Privacy Policy

Change Reactor ("we," "us," "our") is an Identity Lab based in Calgary, Alberta, Canada. This Privacy Policy explains how we collect, use, store, disclose, and protect personal information in compliance with:

• PIPEDA (Personal Information Protection and Electronic Documents Act, Canada).
• Alberta PIPA (Personal Information Protection Act).
• Canada's Anti-Spam Legislation (CASL) where applicable.

This Policy applies to all visitors, subscribers, and clients interacting with our website, services, emails, programs, and digital products.

Our website uses:

• Google Analytics (usage patterns, page visits).
• Cookies (session management, preferences).
• Meta Pixel / Facebook Pixel (if installed, will be disclosed at time of implementation).
• Webflow Analytics (hosting platform analytics).

Consent

We display a cookie consent banner on our first visit. You may accept or decline non-essential cookies. Essential cookies (security, functionality) cannot be disabled. You can adjust browser settings to block cookies, though some website features may not function properly.

We implement reasonable administrative, technical, and organizational safeguards:

• Access Controls: Password protected systems; access limited to founder and essential contractors.
• Authentication: Multi factor authentication (2FA) enforced on all accounts.
• Encryption: Data encrypted in transit (TLS 1.2+) and at rest (AES-256) where available.
• Vendor Review: Regular review of what information is shared with service providers and AI tools.
• Staff Training: Contractors bound by confidentiality and data handling requirements.
• Incident Response: Documented breach response plan.

Important: No method of online transmission or electronic storage is completely secure. While we do our best, we cannot guarantee absolute security.

In the event of unauthorized access, disclosure, or loss of personal information:

• We will investigate the breach promptly.
• We will notify affected individuals within 72 hours of discovery where there is a real risk of significant harm.
• We will report to the Office of the Privacy Commissioner of Canada (OPC) and/or Alberta OIPC as required by law.
• We will take reasonable steps to mitigate harm and prevent recurrence.

We retain personal information only as long as reasonably necessary. You may request deletion earlier, subject to legal, tax, accounting, or contractual obligations that require retention.

Depending on applicable privacy law, you have the right to:

• Access: Request a copy of personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information (subject to legal retention requirements).
• Withdraw Consent: Withdraw consent for marketing emails or optional data uses.
• Object: Object to certain processing activities.
• Portability: Request your data in a portable format where feasible.
• Questions: Ask about our use of recordings, transcripts, AI tools, or de-identified analysis.

How to Exercise Your Rights

To exercise these rights, contact our Privacy Contact:

• Email: rumi@changereactor.com
• Response Time: Within 30 days of verified request.
• Verification: We may need to verify your identity before processing certain requests.

Note: Withdrawing consent may affect our ability to provide certain services.

Our services are intended for adults (18+). We do not knowingly collect personal information from children. If we become aware that a child has submitted personal information, we will take steps to delete it promptly.

Our website may contain links to third party sites. We are not responsible for their privacy practices, content, or security. Please review their policies before submitting personal information.

If you access our services from outside Canada, you understand that your information may be collected, processed, transferred, or stored in Canada, the United States, or other jurisdictions where our third-party providers operate. Privacy laws in those jurisdictions may differ from your own. By using our website, you consent to this transfer.

We may update this Privacy Policy to reflect changes in our business, services, technology, or legal obligations. The updated version will be posted on this page with a revised "Last Updated" date. Material changes will be notified via email to active clients/subscribers. Continued use after changes constitutes acceptance.