Privacy Policy

1. Introduction & Controller Identity

For the purposes of applicable privacy laws, including Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and substantially similar provincial private-sector laws (where applicable), the data controller for personal information collected through this website is:

• Legal entity: TATY Workplace Learning Ltd.
• Business name: TATY Workplace Learning
• Registered address: 200 Bay Street, Royal Bank Plaza, South Tower, Toronto, ON M5J 2J2, Canada
• Email: [email protected]
• Phone: +1 416 623 7849

We do not appoint a formal Data Protection Officer as defined under EU law because we do not operate as an EU/UK-established organization and we do not conduct large-scale processing of special-category data through this website. If you have privacy questions, contact us using the details above and we will route your request appropriately.

2. Personal Data We Collect

We collect personal information that is reasonably necessary for operating this website, responding to inquiries, and improving our educational offerings. Depending on how you interact with us, we may collect:

Identity and contact information

• Name and organizational role (if provided).
• Email address and phone number.
• Organization name and location (if provided).

Form content and communications

• Messages you submit via our forms (for example, audience details, preferred delivery format, scheduling constraints, and the training topic you are exploring).
• Email correspondence and call notes when you contact us.

Technical and usage information

• Internet Protocol (IP) address, browser type, device type, operating system, language settings, and approximate location inferred from IP (city/province level).
• Usage data such as pages viewed, time on page, referrer/exit pages, and click paths.
• Cookie and identifier data as described in Section 4.
• Conversion events (for example, submitting a contact request or clicking a call link).

What we do not intentionally collect

This site is designed for workplace education and does not require sensitive personal information. We do not intentionally collect special-category data (such as health information), financial account details, or government identification numbers through our standard website forms. Please avoid submitting sensitive personal details in open-text fields.

3. Why We Process Personal Data

We use personal information for clear, limited purposes tied to delivering education services and maintaining a secure, reliable website. Typical purposes include:

• Responding to requests: answering inquiries about programs, courses, delivery formats, and scheduling.
• Planning delivery: preparing a recommended learning pathway (for example, sequencing modules, cohort timing, reinforcement materials, and optional completion documentation).
• Service operations: maintaining records of communications and operational follow-up.
• Improving the website: understanding which content is most helpful so we can improve navigation, clarity, and accessibility.
• Security and fraud prevention: protecting the site from abuse, spam, and malicious traffic.
• Legal compliance: meeting applicable legal obligations and responding to lawful requests.

We do not use your personal information to make automated decisions that produce legal or similarly significant effects. Any educational recommendation we provide is based on the information you share and a human review of your request.

4. Cookies & Tracking Technologies

We use cookies and similar technologies to operate the site and, depending on your preferences, to measure performance and support advertising. Cookies are small text files stored on your device. We also use pixel tags and server-side logging to support security and basic site functionality.

Cookie categories used on this site

For details on specific cookie names and retention periods, please see our Cookie Policy.

5. Consent and Cookie Preferences

You can control the use of optional analytics and marketing cookies through the cookie banner and preference modal. Your choice is stored in a browser cookie named cookie_consent. Essential cookies remain active to ensure the site functions.

You can update your preferences at any time by selecting “Manage cookie preferences” in the footer. You may also clear cookies in your browser to remove stored preferences. If you withdraw consent, optional cookies will be disabled moving forward and, where applicable, identifiers such as _ga or _fbp may be deleted by our consent logic.

Note: Some browsers or extensions may block cookies or scripts by default. If optional measurement is blocked, it may reduce our ability to understand how the site performs, but it will not prevent you from contacting us.

6. Sharing With Service Providers and Advertising Partners

We share personal information only when necessary to operate the site, provide requested services, or where you have provided consent for optional measurement/marketing. Depending on configuration and your cookie choices, we may work with:

• Google LLC (Google Analytics 4, Google Ads, tag management and remarketing tools). Data may include cookie IDs, usage events, and conversion events. policies.google.com/privacy
• Meta Platforms, Inc. (Meta Pixel and related audience/conversion tools). Data may include page views, conversion events, and marketing identifiers when enabled by consent. facebook.com/privacy/policy
• Cloudflare, Inc. (content delivery network and security). Data may include IP address and device/security signals used to detect abuse and keep the site stable. cloudflare.com/privacypolicy

We do not sell personal information. Where advertising and analytics partners are used, they act as service providers/processors for our purposes and are not permitted to use site data for their own independent commercial purposes beyond providing the contracted services, subject to their platform terms and configurations.

7. International Data Transfers

We operate in Canada. Some of our service providers (such as Google, Meta, or Cloudflare) may process data in the United States or other jurisdictions. When personal information is transferred across borders, it may be subject to the laws of those jurisdictions and accessible to law enforcement or other authorities under applicable law.

