Privacy Policy

Ellyanna Business Services Inc. is an Ontario corporation located in Ottawa, Ontario, Canada. This policy applies to personal information under our control that is collected through services.ellyanna.com, consultation inquiries, and the delivery of agreed business services.

Effective date and last updated: July 15, 2026.

When you submit a consultation request, we collect the information you choose to provide, such as your name, business name, email address, optional telephone number, province, preferred language, business type, number of locations and workers, stage of business, service interests, and a description of your main concern.

Our infrastructure may also process limited technical information needed to deliver and secure the website, such as request timing, network and browser metadata, security signals, and a request identifier. We do not use this website for advertising profiles or behavioural tracking.

Do not submit tax returns, bank statements, payroll files, government credentials, identity documents, corporate keys, or other sensitive records through the public consultation form.

We use information to receive and respond to inquiries, assess whether our services may be suitable, communicate in your preferred language, prepare or administer a requested engagement, deliver agreed services, maintain business and financial records, protect the website, prevent misuse, troubleshoot delivery failures, and comply with legal or professional obligations.

Consent to the consultation form authorizes us to contact you about that request. It does not subscribe you to promotional or newsletter email. If marketing communications are introduced, they will use a separate consent and unsubscribe process where required.

We seek meaningful consent at or before collection unless the law permits or requires otherwise. You may choose not to provide optional information, withdraw consent for future use where legally available, or ask us to stop contacting you. Withdrawal does not affect processing already completed and may limit our ability to provide a requested service.

Our primary website infrastructure and form-processing resources are configured in Amazon Web Services’ Canadian region. We may use vetted hosting, email, communications, security, software, storage, and professional service providers to operate the business.

Some providers, personnel, support functions, or systems may process or access information from another province or country. Information handled elsewhere may be subject to the laws and lawful-access requirements of that jurisdiction. We remain accountable for personal information under our control and use contractual, technical, and organizational measures appropriate to the information and service.

We do not sell personal information. We may share only what is reasonably necessary with authorized personnel and service providers, independent professionals you ask us to coordinate with, a successor in a legitimate business transaction subject to appropriate safeguards, or government, regulatory, law-enforcement, or legal authorities when required or permitted by law.

We keep identifiable information only as long as reasonably necessary for the stated purposes, an engagement, a legal or professional requirement, a dispute, or a documented legal hold. We then securely delete, destroy, or anonymize it. Our general retention schedule is:

• Consultation inquiries that do not become clients: 12 months after the last communication
• Active-client information: for the engagement and generally seven years after the relevant engagement or fiscal period ends
• Undelivered form messages: up to four days; failed messages: up to fourteen days
• Privacy-minimized operational logs: 30 days; expired website storage versions: approximately 60 days
• Dispute, investigation, legal-hold, or permanent corporate records: as long as reasonably or legally required
• Anonymized information that can no longer identify an individual: may be retained for legitimate business analysis

We use safeguards proportionate to the sensitivity and amount of information, including access restrictions, private cloud storage, encryption in transit and at rest where supported, limited operational logging, message-delivery controls, software maintenance, and staff or provider confidentiality obligations. No internet transmission or storage system can be guaranteed completely secure.

Subject to applicable law and limited exceptions, you may ask whether we hold personal information about you, request access or correction, ask about its use and disclosure, withdraw consent for future processing, request deletion where available, or challenge our compliance. We may need to verify your identity before fulfilling a request.

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or the applicable provincial privacy authority, including Québec’s Commission d’accès à l’information where appropriate.

Our services are intended for business owners and authorized business representatives, not children. We do not knowingly solicit personal information from children through this website. Links to external websites are governed by those organizations’ practices, not this policy.

We may update this policy as our services, providers, or legal obligations change. Material changes will be posted here with a revised date and any additional notice or consent required by law.

For an access or correction request, a complaint, or another privacy question, contact: Privacy Officer, Ellyanna Business Services Inc., Ottawa, Ontario, Canada — info@ellyanna.com. The Privacy Officer’s role is published without an individual’s name to provide a stable contact while respecting personal privacy.