Privacy policy

What we collect, and why

We collect the minimum personal information needed to do what you ask of us. Our forms collect your name, business and contact details, plus the business information you choose to share (location, type of business, what you want funding for, and your timing). Each form states its purpose at the point of collection. We do not collect social insurance numbers, banking details or tax documents through this website.

Consent

We rely on two consent bases, depending on how you reach us. When you ask us to check which funding fits your business or send you a list of matching programs, that request is our basis under Canada's anti-spam legislation (CASL) for following up about it for a limited period after your request; we keep evidence of the request (timestamp, form, page). When you subscribe to program-deadline alerts, you're asking to receive those alerts until you unsubscribe, and that's how we keep you posted about a program over time. Every email identifies BBN Labs Inc. and includes a working unsubscribe that takes effect promptly and stops these messages.

How your information is used

To respond to enquiries, screen the funding opportunities you've asked about, send you the list of programs you asked for, and follow up on your request, including deadline alerts. We do not sell personal information, and we share it only with the service providers named below (email delivery, hosting and analytics), each only for what it needs to do its job.

Storage and protection

Lead and subscription data is stored server-side in our systems with access limited to the people who need it. We apply security controls including encrypted transport (HTTPS), access restrictions, rate limiting and server-side validation. Analytics, where enabled, is configured to minimize personal data.

Cookies and analytics

We use a small number of cookies to make the site work and, where enabled, Google Analytics 4 to understand which pages actually help business owners: pages visited, approximate region and device type, not your name. You can refuse or delete cookies in your browser settings, and you can opt out of Google Analytics using Google's browser add-on. We don't run advertising trackers and we don't sell analytics data.

We also keep our own simple count of how the site is used: which pages are viewed, how far down a page is scrolled, how long it stays open, and which buttons and links are clicked. It records the page, the button or link, and the kind of device (phone, tablet or computer). It does not record your name, your IP address or anything you type, and it uses no cookie. If you finish the funding check, your browser keeps a copy of your matches for 30 days so you can open them again; that copy stays on your device.

Where your information is processed

Some providers we rely on (email delivery, analytics and hosting) may process data outside your province or outside Canada. We use reputable providers that are bound to protect your information, and we share only what each one needs to do its job.

Retention and deletion

We keep enquiry and lead records only as long as needed to help you and meet our legal obligations, normally no more than 24 months after our last contact, then we delete them. Consent records are kept for the period Canada's anti-spam law requires. You may ask us at any time to access the personal information we hold about you, correct it, export it, or delete it where the law allows. Unsubscribing stops marketing immediately while preserving the consent record the law requires us to keep.

Children, and telling you about a breach

Our services are for businesses and are not directed at children; we don't knowingly collect personal information from minors. If a privacy breach ever creates a real risk of significant harm, we'll notify the people affected and the Office of the Privacy Commissioner of Canada, as the law requires.

If you're in Quebec, Alberta or B.C.

Those provinces have their own private-sector privacy laws, most notably Quebec's Law 25, which is stricter than PIPEDA. If you're in one of them, that law applies to your information and we honour the rights it gives you: access, correction, deletion and, where applicable, data portability, extra protection (express consent) for sensitive information, and notice if an automated system is used to make a decision about you. Contact our Privacy Officer to exercise any of these.

Questions and requests

Our Privacy Officer handles privacy questions, access requests and complaints. Reach them through the contact page or at info@bbnlabs.ca. If you're unsatisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.

This policy describes our practices under PIPEDA and CASL in plain language; it is information, not legal advice.