Veylor Group runs privacy as a managed program, not a notice bolted on at the end. In plain language, what Veylor collects, the basis for it, how it is handled and for how long, the rights you hold, and the office accountable for all of it.
In short
- We collect only what you put in a form: name, email, phone, company, and message. Plus a submission's IP address, held temporarily to stop spam.
- We use it to reply and to keep a record of the inquiry. Nothing else.
- We never sell it, run ad trackers, or build profiles on you.
- We share it only with vetted providers that run the site, under contract. Some are in the United States.
- We keep it only as long as needed, then destroy it.
- A named Privacy Office is accountable, and answers you, at privacy@veylorgroup.com.
Accountability
Veylor Group is accountable for the personal information in its control. A designated Privacy Office governs the program across the Group's entities: the handling standards, staff training, a privacy impact assessment before any new use of personal information, the retention schedule, and the breach-response plan. The Office is the single point of contact for a question, a request, or a complaint, and answers to Veylor's leadership for compliance with this notice and the law.
What Veylor collects
Two things, and only these.
- Inquiry data. The name, email, phone, company, and message you enter in an inquiry or consult form. A form asks for nothing you are not shown.
- A temporary technical signal. The IP address of a submission, held temporarily to limit spam and abuse, then discarded. It is not used to identify you and is never shown publicly.
There are no analytics or advertising trackers on these sites.
Purpose and legal basis
Veylor identifies the purpose when it collects: to respond to your inquiry and to keep an accurate record of it. The basis is your consent, given when you submit, together with collection and use for purposes a reasonable person would consider appropriate, the standard PIPEDA sets. Veylor does not repurpose your information for anything you were not told about without asking first.
Consent and your choices
Consent may be express or implied by the context of your inquiry, and you can withdraw it at any time on reasonable notice, subject to legal or contractual limits Veylor will explain. Under Canada's Anti-Spam Legislation (CASL), Veylor sends commercial email only with consent, and every message identifies the sender and offers a one-step unsubscribe. A reply to your own inquiry is not marketing.
Use, disclosure, and transfers
Veylor limits use and disclosure to the purpose you were told. It does not sell or rent personal information, share it for anyone else's marketing, or profile visitors. A small number of vetted service providers (hosting, email, storage) process data on Veylor's instructions under contract; some operate in the United States, where local law may apply. Veylor stays accountable for information handled by a provider and requires protection comparable to its own. Veylor discloses to anyone else only where the law requires it.
Retention and disposal
Veylor keeps personal information only as long as needed for the purpose and for its legal obligations, under a defined retention schedule. The temporary IP signal is discarded shortly after a submission. When information is no longer needed, it is securely destroyed or anonymized.
Accuracy and your rights
Veylor keeps personal information accurate for its purpose. Under PIPEDA, and subject to limited legal exceptions, you may:
- access the personal information Veylor holds about you;
- have it corrected if it is wrong or incomplete;
- withdraw consent to its continued use.
Email the Privacy Office at privacy@veylorgroup.com. Veylor confirms it received your request, may verify your identity, and responds within thirty days, the period PIPEDA sets, at no cost for a reasonable request.
Safeguards
Veylor protects personal information with safeguards appropriate to its sensitivity.
Breach response
If a breach of those safeguards ever creates a real risk of significant harm, PIPEDA requires Veylor to notify the people affected and the Office of the Privacy Commissioner of Canada (OPC) without unreasonable delay, and to keep a record of it. Veylor's breach-response plan follows that requirement.
Challenging compliance
You can challenge how Veylor handles your information. Raise it with the Privacy Office first; it will investigate and respond. If you are not satisfied, you may complain to the Office of the Privacy Commissioner of Canada, which oversees PIPEDA.
The law, changes, and contact
Ontario has no general private-sector privacy statute, so PIPEDA governs, with the OPC as regulator. Veylor also operates in the United States, where local law may apply, and meets the higher standard where laws differ. These sites are not directed at children. Changes to this notice are posted here with the date above, and anything material is flagged. For accessibility, see Accessibility. To reach the office accountable for your information, contact the Veylor Privacy Office at privacy@veylorgroup.com, or see Contact.