Privacy Notice

Who is responsible for your information

Sobremesa Consulting is responsible for the personal information under its control.

The person responsible for Sobremesa Consulting’s privacy practices is:

Ricki Prestley

Founder and Principal Consultant

privacy@sobremesaconsulting.com

You may use this address to ask a privacy question, request access to your personal information, request a correction, withdraw consent where applicable, or raise a concern.

Information Sobremesa may collect

The information collected depends on how you interact with Sobremesa.

General inquiries

If you contact Sobremesa by email, the information collected may include your name and email address, the information you include in your message, and any other information you choose to provide.

Please do not send confidential, financial, medical, or other sensitive personal information unless Sobremesa has requested it and provided appropriate instructions.

Service inquiries

If you submit a service inquiry form, Sobremesa may collect your name and email address, province or territory, service or area of interest, a brief description of the support you are seeking, relevant timing considerations, how you heard about Sobremesa if you choose to provide it, and your consent to the collection and use of the submitted information.

Service inquiry forms do not accept file attachments. Please do not use them to send résumés, CVs, role documents, organizational documents, or sensitive information.

Client and business information

If you become a client, Sobremesa may collect additional information reasonably needed to assess, establish, manage, and complete the engagement. This may include contact and identification information; information about your goals, circumstances, experience, or organization; materials needed to provide the agreed service; scheduling and communication records; agreements, invoices, payment records, and transaction information; and feedback related to completing the engagement.

Sobremesa will explain what information is needed and how to provide it. The information collected will be limited to what is reasonably necessary for the service and related business requirements.

Sobremesa does not receive or store your online banking password or other banking credentials when payment is made by e-transfer.

Website and analytics information

The Sobremesa website is built and hosted using Squarespace. Squarespace and its integrated analytics tools may collect technical and usage information such as your Internet Protocol address, date and time of visit, browser or device information, general location information, pages visited, interactions with the website, and information collected through cookies or similar technologies.

This information helps Sobremesa understand how visitors use the website, assess its performance, and improve its content and usability.

How information is used

Sobremesa may use personal information to respond to questions and inquiries; understand the support someone is seeking; assess service fit, scope, timing, and availability; communicate about possible or confirmed services; prepare proposals, agreements, invoices, and client materials; provide and improve services; maintain business, financial, tax, and legal records; protect security and integrity; understand website use; and meet legal obligations.

Sobremesa will not use personal information for a new purpose without obtaining consent when consent is required.

Consent to respond to an inquiry is not consent to receive newsletters or promotional email. Sobremesa will seek separate consent before sending marketing communications that require it.

Consent and your choices

Sobremesa seeks meaningful consent for the collection, use, and disclosure of personal information when required.

You may withdraw your consent by emailing privacy@sobremesaconsulting.com, subject to legal, contractual, or reasonable notice requirements. Withdrawing consent may limit Sobremesa’s ability to respond to an inquiry or provide a service. Withdrawal does not affect information already handled with valid consent.

Cookies and website analytics

The Sobremesa website uses cookies and similar technologies to support website functions and analytics.

Where required, the website will provide choices to accept or decline optional tracking. If you decline, optional behavioural analytics should not load. Essential technologies required for security, continuity, or basic website operation may still be used.

You may also manage cookies through your browser settings. Blocking some cookies may affect how parts of the website function.

When information may be shared

Sobremesa does not sell or rent personal information.

Information may be shared only when reasonably necessary with service providers that support business operations, including Squarespace for the website, hosting, forms and analytics; Microsoft for Microsoft 365 email services; financial institutions involved in e-transfer payments; and professional advisers or other service providers when reasonably required and subject to appropriate confidentiality expectations.

Information may also be disclosed when required or permitted by law, to respond to a lawful request, to protect legal rights or safety, or in connection with a business reorganization or transfer.

Processing outside Canada

Squarespace, Microsoft, and their service providers may process or store information outside Canada, including in the United States.

When information is processed in another country, it may be subject to the laws of that country and may be accessible to courts, law-enforcement agencies, or government authorities in accordance with those laws.

Safeguards

Sobremesa uses reasonable administrative, technical, and organizational safeguards appropriate to the nature and sensitivity of the information. These may include limiting collection, restricting access, using password-protected accounts and available security features, using established service providers, avoiding sensitive files in public forms, and securely deleting or anonymizing information when it is no longer required.

No method of electronic communication or storage is completely secure. Sobremesa cannot guarantee absolute security, but will take reasonable steps to protect the information under its control.

Retention

Sobremesa keeps personal information only as long as reasonably necessary for the purposes for which it was collected and for applicable legal, business, tax, or recordkeeping requirements.

An inquiry that does not become a client engagement will generally be retained for up to 12 months after the last communication, then securely deleted unless there is a legal or reasonable business need to retain it longer.

Client, agreement, transaction, invoice, and tax records may be retained for longer periods according to applicable legal and business requirements.

Accessing or correcting your information

You may ask to access the personal information Sobremesa holds about you or request that inaccurate or incomplete information be corrected.

Send your request to privacy@sobremesaconsulting.com. Sobremesa may need to verify your identity before responding. Access may be limited where permitted or required by law.

Privacy questions or concerns

Questions, requests, or concerns about Sobremesa’s privacy practices may be sent to Ricki Prestley, Founder and Principal Consultant, at privacy@sobremesaconsulting.com.

Sobremesa will review and respond to privacy concerns in a reasonable manner. You may also have the right to contact the appropriate federal or provincial privacy commissioner.

Changes to this notice

Sobremesa may update this Privacy Notice as its services, systems, or legal obligations change. The current version will be posted on the website with its effective or updated date.