Privacy Policy

SharpSigma recognizes that privacy, confidentiality, information security, and responsible data handling are important to the organizations and professionals with whom we work.

This Privacy Policy explains how SharpSigma (“SharpSigma,” “we,” “us,” or “our”) may collect, use, disclose, retain, transfer, process, and protect personal information in connection with our websites, communications, business operations, digital systems, and services.

SharpSigma provides and facilitates engineering, manufacturing, sourcing, quality, operational, automation, artificial intelligence, technical, advisory, and related services. In connection with these activities, we may interact with customers and prospective customers (“Customers”), manufacturers and suppliers (“Suppliers”), independent professionals, consultants, engineers, specialists and other service providers (“Partners”), as well as other individuals and organizations.

References to “you” or “your” in this Policy refer to an individual whose personal information is processed by SharpSigma.

1. Scope

This Privacy Policy may apply when you visit sharpsigma.com or another SharpSigma-operated digital property; communicate with SharpSigma; submit an inquiry, request for quotation (“RFQ”), quotation request, or project requirement; request engineering, manufacturing, sourcing, quality, automation, artificial intelligence, or other services; upload or transmit files or documentation; request or download SharpSigma resources; create or use an account or portal; register, apply, or communicate as a Supplier or Partner; participate in a SharpSigma project; purchase, provide, or receive services; attend a SharpSigma meeting, event, webinar, training session, or similar activity; or otherwise interact or seek to establish a business relationship with SharpSigma.

This Policy describes privacy practices and does not itself require SharpSigma to accept an inquiry, provide a quotation, create an account, engage a Supplier or Partner, award work, continue an existing relationship, accept a project, enter into a transaction, or provide any particular service.

Separate agreements, including nondisclosure agreements, customer agreements, Supplier agreements, Partner agreements, purchase orders, statements of work, quotation terms, and other written contracts, may establish additional rights and obligations.

Where an enforceable written agreement governs particular information, services, confidentiality obligations, intellectual-property rights, or data-processing activities, that agreement will apply according to its terms. Nothing in this Privacy Policy is intended to amend an existing written agreement except where expressly stated.

2. Information We May Collect

The information SharpSigma collects depends upon the nature of the interaction and the purposes for which the information is reasonably required.

SharpSigma may collect business and contact information including names, business email addresses, telephone numbers, company or organization information, professional titles, professional functions, business addresses or locations, account information, communication preferences, and other information voluntarily provided to SharpSigma.

Where account functionality is provided, SharpSigma may process credentials, authentication information, account activity, permissions, and other information associated with maintaining and securing the account.

Information submitted in connection with an existing or prospective project may include RFQs, drawings, CAD files, models, specifications, bills of materials, photographs, videos, technical documentation, product information, materials, dimensions, tolerances, manufacturing requirements, inspection requirements, testing requirements, quality requirements, certifications, quantities, schedules, logistics requirements, pricing, commercial information, and other project-related material.

SharpSigma may also process commercial and transactional information concerning quotations, proposals, purchase orders, orders, invoices, billing, payments, purchasing, shipping, deliveries, warranties, claims, project history, transaction history, and related business communications.

Where payment processing is performed by an independent payment or financial-services provider, that provider may process information under its own terms and privacy practices.

Technical, commercial, or project information does not necessarily constitute personal information under applicable privacy legislation. Information that does not constitute personal information may instead be governed by contractual, confidentiality, intellectual-property, trade-secret, security, or other legal requirements.

3. Information SharpSigma Does Not Intentionally Require

Unless specifically requested and reasonably necessary for an authorized purpose, SharpSigma does not require users of its general website or ordinary business inquiry processes to provide highly sensitive personal information unrelated to the requested service.

You should not submit unnecessary personal information, government identification numbers, health information, financial credentials, passwords, biometric information, or other sensitive personal information through general SharpSigma forms, email addresses, or file-upload mechanisms unless SharpSigma has specifically requested that information for a legitimate purpose and an appropriate transmission method is available.

