How we handle your information.

01 / Who we are

Who we are

Manic Edge is the business name of 18095973 CANADA INC., a company incorporated in Canada with its place of business in North Vancouver, British Columbia. We provide AI-assisted strategy stress-testing and related advisory services to businesses.

This notice covers the information for which we are the controller, meaning the information we decide the purposes and means for ourselves.

When a client engages us and sends us material to work on, we handle that material on their instructions and they remain responsible for it. Our Data Processing Addendum governs that relationship, and this notice does not.

02 / Privacy officer

Our privacy officer

Questions, requests, and complaints about privacy go to our privacy officer:

03 / What we collect

What we collect and why

People at our clients and prospective clients

We hold business contact details, which means names, job titles, work email addresses, and work phone numbers, along with the company details of the organization. We use these to discuss potential work, deliver engagements, send quotes and invoices, and keep the ordinary records a business keeps. Under the GDPR our lawful basis is performance of a contract, and our legitimate interest in running and marketing a business where no contract is yet in place. Under Canadian law we rely on consent, which for business contact information used to reach someone in their professional capacity is implied by the business relationship.

Documents clients send us

Clients can send us files through a private upload link. What those files contain is the client's choice. We ask clients to send anonymized or aggregated material wherever the engagement allows, and we treat these documents as confidential under our Master Services Agreement.

People who contact us

If you email us or fill in a form on this site, we keep the message and your contact details so we can reply and keep a record of the exchange.

Website visitors

This website sets no cookies. We run no analytics, no tag manager, and no third-party tracking scripts. Our hosting provider keeps standard server request logs, which include IP addresses, for security and troubleshooting. The typefaces on this site are served by Adobe Fonts. When a page loads, your browser requests the font files from Adobe's servers, so Adobe receives your IP address, browser details and the address of the page, and keeps its own request logs. Adobe uses this to serve the fonts and to count page views for our font licence; it does not set cookies for this and we receive no information about you from it. Adobe's own privacy policy applies to that request.

Payments

When you pay an invoice, the payment page is operated by Stripe. Your card details go directly to Stripe and never reach us. We keep the invoice, the payment status, and Stripe's reference for the payment.

We collect no special category data, we knowingly collect no information about children, and we build no profiles and make no automated decisions that produce legal or similarly significant effects about you.

04 / What we do not do

What we do not do

• We do not sell personal information, and we do not share it for cross-context behavioural advertising.
• We do not use client confidential information or personal information to train public AI models.
• We do not buy personal information to build marketing lists of consumers.

05 / Who we share it with

Who we share it with

We share personal information with the service providers who run our systems. Each of them is bound by a data processing agreement or by its published terms of service and may use the information only to provide their service to us.

We also disclose information where the law requires it, where we need to establish or defend a legal claim, and to professional advisers such as our accountants and lawyers who are under their own duties of confidence.

06 / Where it is held

Where your information is held

We are a Canadian company, and our records are held with the service providers above, most of which process data in the United States. While information is held in another country it is subject to the laws of that country, including lawful access by its courts and authorities. We state this openly so you can take it into account.

For transfers of personal data out of the European Economic Area or the United Kingdom: Canada holds an adequacy decision for commercial-sector data, which covers transfers to us. Onward transfers to our United States providers rely on the transfer mechanisms in our agreements with each of them, which are Standard Contractual Clauses or an equivalent approved mechanism.

For clients in Quebec: this section, together with the provider table above, is our disclosure of communication of personal information outside Quebec.

07 / How long we keep it

How long we keep it

• Financial records, including invoices and payment records, are kept for six years from the end of the applicable tax year, which is the period Canadian tax law requires.
• Client and engagement records are kept for the life of the relationship and for a reasonable period afterwards, so that we can answer questions about work we did and defend any claim arising from it.
• Documents clients upload are kept for the engagement and are returned or deleted on written request, subject to routine backups.
• Prospect contact details are removed once it is clear there is no relationship to pursue, or on request.
• Security and audit records of changes made in our systems are kept as an integrity record.
• Server logs are kept for the period our hosting provider retains them.

08 / How we protect it

How we protect it

Access to our internal systems requires single sign-on with a verified account on our own domain, and access is limited to the people who need it. We store no passwords. Information is encrypted in transit, and our providers encrypt it at rest. Every change in our internal system is recorded in an audit log. Our full security posture is set out in our Security and Privacy Overview, which we provide to clients and their security teams on request.

No system is perfectly secure. If a breach of your personal information creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as the law requires, and we will notify the relevant supervisory authority within seventy-two hours where the GDPR applies.

09 / Your rights

Your rights

You may ask us to:

• Give you access to the personal information we hold about you, and tell you how we have used it and who we have disclosed it to.
• Correct information that is wrong or incomplete.
• Delete information we no longer have a reason to keep. Where we are required by law to retain something, such as a financial record, we will tell you and keep only what is required.
• Restrict or object to our use of your information, including any use based on our legitimate interests.
• Receive a copy of information you gave us, in a portable format, where the GDPR applies.
• Withdraw consent where we rely on consent, at any time, without affecting what we did before you withdrew it.

Send any of these requests to our privacy officer at the address above. We will confirm receipt and respond within thirty days, and we will tell you if we need longer and why. We will ask you for enough information to confirm who you are before we act on a request. Exercising these rights costs you nothing, and we will not treat you differently for exercising them.

If you are in California: the rights above cover the access, deletion, correction, and opt-out rights the CCPA provides. We sell and share no personal information, so there is nothing for you to opt out of, and we offer no financial incentives for personal information. You may use an authorized agent to make a request on your behalf.

10 / Complaints

Complaints

If you are unhappy with how we have handled your personal information, tell our privacy officer first and we will try to put it right.

You also have the right to complain to a regulator:

• In Canada, the Office of the Privacy Commissioner of Canada.
• In British Columbia, the Office of the Information and Privacy Commissioner for British Columbia.
• In Quebec, the Commission d'accès à l'information du Québec.
• In the European Economic Area or the United Kingdom, your local supervisory authority.

11 / Changes

Changes to this notice

We will update this notice when our systems or practices change, and we will change the date at the top when we do. Where a change materially affects how we use information we already hold, we will tell affected clients directly.