce org or other systems while delivering an engagement. We handle that data as the client's service provider, under the written terms that govern the work and, where required, a data processing agreement (see Section 3 and our Terms of Use).
• Websites and services run by third parties that we link to.

2. Information we collect

2.1 Information you give us

Please do not put passwords, API keys, security tokens, payment card numbers, government ID numbers, health information or other sensitive personal information in the form, in the booking notes or in email. We will never ask for them through those channels. If you send them by mistake, tell us and we will delete them.

2.2 Information collected automatically

When you use the website, we and our providers collect technical information such as:

• IP address and approximate location derived from it
• Browser type, device type and operating system
• Pages requested, referring site, and date and time of visits (from server and security logs)
• Cookie and similar identifiers that are strictly necessary for the website to work (see Section 5)

2.3 Information from other sources

To prepare for a conversation, we may review publicly available professional information about you and your company, such as your company website or professional networking profile. We use it only for business communication with you.

2.4 Information inside your Salesforce org

If you grant us access to your Salesforce org as part of an engagement, we review configuration, metadata, automation, integrations, licenses, security settings and data quality indicators. We ask for read-only, least-privilege access. That access is governed by the agreement we sign with you, not by this policy.

3. How and why we use information

We use personal information only for the purposes below. Where privacy law requires a legal basis (for example under the EU or UK GDPR), the basis is shown.

Canada. Under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws, we collect, use and disclose personal information with your consent, which may be express or implied depending on the sensitivity of the information and the circumstances, or as otherwise permitted by law. You can withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawing consent may mean we can no longer provide services or respond to you.

No sale, no behavioral advertising. We do not sell personal information. We do not share it for cross-context behavioral advertising, and this website does not use advertising cookies or advertising pixels.

Automated tools. We do not make decisions about you that produce legal or similarly significant effects based solely on automated processing. We may use AI-assisted tools to help with drafting, summarizing or scheduling. We use those tools only under vendor terms that do not allow our inputs to be used to train the vendor's models, and we do not enter the contents of a client's Salesforce org into them without the client's agreement.

4. Marketing communications and consent

We send marketing emails only where we have your express consent, or where Canada's Anti-Spam Legislation (CASL) and similar laws allow implied consent. Examples are a business enquiry you made to us in the last six months or a business email address you have conspicuously published without a request not to be contacted.

Every marketing email identifies us, includes our contact details and has a working unsubscribe link. We process unsubscribe requests promptly and always within 10 business days. Service messages about an enquiry or engagement, such as scheduling and delivery, are not marketing and may still be sent.

5. Cookies and similar technologies

This website currently uses only strictly necessary technologies: those needed for security, delivering pages and making forms and booking work. We do not use analytics, advertising or tracking cookies.

If we introduce analytics or other non-essential cookies in future, we will update this section, show a cookie banner, and keep those cookies off until you accept them. We honor browser-based opt-out signals such as Global Privacy Control where required by law. You can block cookies in your browser, although some parts of the website, including booking, may then not work.

6. Who we share information with

We share personal information only as follows.

• Service providers that help us run the website and our business, under written contracts that limit their use of the information and require appropriate security. Categories include website hosting and delivery, email delivery, form handling, scheduling (Google Calendar appointment scheduling, provided by Google LLC), email, calendar and document storage (Google Workspace), security and professional advisers such as lawyers, accountants and insurers.
• Our affiliates, if any, to operate the business consistently and respond to you.
• Authorities and other parties where we believe disclosure is required by law, regulation, legal process or a lawful government request, or is necessary to protect rights, safety, security or property.
• A successor in a merger, financing, acquisition, reorganization or sale of assets, which will be bound to protect personal information consistently with this policy.
• Anyone you direct us to share with, with your consent.

We do not sell personal information.

7. International transfers

We are based in Canada, and our providers operate in Canada and other countries, including the United States. Your information may be stored and processed outside the country where you live. Laws in those countries may differ from yours, and courts, law enforcement and other authorities there may be able to access information under their laws.

Where required, we use safeguards for cross-border transfers, such as:

• adequacy decisions, where they exist;
• standard contractual clauses approved by the European Commission and, for UK transfers, the UK International Data Transfer Agreement or Addendum.

You can request more information about our transfer safeguards by contacting the Privacy Officer.

8. How long we keep information

We keep personal information only as long as needed for the purposes in this policy and to meet legal, accounting and dispute-resolution needs. Our standard periods are:

When the period ends, we delete or de-identify the information, or securely isolate it until deletion is possible, for example in backups.

9. How we protect information

We use administrative, technical and physical safeguards that are appropriate to the sensitivity of the information. They include:

• encryption of data in transit (HTTPS/TLS) and, where supported, at rest;
• access limited to staff who need it, with multi-factor authentication on core systems;
• read-only, least-privilege access when we review a client's Salesforce org, and removal of that access when the review ends;
• confidentiality obligations for our people and contractors;
• security review of service providers; and
• an incident response process.

No system is completely secure, and we cannot guarantee absolute security. If a breach of security safeguards involving personal information creates a real risk of significant harm, or otherwise meets a legal threshold, we will notify the affected individuals and the regulators the law requires, within the time the law requires.

10. Your privacy rights

Depending on where you live, you may have some or all of the rights below. We extend the core rights (access, correction, deletion and withdrawal of consent) to everyone, whatever their location.

Everyone

• Ask whether we hold personal information about you and get a copy.
• Ask us to correct information that is inaccurate or incomplete.
• Ask us to delete your information, or to restrict or stop using it, in the circumstances the law provides.
• Withdraw consent at any time, and unsubscribe from marketing.
• Ask questions or challenge our handling of your information.

Canada. You may access and correct your personal information, withdraw consent and challenge our compliance.

European Economic Area and United Kingdom. You have the rights of access, rectification, erasure, restriction, data portability and objection, including the right to object to direct marketing at any time, and the right to withdraw consent. You may lodge a complaint with your local supervisory authority.

United States. Depending on your state, you may have rights to know, access, correct and delete your personal information and to opt out of sale, sharing or targeted advertising. We do not sell or share personal information for targeted advertising. We will not discriminate against you for exercising your rights. An authorized agent may submit a request for you, and we may ask for proof of authority.

How to exercise your rights. Email hello@olivearkpartners.com. We may ask you to verify your identity before we act. We respond within 30 days, or the shorter or longer period the law specifies, and tell you if we need more time. We do not charge a fee unless a request is clearly excessive or repetitive. We may refuse a request where the law allows or requires, and we will tell you why.

11. Children

This website is for business professionals and is not directed to anyone under 18. We do not knowingly collect personal information from minors. If you believe a minor has given us personal information, contact us and we will delete it.

12. Third-party links and embedded services

The website may link to or embed third-party services, such as Google Calendar scheduling or a professional networking site. Those services have their own privacy practices, and this policy does not apply to them. Please read their policies before you share information.

13. Changes to this policy

We may update this policy as our practices or the law change. We will post the updated version with a new "Last updated" date. If a change is material, we will give you notice in a way that is appropriate, such as a prominent website notice or an email, and obtain fresh consent where the law requires it.

14. Contact us and complaints

Airova Inc., operating as OliveArk Partners
Privacy Officer: Chief Executive Officer
Email: hello@olivearkpartners.com
Location: Toronto, Ontario, Canada
Website: olivearkpartners.com

If you are not satisfied with our response, you may contact the regulator for your region:

• Canada: Office of the Privacy Commissioner of Canada (priv.gc.ca)
• EEA: your national data protection authority
• United Kingdom: Information Commissioner's Office (ico.org.uk)
• United States: your state attorney general