If information not reasonably required for the applicable purpose is submitted to SharpSigma, SharpSigma may delete, restrict, return, redact, or otherwise appropriately handle that information.

4. Customer and Prospective Customer Information

SharpSigma may maintain information concerning Customers and prospective Customers where reasonably necessary to understand requirements, evaluate opportunities, prepare quotations, manage relationships, execute projects, provide support, maintain appropriate traceability, administer transactions, improve services, satisfy applicable obligations, and protect legitimate business interests.

Such information may include previous inquiries, quotations, communications, project history, technical requirements, preferences, orders, quality records, delivery information, commercial history, and other information relevant to the relationship.

Submitting an inquiry, RFQ, drawing, specification, file, or other information does not require SharpSigma to issue a quotation, accept a project, provide services, continue negotiations, or establish a Customer relationship.

5. Supplier Information and Internal Assessments

SharpSigma may collect and maintain information about existing and prospective Suppliers, manufacturers, contract manufacturers, laboratories, inspection providers, logistics providers, and other organizations that may participate in project execution.

This information may concern manufacturing locations, processes, technologies, machinery, equipment, equipment capabilities and condition, production capacity, materials, tolerances, inspection and testing capabilities, quality-management systems, certifications, industries served, lead times, logistics capabilities, audits, quotation history, responsiveness, quality performance, delivery performance, corrective actions, project performance, commercial performance, risk, and other matters relevant to Supplier qualification, sourcing, development, monitoring, or project execution.

SharpSigma may create and maintain internal Supplier evaluations, classifications, performance indicators, risk assessments, rankings, notes, recommendations, or scores using objective or subjective factors SharpSigma considers relevant to its legitimate business activities.

Subject to applicable law, these assessments are internal SharpSigma business records and may contain SharpSigma confidential information, proprietary methodologies, commercial judgments, risk considerations, and information concerning other parties.

A Supplier’s registration, assessment, approval, qualification, rating, previous engagement, successful project, or inclusion within SharpSigma systems does not create a contractual right, entitlement, legitimate expectation, or guarantee concerning future work, preferred status, continued qualification, minimum volume, project allocation, or continuation of a business relationship.

SharpSigma may modify, suspend, reconsider, or discontinue a Supplier’s qualification or internal status where reasonably appropriate based upon performance, risk, capacity, technology, Customer requirements, commercial considerations, compliance requirements, project needs, or other relevant factors.

Nothing in this Privacy Policy requires SharpSigma to disclose proprietary methodologies, confidential commercial information, legally privileged information, third-party information, or other information that applicable law permits SharpSigma to withhold or redact when responding to an access request.

6. Partner and Professional Information

SharpSigma may collect information concerning prospective and existing consultants, engineers, auditors, inspectors, specialists, independent professionals, and other Partners.

Such information may include professional experience, employment history, technical expertise, education, training, licenses, certifications, qualifications, industries served, project experience, availability, geographic coverage, work authorization where relevant, performance information, and other information reasonably relevant to potential assignments or business relationships.

SharpSigma may maintain internal assessments, classifications, notes, recommendations, risk evaluations, or scores concerning Partner qualifications, capabilities, performance, experience, availability, reliability, risk, or suitability for particular assignments.

Subject to applicable law, these assessments may constitute internal SharpSigma business records and may incorporate confidential commercial judgments or proprietary evaluation methods.

Registration, qualification, prior work, inclusion within a SharpSigma database, or a favourable assessment does not create a right or guarantee concerning assignments, compensation, minimum work volume, continued engagement, preferred status, or future business.

7. Information Collected Through Technology

When you interact with SharpSigma websites or digital services, certain information may be generated or collected automatically depending upon the technologies in use.

This information may include IP addresses, browser and device information, operating-system information, referring sources, pages viewed, website interactions, timestamps, approximate geographic information derived from technical information, session information, diagnostic information, performance information, security events, fraud-prevention information, and comparable technical data.

SharpSigma may process such information where reasonably necessary to operate, secure, troubleshoot, analyze, maintain, protect, and improve its websites, systems, services, and user experience.

