Privacy Policy

1. Introduction and Controller Identity

This Privacy Policy explains how StoryGroup Canada Learning (“we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you visit our website and interact with our content and services, including training program inquiries, learning resources, and continuing education information.

For the purposes of Canadian privacy laws, StoryGroup Canada Learning Inc. is responsible for personal information under its control.

If you have questions about this policy or how we handle personal information, contact us using the details in Section 18 (Contact).

2. Personal Data We Collect

We collect information to operate our website, respond to requests, and improve how our training information is delivered. The categories below describe the types of information we may collect.

• Identity and contact information: such as your name, email address, phone number (if provided), role/title (if provided), and organization name.
• Inquiry and form content: the message you submit, program preferences, audience size, delivery constraints, timelines, and any other details you choose to include in a request for training options.
• Technical information: IP address, browser type, device information, operating system, language settings, approximate location inferred from IP, and other device identifiers used for basic security and performance.
• Usage information: pages viewed, time spent on pages, navigation paths, referring pages, and interactions such as button clicks and form starts (where available).
• Cookies and similar identifiers: such as cookie consent choices and session identifiers, described in Section 4 and in our Cookies Policy.
• Conversion events: signals that a form was submitted successfully or that a key interaction occurred (for example, a request was sent), typically recorded as an event rather than as the full content of your message.

We do not request special-category information (such as health details, religious beliefs, political views), government-issued identification numbers, or financial account details through our standard contact forms. Please avoid including sensitive information in your message.

3. Why We Process Personal Data and Legal Basis

Our processing activities are organized around practical use cases: responding to inquiries, delivering training-related information, keeping the website secure, and understanding how visitors use the site. Where relevant, we reference common legal bases used under privacy frameworks such as the GDPR. In Canada, we generally rely on consent (express or implied, depending on the context) and reasonable business purposes.

Automated decision-making: We do not engage in automated decision-making or profiling that produces legal or similarly significant effects.

4. Cookies and Tracking

Our website may use cookies and similar technologies to keep the site working, remember your preferences, and (if you choose) help us understand usage and measure advertising performance. Cookies are small text files placed on your device. We also use browser storage and may use pixel tags in connection with analytics or marketing tools, but only when enabled based on your consent where required.

Essential cookies (always active)

These cookies are required for the website to function and for basic security. They include items like session continuity and storing your cookie preferences. Retention ranges from session-only to up to 12 months, depending on the cookie.

Analytics cookies (optional)

If you enable analytics cookies, we may use tools such as Google Analytics 4 to understand aggregated visitor behaviour (for example, which pages are most helpful). We configure analytics to reduce data granularity where available (such as IP anonymization features). Analytics data retention is typically 14 months, and some cookies may persist for up to two years.

Marketing cookies (optional)

If you enable marketing cookies, we may measure advertising performance and build audiences for showing relevant messages. Typical providers include Google Ads and Meta Platforms. Marketing cookies may store a browser identifier (for example, for conversion attribution) and usually persist for around 90 days.

For details on the cookies we use, their purposes, and retention periods, see our Cookies Policy.

5. Consent and Your Choices

You can manage cookie categories using the “Manage cookie preferences” link in the footer. Essential cookies remain active because the website cannot operate reliably without them. Analytics and marketing cookies are optional and can be turned on or off.

Consent choices are recorded in the cookie_consent cookie for up to 12 months, unless you clear cookies sooner. Withdrawing consent does not affect processing that occurred before the withdrawal.

If you prefer, you can also manage cookies through your browser settings. Note that blocking all cookies may impact site functionality, including form security and preference saving.

6. Sharing With Advertising and Service Partners

We use service providers to host and protect the website, deliver content, and (if enabled) provide analytics and advertising measurement. We do not sell personal information. We share data only as needed for the purposes described in this policy.

