Privacy Policy
Effective date: 2026-07-08
This policy explains how Northlify collects, uses, communicates, keeps, and protects personal information in connection with its website, services, projects, and client communications.
Privacy officer
Privacy Officer, Northlify, hello@northlify.com. Postal address available on request. This person handles privacy questions, access and rectification requests, withdrawal of consent, portability requests, privacy complaints, and confidentiality incidents.
Personal information we may collect
We only collect information needed for identified purposes. This may include your name, email address, organization, project details, booking information, messages you send us, billing or contract details, technical security logs, consent preferences, and information required to deliver a service you request.
Purposes and means of collection
We collect information directly from you through email, booking flows, forms, calls, project tools, contracts, and normal website operation. We use it to respond to inquiries, schedule meetings, prepare proposals, deliver services, manage client relationships, secure our systems, comply with legal obligations, and improve our website and operations.
Consent and withdrawal
When consent is required, we ask for it in clear language and for specific purposes. You may withdraw consent, subject to legal or contractual limits. If withdrawal prevents us from providing a requested service, we will explain the practical effect of the withdrawal.
Communication to service providers
We may use service providers for hosting, email, scheduling, analytics if enabled, development tooling, security, accounting, and project delivery. They receive only the information needed for their mandate and must protect it. Some providers may process information outside Quebec or Canada; before communicating personal information outside Quebec, we consider privacy-related factors and use contractual safeguards where required.
Retention, destruction, and anonymization
We keep personal information only as long as needed for the purposes described, for legitimate business records, or as required by law. When the purpose is fulfilled, we destroy the information or anonymize it for serious and legitimate purposes, subject to applicable legal requirements.
Security and confidentiality incidents
We use reasonable administrative, technical, and organizational safeguards adapted to the sensitivity of the information. If a confidentiality incident involving personal information presents a risk of serious injury, we will notify the Commission d'acces a l'information du Quebec and the affected person as required, take reasonable steps to reduce harm, and keep an incident register.
Your rights
Subject to applicable law, you may request access to your personal information, rectification of inaccurate information, withdrawal of consent, information about the use and disclosure of your information, cessation of dissemination or de-indexing where available, and portability of computerized personal information collected from you in a structured, commonly used technological format.
Automated decisions, profiling, and minors
Northlify does not use this website to make decisions based exclusively on automated processing that produce legal or similarly significant effects. We do not intentionally collect personal information from minors under 14 without parental or tutor consent, unless permitted by law.
Questions and complaints
You can contact the Privacy Officer for questions, requests, or complaints. We will respond within the time required by applicable law and may need to verify your identity before processing a request.