8. Cookies and Similar Technologies

SharpSigma may use cookies, local storage, pixels, analytics technologies, security technologies, and comparable mechanisms for legitimate website and business purposes.

Depending upon the technology, these purposes may include essential website functionality, cybersecurity, fraud prevention, session management, preference management, analytics, performance measurement, service improvement, and understanding how visitors interact with SharpSigma’s digital properties.

Where applicable law requires consent before a particular technology is used, SharpSigma will seek the consent required by that law.

Users may also be able to manage certain technologies through their browser or an available consent-management mechanism. Restricting technologies required for operation of the website may affect functionality or availability.

9. Resource Downloads and Business Inquiries

SharpSigma may request business information before providing access to templates, reports, tools, guides, checklists, training materials, technical resources, or other downloadable materials.

Information submitted in connection with such requests may be used to provide the requested resource, administer the request, understand interest in SharpSigma’s capabilities, respond to inquiries, improve SharpSigma’s resources, analyze resource usage, identify potential business opportunities, and communicate with the requester where permitted by applicable law.

Requesting or downloading a resource does not establish a professional, advisory, fiduciary, Customer, Supplier, Partner, or other contractual relationship with SharpSigma.

10. Purposes for Processing Information

Subject to applicable law, SharpSigma may process information where reasonably necessary to respond to communications, understand requirements, evaluate opportunities, prepare quotations and proposals, determine technical or manufacturing feasibility, provide services, manage commercial relationships, evaluate Suppliers and Partners, identify appropriate resources, source manufacturing capabilities, coordinate projects, administer orders, manage quality activities, conduct audits and assessments, perform inspection and verification activities, monitor project status, coordinate shipping and logistics, process transactions, maintain financial and business records, provide support, investigate complaints, administer warranties or claims, maintain appropriate project and product traceability, conduct internal analysis, improve operations and existing services, develop new services and workflows, maintain cybersecurity, detect or prevent fraud and misuse, enforce contractual rights, protect SharpSigma’s legal and commercial interests, manage disputes, establish or defend legal claims, satisfy legal, regulatory, tax, accounting, audit, insurance, quality, or compliance requirements, and undertake other compatible or lawful purposes.

Where applicable law requires SharpSigma to obtain additional consent before personal information is used or disclosed for a materially different purpose, SharpSigma will obtain such consent or rely upon another lawful basis where available.

11. Artificial Intelligence, Automation and Analytical Systems

SharpSigma may develop, evaluate, deploy, or use artificial intelligence, machine learning, algorithms, automation, computational models, decision-support systems, and related technologies in connection with its operations and services.

Depending upon the application, such technologies may assist with manufacturing feasibility, technical analysis, preliminary costing, preliminary pricing, quotation support, specification review, drawing analysis, quality-document analysis, Supplier identification or matching, Partner identification or matching, risk analysis, process planning, workflow management, project planning, classification, anomaly detection, operational analysis, knowledge retrieval, and internal decision support.

SharpSigma may use information lawfully available to it to operate, secure, test, validate, evaluate, and improve its systems where such use is permitted by applicable law and applicable contractual obligations.

Nothing in this Policy grants SharpSigma ownership of a Customer’s intellectual property merely because that information is submitted to SharpSigma.

Nothing in this Policy independently authorizes SharpSigma to disregard an applicable NDA, intellectual-property obligation, Customer agreement, or other contractual restriction governing technical information.

SharpSigma may use aggregated, statistical, de-identified, anonymized, derived, or non-personal information for analytical and system-improvement purposes where permitted by applicable law and applicable contractual obligations.

Outputs generated or assisted by automated systems may be preliminary, incomplete, probabilistic, inaccurate, or dependent upon the quality and completeness of the information available to the system. SharpSigma may require human review, engineering review, Supplier confirmation, additional information, inspection, testing, or other validation before relying upon an automated output.

An automated price indication, feasibility indication, recommendation, match, classification, estimate, analysis, prediction, or similar output does not constitute a binding quotation, engineering certification, warranty, professional opinion, acceptance of an order, or contractual commitment unless SharpSigma expressly identifies it as such in an applicable written agreement or binding quotation.