• Google LLC (analytics and advertising measurement, where enabled): cookie identifiers, usage events, and conversion events. https://policies.google.com/privacy
• Meta Platforms (advertising measurement, where enabled): page views, conversion events, and audience membership signals. https://www.facebook.com/privacy/policy
• Cloudflare (security and content delivery): IP-based threat detection and performance optimization. https://www.cloudflare.com/privacypolicy/

We do not permit these providers to use site data for their own independent commercial purposes, outside the delivery of services to us.

7. International Transfers

We operate in Canada, but some service providers may process information in other countries (including the United States). When information is processed outside your province or Canada, it may be subject to the laws of the jurisdiction where it is processed, and may be accessible to law enforcement or government authorities under those laws.

Where international transfers are relevant under privacy frameworks such as the GDPR/UK GDPR, providers may rely on recognized transfer mechanisms (for example, the EU–US Data Privacy Framework where applicable, or Standard Contractual Clauses as a fallback). We take reasonable steps to ensure service providers have appropriate safeguards in place.

8. Retention

We keep personal information only for as long as needed to fulfill the purpose for which it was collected, to maintain business records, and to comply with legal obligations. Retention periods vary by data type.

• Contact form submissions: typically up to 2 years from the last interaction, unless a longer period is needed for an active business relationship or a legal requirement.
• Email correspondence: duration of the relationship plus up to 1 year, depending on context and recordkeeping needs.
• Server and security logs: typically up to 90 days, unless an incident requires longer investigation.
• Analytics data: generally 14 months (where enabled), with some identifiers lasting up to 2 years depending on provider settings.
• Marketing cookies: based on cookie lifetime (commonly 90 days) where enabled.
• Cookie consent record: up to 3 years for audit and compliance purposes, where applicable.

When information is no longer required, we delete it or de-identify it using reasonable and proportionate measures.

9. Your Rights and Requests

Depending on your location and the nature of our relationship with you, you may have rights to access, correct, or delete personal information we hold about you, and to withdraw consent for certain processing.

To make a request, contact us at [email protected]. We may need to verify your identity before responding. We aim to respond within a reasonable timeframe and, where relevant, within 30 days.

10. Children

This website is intended for professional and organizational use and is not directed at children. We do not knowingly collect personal information from individuals under 16. If you believe a child has provided personal information to us, contact [email protected] and we will take reasonable steps to delete it.

11. Do Not Track

Some browsers send “Do Not Track” signals. Our website does not respond to these signals in a uniform way because there is no consistent industry standard for compliance. Third-party providers may offer their own controls for tracking preferences.

12. Data Deletion Requests

You can request deletion of your personal information by emailing [email protected] with the subject line “Data Deletion Request.” We may ask for information that helps us locate your record and confirm identity. We will complete deletion within a reasonable period, typically within 30 days, unless we are required to retain certain records for legal or operational reasons.

13. Business Transfers

If we are involved in a merger, acquisition, restructuring, financing, insolvency, or sale of company assets, personal information may be transferred as part of that transaction. If a transfer would materially change how personal information is used, we will provide notice on the website.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or our services. When we make material changes, we will post an updated version on this page and update the “Last Updated” date. If appropriate, we may provide a more prominent notice for significant changes.

15. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification. Safeguards include access controls, secure transmission where supported, and monitoring for suspicious activity. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

For contact forms, automated checks and CAPTCHA-style challenges may be used to reduce spam and abuse. These checks are designed to protect the integrity of the site and do not change the content of your message.

16. Links to Other Websites

Our website may reference third-party services (for example, provider privacy pages). This Privacy Policy does not apply to external websites. If you follow a link to another site, review that site’s privacy policy and practices.

17. Regional Notes

StoryGroup Canada Learning Inc. operates in Canada and follows applicable Canadian privacy requirements. If you are located in another jurisdiction, additional rights and obligations may apply to the handling of your information. We will assess requests in context and respond in line with applicable law.

If you are an organization contacting us on behalf of employees, you are responsible for ensuring you have appropriate authority to share any personal information included in your inquiry.

18. Contact

For questions, access requests, correction requests, or deletion requests related to this Privacy Policy, contact: