InnovLead Inc.
Privacy Policy
Last updated: September 2026
Why this page is specific
InnovLead advises organizations on privacy and compliance. We hold ourselves to what we ask of our clients, so this policy describes exactly what happens to your information, including the providers outside Canada that handle it.
This policy applies to innovlead.ca and to information you send us through it.
1. Who is accountable
Tommy Fernandez, Co-Founder & COO, is the individual accountable for personal information at InnovLead, and is our privacy contact for both PIPEDA and Quebec's Law 25.
Email: tommy@innovlead.ca
Phone: +1 (647) 574-4075
Location: InnovLead Inc., Welland, Ontario, Canada
Post: if you would rather write to us by mail, email or phone first and we will give you a postal address.
You can contact him about anything in this policy: to see what we hold, correct it, have it deleted, have it sent elsewhere, or to complain.
2. What we collect
When you book a call, our scheduling provider passes us what you enter in the booking: your name, email, company, role, industry, company size, your stated challenge, your company website, any notes you write, and the time of the booking.
When you email or phone us, we keep the correspondence.
Our website enquiry form is switched off at the moment. When it returns, this policy will be updated first, to say exactly what the form collects and where it goes.
We do not ask for, want, or knowingly collect financial account details, government identifiers, health information, or any other sensitive category through this website. Please do not send them.
3. Why we collect it, and what we do with it
We use it to respond to you, prepare for a call, and decide whether we are the right firm for your situation.
- We contact you: a booking confirmation, and a reply from Tommy or William.
- We keep a record of the enquiry so we know we have already spoken.
We do not sell your information. We do not share it for anyone else's marketing. We do not use it to train an AI model of our own.
4. Who else receives it
Running this website and answering you means other companies process information on our behalf. We name them because you cannot assess a risk you cannot see.
| Provider | What it receives | What it does |
|---|---|---|
| Cal.com | your booking details | Runs the booking calendar |
| Netlify | your IP address and request data, as any web server does | Hosts this website |
| Google (Gmail) | your email address and your messages | Carries our correspondence with you |
| Spline, unpkg and Pexels | your IP address and request data, when the home page loads | Serve the 3D scene, a supporting file the 3D scene needs, and the background video on the home page |
Some of these providers store or process information outside Canada, including in the United States. Information held in another country is subject to that country's laws, which can include lawful access by its authorities. If you would rather not have your information handled this way, email or phone us instead of booking online, and say so.
We do not disclose your information to anyone else except where the law requires it, or to a professional adviser bound by confidentiality if we need advice on your matter.
5. Automated processing
Right now, none. No automated system researches you, scores you, ranks you or decides anything about your enquiry. A person reads it.
We say "right now" on purpose. We have built such tools in the past: an automated briefing prepared before a call, and a rule that scored bookings. We switched them off in August 2026 because they had not passed our own impact assessment. If either returns, this section will be updated before it is switched on, it will say exactly what the tool does, and you will be able to ask for a person to review any automated outcome.
No automated system here decides whether we work with you. That decision is made by a person.
6. How long we keep it
| Enquiries that do not become an engagement | until we have no remaining purpose for them, and at the latest 12 months after our last contact, then deleted |
| Enquiries that become an engagement | kept for the engagement, and afterwards for as long as our professional and tax obligations require |
| Correspondence | as above |
We do not keep personal information because it might be useful one day. If we no longer need it for the purpose you gave it to us for, we delete it.
7. Your rights
You can ask us to:
- Tell you what we hold about you, and where we got it
- Correct anything inaccurate or incomplete
- Delete it, where we are not required to keep it
- Send it to someone else,a right under Quebec's Law 25 since 22 September 2024
- Stop using it for a particular purpose, or withdraw a consent you gave us
Email tommy@innovlead.ca. We will respond within 30 days. There is no charge. We may ask you to confirm who you are before we release information about you. That protects you, not us.
If you are not satisfied with our answer,you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca), or, if you are in Quebec, to the Commission d'accès à l'information du Québec (cai.gouv.qc.ca). You do not need our permission and we will not hold it against you.
8. How we protect it
Access to your information is limited to the two founders. Credentials for the systems that process it are held in the credential stores of the platforms we use, rather than written into the systems themselves.
We will not claim to be perfectly secure, because no organization is. If a breach occurs that creates a real risk of significant harm to you, we will notify you as soon as feasible and report it to the Privacy Commissioner, as PIPEDA requires. We keep a record of every breach for two years, whether or not it reaches that threshold.
9. Cookies
See our Cookie Notice. In short: this site sets no cookies.
10. Children
This website is for businesses. We do not knowingly collect information from anyone under 18.
11. Changes
If we change this policy we will update the date at the top and, where the change is significant, say what changed. We will not apply a materially different use to information you already gave us without asking you first.