12. Information You Submit

You are responsible for ensuring, to the extent reasonably within your control, that information you submit to SharpSigma is accurate and that you have the authority, permission, consent, license, or other lawful basis required to provide that information for the contemplated purpose.

Where you provide personal information concerning another person, you are responsible for having authority to provide that information where applicable law requires such authority.

Where you provide confidential, proprietary, copyrighted, export-controlled, regulated, or third-party information, your ability to provide that information may also be subject to contractual or legal restrictions independent of privacy law.

SharpSigma may rely reasonably upon information supplied to it when evaluating or performing services and may request clarification, verification, updated information, or supporting documentation where appropriate.

Where personal information is used by SharpSigma to make a decision directly concerning an individual, SharpSigma will take reasonable steps required by applicable law concerning accuracy and retention of the relevant information.

13. Legal Bases and Consent

Where applicable law requires a legal basis for processing personal information, SharpSigma may rely upon the lawful basis appropriate to the circumstances.

This may include processing necessary to take requested steps before entering into an agreement, processing necessary to perform an agreement, processing based upon consent, processing necessary to comply with legal obligations, processing reasonably necessary for legitimate interests where that basis is available, and other grounds authorized by applicable law.

Where processing depends upon consent, consent may be withdrawn where applicable law permits withdrawal. Withdrawal does not affect processing lawfully undertaken before withdrawal and may not require SharpSigma to delete information that SharpSigma is permitted or required to retain.

Where information is reasonably necessary to provide a requested service or perform an agreement, withdrawal of consent or refusal to provide necessary information may prevent SharpSigma from providing or continuing the affected service or relationship.

14. Disclosure to Suppliers and Project Participants

SharpSigma may disclose relevant project information to prospective or selected Suppliers where reasonably necessary to assess feasibility, obtain quotations, evaluate capability or capacity, manufacture parts or assemblies, conduct inspections or testing, resolve technical issues, satisfy quality requirements, administer logistics, or otherwise evaluate or execute project activities.

Relevant information may also be disclosed to Partners, engineers, consultants, auditors, inspectors, laboratories, logistics providers, specialists, and other project participants where reasonably necessary for their role.

SharpSigma may determine the information reasonably necessary for a particular activity subject to applicable law and contractual obligations.

15. Service Providers and Processing on SharpSigma’s Behalf

SharpSigma may engage third-party organizations to provide technology, infrastructure, administrative, financial, professional, security, communications, logistics, artificial intelligence, analytics, document-management, or other services.

These organizations may process information on SharpSigma’s behalf where necessary to provide their services.

Where SharpSigma remains responsible under applicable privacy law for personal information transferred to a service provider for processing, SharpSigma will use contractual, organizational, technical, or other appropriate measures designed to require an appropriate level of protection.

For website enquiries, customer, supplier, partner, and resource-request submissions, these service providers may include website hosting and security infrastructure, temporary resilience and queue storage, business productivity and file-storage services used for operational records, and transactional email services used to route or acknowledge submissions.

Use of a third-party service provider does not eliminate obligations that applicable law places upon SharpSigma concerning personal information under SharpSigma’s control.

16. Other Disclosures

SharpSigma may disclose information to lawyers, accountants, auditors, insurers, financial advisers, consultants, and other professional advisers where reasonably appropriate.

SharpSigma may disclose information where it reasonably believes disclosure is necessary or permitted to comply with applicable law or lawful governmental or judicial process; investigate unlawful activity, fraud, misuse, or security incidents; protect systems; enforce agreements; collect amounts owed; protect SharpSigma’s rights, property, personnel, Customers, Suppliers, Partners, or legitimate interests; protect the rights or safety of others; or establish, exercise, or defend legal claims.

Information may also be disclosed in connection with an actual or proposed investment, financing, merger, acquisition, reorganization, joint venture, sale, transfer, insolvency, restructuring, or similar transaction, subject to applicable legal requirements.

