Privacy Policy

1. Introduction

VCK Business Lab ("VCK", "we", "us") is a virtual business support company based in Edmonton, Alberta, Canada, serving clients in Canada and internationally. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information in the course of operating our website and providing our services.

This policy is structured around the principles of Alberta's Personal Information Protection Act (PIPA). Where you are located outside Alberta, additional mandatory privacy laws of your jurisdiction may also apply, and nothing in this policy is intended to exclude rights that cannot legally be waived.

2. Personal Information We May Collect

• Contact information — name, email address, phone number, company name, country, and preferred contact method.
• Inquiry and quote information — the details you share in contact forms, quote requests, consultation bookings, and correspondence, including the type of support you are looking for.
• Client and project information — documents, instructions, project details, and other materials you provide so we can deliver services.
• Billing and payment information — invoice references, payment amounts, and transaction records. Card numbers are processed by our payment provider (Stripe) and are never stored on our servers.
• Website usage and technical information — such as pages visited, browser type, device, approximate location, and referring pages.

3. Cookies and Analytics

Our website uses a small number of cookies — for example, to remember your language preference — and may use privacy-conscious analytics to understand how the site is used. Please see our Cookie Policy for details and for how to control cookies through your browser settings.

4. Why We Collect Information

• To respond to inquiries and prepare quotes.
• To schedule and deliver consultations and services.
• To manage client relationships, projects, invoicing, and payments.
• To send service-related communications, such as booking confirmations and appointment reminders.
• To improve our website, services, and client experience.
• To meet legal, accounting, and record-keeping obligations.

5. Consent

By submitting an inquiry, booking a consultation, or engaging our services, you consent to the collection, use, and disclosure of your personal information as described in this policy. You may withdraw consent at any time by contacting us, subject to legal and contractual restrictions; withdrawing consent may limit our ability to provide services to you.

6. Use and Disclosure

We use personal information only for the purposes described above or for purposes compatible with them. We do not sell personal information. We disclose personal information only as needed to deliver our services, as described in this policy, or as required or permitted by law.

7. Service Providers and Subcontractors

We may work with trusted service providers and subcontractors (for example, translators, administrative specialists, or technical assistants) who assist in delivering your project. They are given access only to the information needed for their work and are expected to protect it under confidentiality obligations.

8. Cloud and Software Providers

We use reputable cloud and software providers for email, scheduling, file storage, project management, payment processing, and website hosting. Your information may be processed by these third-party technology providers on our behalf, under their own security and privacy practices.

9. International Data Processing

Because we operate virtually and serve clients internationally, your information may be processed by third-party technology providers and may be stored outside your province or country, including in the United States or other jurisdictions, where permitted by law. Information stored in another jurisdiction may be subject to the laws of that jurisdiction.

10. Information Security

We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information — including access controls, secure platforms, and confidentiality practices. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute data security.

11. Confidential Client Information

Client materials, business information, and project details are treated as confidential, used only to deliver your services, and shared only with the people and providers involved in your engagement, or as required by law.

12. Retention and Secure Deletion

We keep personal information only as long as needed for the purposes it was collected for, and to meet legal, accounting, or contractual requirements. When no longer needed, information is securely deleted or destroyed.

13. Access and Correction Requests

You may request access to your personal information, or ask us to correct it, by contacting us at the address below. We will respond within a reasonable time and in accordance with applicable law.

14. Privacy Complaints

If you have a concern about how we handle personal information, please contact us first so we can try to resolve it. If you are not satisfied, you may contact the Office of the Information and Privacy Commissioner of Alberta.

15. Security Incidents and Data Breaches

If a security incident creates a real risk of significant harm, we will notify affected individuals and the appropriate regulator as required by applicable law, and we will take reasonable steps to reduce the risk of harm.

16. Privacy Officer

The Privacy Officer is responsible for privacy questions, access and correction requests, complaints, and privacy incident response. You can reach the Privacy Officer at:

Privacy Officer, VCK Business Lab, Edmonton, Alberta, Canada — office@vckbusinesslab.com

17. Marketing Communications (CASL)

VCK Business Lab may send commercial electronic messages only where permitted by applicable law, including Canada's Anti-Spam Legislation (CASL). Where required, VCK obtains consent before sending promotional communications.

Commercial messages from VCK will identify VCK Business Lab, include valid contact information, and provide a working unsubscribe mechanism. You may withdraw your consent to receive marketing communications at any time, and unsubscribe requests are processed promptly and within the period required by law.

After an unsubscribe request, we may retain limited suppression information to help ensure you are not inadvertently added back to marketing lists.

18. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be posted on this page with its "Last Updated" date.

19. Privacy Contact

Privacy questions, access or correction requests, and complaints can be sent to office@vckbusinesslab.com. VCK Business Lab is based in Edmonton, Alberta, Canada.