Privacy Policy
Exhibit A Media (exhibitamedia.ca) is operated by Alfano Technologies Inc., an Ontario corporation (Ontario Corp. No. 1001611474), with its business address at 1437 King Street East, Hamilton, Ontario L8M 1H7. Alfano Technologies Inc. is responsible for personal information collected through this site under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).
1. Information we collect
We collect personal information that you voluntarily provide when you interact with the Service, including:
- Account information: name, email, password (hashed), and similar identifying information where applicable.
- Communications: messages, support requests, and other content you send to us.
- Transactional information: payment details (handled by Stripe and never stored on our servers in full) and project-specific information you provide.
- Server and security data: IP address, browser type, requested pages and similar technical information collected automatically to deliver and protect the site.
- Optional analytics data: Google Analytics collects information about website use, such as pages visited and engagement, only after you accept analytics.
Project intake
If you submit a project inquiry or sign on as a client, we collect the information you provide (e.g., company name, project scope, contact information, files you upload) and use it solely to evaluate, scope, deliver, and support the project.
2. How we use your information
- To provide, operate, and improve the Service.
- To communicate with you about the Service, including replies to enquiries and requested guides and audit reports.
- To send newsletters and marketing emails where you have provided consent. You can unsubscribe using the link in a marketing email. Requesting a guide or creating an account does not require a new newsletter subscription.
- To operate the AI chat assistant described below and to measure site usage subject to the analytics choices described below.
- To process payments, fulfil orders, and deliver services.
- To comply with legal obligations.
- To detect and prevent fraud or abuse.
3. Sharing your information
We do not sell your personal information. We share it only with:
- Service providers who process information on our behalf (e.g., Stripe for payments, email delivery providers, hosting infrastructure). We remain responsible for the personal information under our control when using service providers.
- Legal authorities when required by law (e.g., subpoenas, court orders, regulatory requests).
AI chat and other providers
Carli is an AI site assistant, not a person or a legal adviser. When you send a chat message, we store the conversation, the page you used, your IP address and browser information. Chat history is sent to Anthropic to generate replies. If you provide contact details for follow-up, these may be saved as an enquiry. Please do not submit confidential legal-matter details, health information, payment-card numbers or other sensitive information through chat.
Google Analytics measures website use when you accept it. Cloudflare provides network delivery, security and Turnstile bot protection, and processes technical request information. Automatic Cloudflare browser-performance analytics is disabled. Our website fonts are hosted with the site rather than fetched from a third-party font service.
Our hosting infrastructure and service providers may process information outside Canada. Information processed in another country may be subject to that country's laws and lawful access by its authorities. Contact our Privacy Officer for information about service providers and international processing relevant to your information.
4. Retention
We retain personal information only as long as needed to provide the Service and fulfil legal, accounting, or reporting requirements. Account information is typically retained while your account is active and for a reasonable period after deactivation.
5. Cookies, storage and analytics choices
Google Analytics is optional. It is loaded only after you accept analytics. Use Analytics settings in the footer to reject it or change your choice. Rejecting stops future Google Analytics collection through this site and removes its accessible first-party cookies; it does not erase data already received by Google. Necessary site and security functions continue to operate.
- csrftoken: helps protect forms against forged requests; the configured lifetime is 364 days.
- sessionid: supports sign-in and requested service flows; the configured lifetime is 14 days. These lifetimes may end earlier when cookies are cleared or a session ends.
- _ga and _ga_*: Google Analytics identifiers created after acceptance; their expiry is controlled by Google Analytics and may be renewed with use. You can inspect their current expiry in your browser and remove them by rejecting analytics.
- eam-analytics-consent-v1 (local storage): remembers acceptance or rejection in this browser until changed or site storage is cleared.
- wbfChatSession (local storage): remembers a chat conversation across pages after you use chat, until browser storage is cleared. Clearing it does not itself delete a transcript held by us.
- Cloudflare network and security services: process network/device information for delivery and abuse prevention. The Google Analytics preference does not disable these network services.
You can also manage site storage in your browser. Blocking all cookies may prevent sign-in and some forms from working. For deletion of personal information already held by us, contact the Privacy Officer below.
6. Your rights under PIPEDA
You have the right to:
- Access the personal information we hold about you.
- Request correction of inaccurate or incomplete information.
- Request deletion of personal information, subject to legal and contractual retention requirements.
- Withdraw consent for future processing, subject to legal exceptions.
To exercise these rights, contact us using the details below.
7. Security
We use reasonable administrative, technical, and physical safeguards to protect personal information. No method of internet transmission or electronic storage is 100% secure, so we cannot guarantee absolute security.
8. Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
9. Changes to this Policy
We may update this Privacy Policy from time to time. We will indicate the date of the most recent revision above.
10. Contact
For privacy questions or to exercise the rights above, contact:
Alfano Technologies Inc. — Privacy Officer
1437 King Street East, Hamilton, Ontario L8M 1H7
Email: frank@exhibitamedia.ca