17. Confidential and Technical Information

Engineering and manufacturing projects may involve commercially sensitive information, including CAD files, drawings, designs, specifications, bills of materials, manufacturing processes, quality records, pricing, product information, prototypes, Supplier information, and other proprietary material.

SharpSigma may provide access to such information to personnel, Suppliers, Partners, advisers, or service providers where reasonably necessary for the relevant project or business purpose and subject to applicable obligations.

This Privacy Policy primarily addresses personal information. It does not, merely by its existence, constitute an NDA or independently create fiduciary duties, professional privilege, exclusivity obligations, intellectual-property assignments, or additional contractual confidentiality obligations.

Confidentiality, intellectual-property ownership, permitted technical use, project restrictions, licensing, data ownership, derivative rights, and similar matters may be governed by an NDA, Customer agreement, Supplier agreement, Partner agreement, quotation, purchase order, statement of work, or other applicable agreement.

Nothing in this Privacy Policy expands or reduces obligations established by applicable law or an enforceable agreement.

18. Aggregated, De-Identified, Anonymized and Non-Personal Information

Where permitted by applicable law and contractual obligations, SharpSigma may create, derive, maintain, and use aggregated, statistical, de-identified, anonymized, or non-personal information for legitimate business purposes including analytics, benchmarking, forecasting, capacity planning, operational improvement, research, service development, quality improvement, pricing and cost analysis, performance analysis, security, system development, and business planning.

Where information has been rendered anonymous so that it is no longer personal information under applicable law, SharpSigma may use that information for lawful purposes subject to any applicable contractual restrictions.

SharpSigma will not characterize information as anonymous or de-identified merely to avoid obligations that continue to apply under applicable law.

Accepted website submissions may be retained temporarily in resilience or processing storage before or alongside the applicable operational record. SharpSigma’s current website intake system is configured to retain the raw resilience copy for up to 90 days, subject to earlier deletion or longer retention where permitted or required for security, investigation, legal, or operational reasons.

19. Security

SharpSigma uses administrative, organizational, physical, and technical safeguards intended to be appropriate to the sensitivity, quantity, format, distribution, storage, and risks associated with personal information under its control.

Depending upon the relevant system and circumstances, safeguards may include access controls, authentication, encryption, secure communications, infrastructure security, monitoring, backups, restricted access, confidentiality obligations, vendor controls, and other security measures.

No internet transmission, computer system, cloud platform, storage technology, or security measure can eliminate every risk. Accordingly, SharpSigma does not guarantee absolute security or represent that unauthorized access, loss, misuse, alteration, disclosure, or other security incidents can never occur.

Nothing in this Policy excludes or limits any obligation or liability that applicable law does not permit SharpSigma to exclude or limit.

20. Security Incidents and Breaches

SharpSigma may investigate actual or suspected security incidents and take actions it considers appropriate based upon the nature of the information, the circumstances, applicable contractual obligations, and applicable law.

Where SharpSigma is legally required to record a breach, report a breach to a regulator, notify an affected individual, or take another prescribed action, SharpSigma will do so in accordance with the applicable requirements.

Nothing in this section creates a contractual notification obligation beyond obligations arising under applicable law or an applicable written agreement.

21. Retention and Destruction

SharpSigma retains personal information only for periods that are reasonably necessary for identified purposes or as otherwise permitted or required by applicable law.

Appropriate retention periods may take account of project requirements, Customer relationships, quotation history, manufacturing and product traceability, product and process quality, warranties, audits, regulatory requirements, contractual obligations, tax and accounting requirements, insurance, Supplier and Partner management, cybersecurity, fraud prevention, dispute management, applicable limitation periods, access rights, investigations, potential or actual legal claims, and other legitimate recordkeeping requirements.

SharpSigma may establish different retention periods for different categories of information.

Where personal information is no longer required, SharpSigma may securely destroy, delete, erase, or anonymize it in accordance with applicable requirements and SharpSigma’s applicable retention practices.

Information may be retained for longer where necessary or permitted because of a legal hold, litigation, investigation, complaint, access request, audit, contractual requirement, regulatory requirement, fraud concern, security incident, or other lawful reason.

