Privacy Policy

1. Who We Are

This Privacy Policy describes how José Cabal Consulting ("we", "us", or "our"), operating at josecabal.com, collects, uses, and discloses personal information. We are based in Vancouver, British Columbia, Canada, and operate in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

Questions or concerns? Contact us at [email protected] or by phone at +1 604 655 7801.

2. Information We Collect

We collect personal information only when you actively provide it to us or when it is generated through your use of our website:

• Contact form submissions: name, email address, company name, phone number, and the content of your message.
• Consultation booking requests: same fields as above, plus preferred time and project details you choose to share.
• Email correspondence: messages you send directly to [email protected].
• Usage data: once analytics is implemented, we may collect page views, referral sources, session duration, and device type using Google Analytics 4 (GA4). This data is aggregated and anonymized.

We do not sell, rent, or broker your personal information to any third party.

3. How We Use Your Information

We use the personal information you provide to:

• Respond to your inquiries and consultation requests
• Deliver services you have engaged us to provide
• Send follow-up communications related to an active engagement
• Improve the content and performance of josecabal.com
• Comply with applicable legal obligations

We do not add you to any marketing list without your explicit consent. If you request to be added to a newsletter or update list, you may unsubscribe at any time by replying "unsubscribe" or emailing us directly.

4. Legal Basis for Processing

Under PIPEDA, we collect and use personal information with your knowledge and consent (expressed or implied), except where the law permits or requires otherwise. By submitting a contact form or booking request, you consent to us using the information you provide to respond to your inquiry.

5. Data Storage and Security

Contact form submissions are stored in a Supabase database hosted on servers in the United States (managed by Supabase Inc., a U.S.-based company). By submitting a form, you acknowledge that your data may be stored outside Canada. We select service providers that maintain appropriate security standards, including encryption at rest and in transit.

The website itself is hosted on Vercel (Vercel Inc., U.S.) using TLS (HTTPS). No payment card data is ever collected or stored on this site.

We retain contact inquiry data for up to 24 months from the date of last contact, after which it is deleted, unless an ongoing engagement requires longer retention.

6. Cookies and Tracking

josecabal.com currently uses no tracking cookies and does not deploy any cookie consent banner, because no cookie-based analytics or advertising technology is active. If this changes (e.g., when Google Analytics 4 is activated), this policy will be updated and a consent mechanism added.

Session storage may be used by the React application for UI state only; it is never transmitted to a server.

7. Third-Party Services

Our website uses the following third-party services, each with their own privacy policies:

• Supabase (form data storage) — supabase.com/privacy
• Vercel (website hosting and edge delivery) — vercel.com/legal/privacy-policy

8. Your Rights

Under PIPEDA, you have the right to:

• Access: request a copy of the personal information we hold about you
• Correction: request that we correct inaccurate personal information
• Withdrawal of consent: withdraw your consent for us to use your information at any time (subject to legal or contractual restrictions)
• Deletion: request deletion of your personal information from our systems

To exercise any of these rights, email [email protected] with your request. We will respond within 30 days.

9. Children's Privacy

Our services are intended for business professionals and are not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has submitted information through this site, contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of josecabal.com after a policy update constitutes acceptance of the revised policy.

11. Contact

If you are not satisfied with our response to a privacy concern, you may contact the Office of the Privacy Commissioner of Canada.