We take reasonable steps to protect information when using service providers, including selecting reputable providers, limiting shared data, and using contractual and technical safeguards. For visitors located outside Canada, your use of the website may involve cross-border transfers to Canada and to locations where our providers operate.

8. Retention

We retain personal information only as long as needed for the purposes described in this policy, unless a longer retention period is required or permitted by law. Typical retention periods include:

• Contact requests and related correspondence: up to 2 years from the last interaction, unless we enter into a longer service relationship.
• Server security logs: typically up to 90 days, unless needed for investigating abuse or security incidents.
• Analytics data: typically 14 months (when enabled by consent), subject to provider settings.
• Marketing cookies: retained according to cookie lifetimes (often 90 days) unless you withdraw consent earlier.
• Cookie consent record: the preference cookie is generally retained for up to 12 months; we may retain a minimal audit record of consent status for up to 3 years where needed for compliance and troubleshooting.

9. Your Rights and Choices

Under Canadian privacy law, you generally have the right to access and request correction of personal information we hold about you, subject to limited exceptions (for example, where access would reveal personal information about another individual or where legal privilege applies). You also have choices about optional cookies, as described in Section 5.

To request access, correction, or deletion where applicable, email us at [email protected]. Please include enough detail for us to identify the information involved. For security, we may need to verify your identity before responding.

If you are located in another jurisdiction (for example, the EEA/UK), you may have additional rights under local law. We will make reasonable efforts to honour such requests where applicable. If you believe your privacy rights have been violated in Canada, you may contact the Office of the Privacy Commissioner of Canada: priv.gc.ca.

10. Children

This website is intended for workplace and professional education and is not directed to children. We do not knowingly collect personal information from individuals under 16. If you believe a minor has provided personal information to us, please contact us and we will take reasonable steps to delete it.

11. Do Not Track

Some browsers offer a “Do Not Track” signal. There is no consistent industry standard for responding to these signals. Our website does not respond to Do Not Track signals. If you want to limit optional tracking, use our cookie preference controls or your browser settings.

12. Data Deletion Requests

To request deletion of personal information we hold about you, email [email protected] with the subject line “Data Deletion Request”. We will respond within a reasonable timeframe, typically within 30 days, and may request additional information to verify identity and locate the relevant records.

Deletion may be limited where retention is required or permitted by law, needed to establish or exercise legal claims, or necessary for security and fraud prevention. In those cases, we will explain what information must be retained and why.

13. Business Transfers

If we are involved in a merger, acquisition, reorganization, financing, or sale of business assets, personal information may be transferred as part of that transaction, subject to appropriate confidentiality protections. If such a change results in materially different use of personal information, we will provide notice on the website.

14. U.S. State Disclosures (CCPA/CPRA, Virginia, Nevada)

While we are a Canada-based organization, the website may be accessed by visitors in the United States. Where U.S. state privacy laws apply, the sections below describe our practices in a plain-language summary.

California (CCPA/CPRA)

In the prior 12 months, we may have collected the following categories of personal information: identifiers (such as name, email, IP address, online identifiers), internet/network activity (such as page views and interactions), and inferences (such as likely interest in an educational topic inferred from pages visited). We use this information for operating the site, responding to inquiries, analytics (if enabled), and advertising measurement/remarketing (if enabled).

We do not sell personal information as defined by the CCPA. We may share information for cross-context behavioural advertising when marketing cookies are enabled. California residents may opt out by using our cookie preferences controls (see Section 5).

California residents may request to know, delete, or correct certain personal information, and may opt out of sale/sharing. Submit requests by emailing [email protected] with the subject line “California Privacy Request”. We will verify your identity before processing a request. Authorized agents may submit requests with written proof of authorization.

Virginia (VCDPA)

Virginia residents may have rights to access, correct, delete, and obtain a copy of certain personal data, and to opt out of targeted advertising. Submit requests by emailing [email protected] with the subject line “Virginia Privacy Request”. If a request is denied, you may appeal by emailing with the subject line “Appeal of Refusal — Privacy Request”; we will respond within 60 days.

Nevada

Nevada residents may submit a verified request to opt out of certain sales of personal information by emailing [email protected] with the subject line “Nevada Do Not Sell Request”. We do not currently sell personal information as defined under Nevada Revised Statutes Chapter 603A.

15. Security

We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information we handle. Controls include access limitation, secure configuration, and monitoring for malicious activity. No method of transmission over the internet is fully secure; we cannot guarantee absolute security, but we work to reduce risk and respond promptly to issues.

16. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. If changes are material, we will post a visible notice on the website and update the “Last Updated” date. Where appropriate, we will provide notice at least 14 days before changes take effect.

17. Contact

Questions or requests about privacy can be sent to:

• Email: [email protected]
• Phone: +1 416 623 7849
• Mail: TATY Workplace Learning Ltd., 200 Bay Street, Royal Bank Plaza, South Tower, Toronto, ON M5J 2J2, Canada