22. International Processing

SharpSigma operates in an international engineering and manufacturing environment. Customers, Suppliers, Partners, infrastructure providers, professional advisers, and other service providers may be located in Canada or other jurisdictions.

Personal information may therefore be transferred to, accessed from, stored in, or processed in jurisdictions outside the location where it was originally collected.

Information processed in another jurisdiction may be subject to the laws and lawful access requirements applicable in that jurisdiction.

Where SharpSigma remains accountable for personal information transferred to a third party for processing, SharpSigma will take measures required by applicable law to provide an appropriate level of protection.

Where a particular international transfer requires additional safeguards under applicable law, SharpSigma will implement the safeguards legally required for that transfer.

23. Marketing and Commercial Electronic Communications

SharpSigma may communicate regarding its services, capabilities, resources, technical content, insights, events, training, and business opportunities where permitted by applicable law.

Where applicable law requires consent for a commercial electronic communication, SharpSigma will rely upon an appropriate form of consent or another legally permitted basis before sending the communication.

Where legally required, commercial electronic communications will identify the sender and provide an appropriate unsubscribe mechanism.

An unsubscribe request does not prevent SharpSigma from sending communications that are not subject to the unsubscribe request, including communications reasonably necessary for projects, quotations, transactions, accounts, security, legal notices, contractual matters, existing service relationships, or other lawful non-marketing purposes.

24. Privacy Rights

Depending upon applicable law and jurisdiction, an individual may have rights concerning access, correction, deletion, withdrawal of consent, objection, restriction, portability, information concerning processing, or complaints.

The existence and scope of these rights are determined by applicable law and are subject to applicable conditions, limitations, exceptions, and exemptions.

Nothing in this Privacy Policy creates privacy rights beyond those provided by applicable law or expressly agreed to by SharpSigma in a binding written agreement.

SharpSigma may take reasonable steps to verify identity, authority, jurisdiction, and the validity or scope of a request before responding.

SharpSigma may request additional information reasonably necessary to evaluate or process a request.

Where permitted by applicable law, SharpSigma may decline or limit a request, redact information, extend a response period, or charge a legally permitted fee in circumstances authorized by law.

25. Access Requests and SharpSigma Confidential Information

A right of access to personal information does not necessarily create a right to obtain every document or business record in which that information appears.

Subject to applicable law, SharpSigma may provide the personal information required to satisfy an applicable access obligation without necessarily providing an original document, database, algorithm, model, source code, methodology, internal report, or complete business record.

Where permitted by applicable law, SharpSigma may withhold or redact information where disclosure would reveal another individual’s personal information, legally privileged information, trade secrets, confidential commercial information, confidential Customer or Supplier information, security-sensitive information, proprietary methodologies, internal controls, or other information protected from disclosure.

SharpSigma will not use this section to deny an access right that applicable law requires SharpSigma to provide.

26. Canadian Privacy

SharpSigma is based in Ontario, Canada and handles personal information in accordance with applicable Canadian privacy legislation.

Depending upon the activity and jurisdiction, applicable legislation may include the Personal Information Protection and Electronic Documents Act (“PIPEDA”) or applicable provincial privacy legislation.

Where required by applicable law, SharpSigma will maintain accountability for personal information under its control, identify purposes for collection, obtain meaningful consent where required, limit collection to appropriate purposes, appropriately limit use, disclosure and retention, maintain appropriate safeguards, provide applicable access and correction mechanisms, and provide a process for addressing privacy concerns.

Individuals may have the right to raise an unresolved privacy matter with the Office of the Privacy Commissioner of Canada or another privacy regulator having jurisdiction.

27. European Economic Area and United Kingdom

Where European Economic Area or United Kingdom data-protection legislation applies to SharpSigma’s processing, individuals may have additional rights under applicable law, potentially including access, rectification, erasure, restriction, objection, portability, withdrawal of consent, and the right to lodge a complaint with a competent supervisory authority.

Such rights remain subject to applicable conditions, exemptions, and limitations.

