1. Who we are

DERBAZI is a partner collective based in Canada, providing executive-level advisory and intervention services. This privacy policy explains how we collect, use, disclose, and protect your personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, the European Union's General Data Protection Regulation (GDPR).

For any questions regarding this policy or your personal data, contact us at contact@derbazi.com.

2. Information we collect

We collect personal information only when you voluntarily provide it to us through our contact form or via direct email. This may include:

Your name, professional email address, your description of the business situation requiring intervention, your selection of timeline urgency and domain area, optional context you choose to provide (sponsor role, outcome at risk, confidentiality constraints), and technical data automatically collected when you visit our site (IP address, browser type, pages viewed, referring URL).

3. How we use your information

We use your personal information to evaluate whether your situation is a fit for our services, to respond to your inquiry within 48 hours, to schedule and conduct scoping conversations, and to comply with legal obligations.

We do not use your information for marketing, advertising, profiling, or automated decision-making. We do not sell, rent, or trade your personal information to third parties.

4. Legal basis for processing (GDPR)

For individuals in the European Economic Area, our legal basis for processing personal information is legitimate interest (evaluating potential engagements) and consent (you voluntarily submit information through our contact form). You may withdraw consent at any time by contacting us.

5. Data retention

Contact form submissions are retained for a maximum of 12 months after our last communication. If an engagement proceeds, information is retained for the duration of the engagement plus 24 months for professional record-keeping. You may request deletion at any time.

6. Data security

We take reasonable technical and organisational measures to protect your personal information. Our website uses HTTPS encryption. Form submissions are transmitted via encrypted email. We limit access to personal information to principals who are directly involved in evaluating or conducting the engagement.

7. Third-party services

Our website uses Google Fonts for typography delivery. We do not currently use analytics, tracking cookies, or advertising services. Our website is hosted on infrastructure that may log standard server access data (IP addresses, timestamps).

8. Cookies

Our website does not use cookies for tracking or advertising purposes. Essential cookies may be set by our hosting infrastructure for security and performance. No third-party tracking cookies are placed.

9. Your rights

Depending on your jurisdiction, you have the right to access the personal information we hold about you, request correction of inaccurate information, request deletion of your information, object to or restrict processing, request data portability (GDPR), and withdraw consent at any time.

To exercise any of these rights, contact us at contact@derbazi.com. We will respond within 30 days.

10. International transfers

Your personal information may be processed in Canada. Canada has been recognised by the European Commission as providing an adequate level of data protection. Where information is transferred to other jurisdictions, we ensure appropriate safeguards are in place.

11. Changes to this policy

We may update this privacy policy from time to time. The "last updated" date at the top reflects the most recent revision. Continued use of our website after changes constitutes acceptance of the updated policy.

12. Contact

For any questions, requests, or concerns regarding your personal information, contact us at contact@derbazi.com.