Where such legislation requires SharpSigma to identify a lawful basis for processing or establish additional safeguards concerning international transfers, SharpSigma will do so as required by applicable law.

Where applicable law provides rights concerning solely automated decisions producing legal or similarly significant effects, SharpSigma will address those rights where and to the extent they apply to SharpSigma’s actual processing.

28. United States Privacy

Residents of certain United States jurisdictions may have rights under applicable state privacy laws.

Depending upon the jurisdiction, whether the legislation applies to SharpSigma, and any available exemptions, applicable rights may concern access, correction, deletion, portability, disclosure practices, targeted advertising, sale or sharing of personal information, sensitive personal information, or other regulated processing.

SharpSigma does not intend to sell personal information as a standalone commercial product.

Because statutory definitions of “sale,” “sharing,” “targeted advertising,” and similar concepts vary by jurisdiction and may extend beyond transactions involving monetary payment, SharpSigma will provide any notices, choices, or opt-out mechanisms required by laws applicable to SharpSigma’s actual processing activities.

SharpSigma will not unlawfully discriminate against an individual for exercising an applicable privacy right.

29. Children

SharpSigma provides business-to-business and professional services and does not direct its services toward children.

SharpSigma does not knowingly seek personal information from children where parental or guardian authorization would be required by applicable law.

If SharpSigma becomes aware that personal information has been collected in circumstances contrary to applicable requirements, SharpSigma may take reasonable steps to delete, restrict, or otherwise appropriately address the information.

30. Third-Party Websites and Independent Services

SharpSigma websites, resources, or communications may contain links or integrations involving websites, platforms, applications, or services operated independently by third parties.

Independent third parties maintain their own terms, security practices, and privacy policies.

Except where applicable law or an enforceable written agreement provides otherwise, SharpSigma is not responsible for the privacy, security, availability, accuracy, content, or practices of independently operated third-party services.

The inclusion of a link or integration does not, by itself, constitute SharpSigma’s endorsement of the third party or its practices.

31. Changes to This Policy

SharpSigma’s business, technologies, services, geographic reach, Suppliers, Partners, and operating model may change over time.

SharpSigma may revise this Privacy Policy to reflect changes in its operations, technologies, services, information practices, organizational structure, or applicable requirements.

The Effective Date identifies the version currently published.

Where applicable law requires notice, consent, or another action before a material change affecting personal information becomes effective, SharpSigma will take the action required by that law.

An updated Privacy Policy does not retroactively authorize processing that applicable law would prohibit without additional consent or another lawful basis.

32. Privacy Accountability and Contact

SharpSigma designates responsibility for privacy compliance within the organization.

Questions, concerns, complaints, or requests concerning this Privacy Policy or SharpSigma’s handling of personal information may be directed to the Privacy Officer, SharpSigma, Ontario, Canada, at connect@sharpsigma.com or through sharpsigma.com.

A request should provide sufficient information for SharpSigma to understand and evaluate the matter. SharpSigma may request reasonable information necessary to verify identity, authority, jurisdiction, or applicability before releasing, correcting, deleting, or otherwise acting upon personal information.

33. Interpretation and Preservation of Rights

This Privacy Policy is intended to operate consistently with applicable privacy and data-protection legislation.

If a provision conflicts with a mandatory requirement of applicable law, the mandatory requirement will govern only to the extent of the conflict.

If any provision is determined to be invalid, unlawful, or unenforceable, that determination will not necessarily affect the validity or enforceability of the remaining provisions.

Headings are provided for organization and convenience and do not independently expand or restrict the meaning of a provision.

References to examples are illustrative and are not necessarily exhaustive.

Nothing in this Privacy Policy waives, restricts, or modifies any right, defence, remedy, privilege, limitation, exception, exemption, or protection available to SharpSigma under applicable law or an applicable enforceable agreement.

Nothing in this Privacy Policy should be interpreted as creating a warranty, guarantee, fiduciary obligation, professional standard, service commitment, contractual relationship, or representation beyond obligations expressly imposed by applicable law or an enforceable written agreement.