Privacy Policy

Last Updated: June 21, 2025

1. Introduction and Scope

Aurdo Automation Inc. (“Aurdo,” “we,” “us,” or “our”) is committed to protecting the privacy of individuals who interact with us. This Privacy Policy (“Policy”) explains how we collect, use, disclose, and safeguard personal information.

This Policy applies to personal information we collect when you:

  • Visit our website, aurdo.ca (the “Website”);
  • Interact with us in a commercial capacity, such as by requesting information or becoming a client;
  • Use our automation platform and related services (collectively, the “Services”).

This Policy is designed to comply with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. It outlines our commitment to the ten fair information principles and details your privacy rights.

By accessing our Website or using our Services, you acknowledge that you have read and understood this Policy. This Policy does not apply to the data that our clients collect and process through our Services (“Client Data”). Our obligations with respect to Client Data are governed by our client service agreements and associated Data Processing Addenda.

2. Accountability and Contact

Aurdo is responsible for all personal information under our control and in our possession. If you have any questions about this Policy, our privacy practices, or wish to exercise your rights, you may contact us by email at info@aurdo.ca

3. What is Personal Information?

For the purposes of this Policy, “personal information” means any information about an identifiable individual. In the context of our business, this typically includes information about our clients’ employees, representatives, and other business contacts. It can include, but is not limited to, your name, professional title, business email address, business phone number, and technical information such as your IP address when you interact with our systems.

4. Personal Information We Collect

We collect personal information that is necessary to establish and maintain our relationship with you and to provide our Website and Services. The types of information we may collect include:

  • Professional Contact Information: Your name, job title, company, email address, phone number, and mailing address when you request information, register for a webinar, or communicate with us.
  • Account and User Information: If you or your organization creates an account for our Services, we collect information associated with that account, such as username, user role and permissions, and a hashed password.
  • Transaction and Billing Information: Details related to your organization’s purchases of our Services, including billing contact information and transaction history. Please note, we do not directly collect or store full payment card information. All payments are processed by our secure third-party payment processors.
  • Technical and Device Information: We automatically collect certain information when you visit our Website or use our Services, including your IP address, browser type and version, device type, operating system, referral source, and usage data such as pages viewed and features used. This information is collected through cookies and similar technologies.
  • Communications Data: We keep records of your correspondence with us, including emails, support requests, and feedback you provide.
  • Voluntarily Provided Information: Any other personal information you choose to provide to us, for example, in comments, reviews, or survey responses.

5. How and Why We Use Your Personal Information (Our Purposes and Legal Bases)

We are committed to transparency. We will only collect and use your personal information when we have a legitimate and lawful reason to do so. We identify the purposes for which we collect your information at or before the time of collection. Our primary purposes and legal bases for processing are:

  • To Provide and Manage Our Services: We use your Professional Contact Information, Account Information, and Transaction Information to fulfill our contractual obligations to your organization. This includes setting up your account, processing payments, delivering our Services, and providing customer support. (Legal Basis: Performance of a Contract)
  • To Operate and Improve Our Website and Services: We use Technical and Device Information to monitor the performance of our systems, analyze usage trends, and improve the functionality and user experience of our Website and Services. (Legal Basis: Legitimate Interest)
  • To Communicate With You: We use your Professional Contact Information to respond to your inquiries, send administrative information (such as updates to our terms or policies), and provide important service-related notices. (Legal Basis: Performance of a Contract; Legitimate Interest)
  • To Ensure Security and Prevent Fraud: We process Technical and Device Information and Account Information to protect the security and integrity of our systems, prevent unauthorized access, and detect and respond to security incidents or fraudulent activity. (Legal Basis: Legitimate Interest; Legal Obligation)
  • For Marketing and Promotional Purposes: With your express prior consent, we may use your Professional Contact Information to send you marketing communications about our products, services, and events. All such communications will comply with Canada’s Anti-Spam Legislation (CASL). You can withdraw your consent and opt-out of marketing communications at any time by using the “unsubscribe” link in our emails or by contacting our Privacy Officer. (Legal Basis: Consent)
  • To Comply with Legal Obligations: We may be required to use or disclose your personal information to comply with applicable laws, court orders, or other legal or regulatory processes. (Legal Basis: Legal Obligation)

6. Consent

We will obtain your meaningful consent for the collection, use, or disclosure of your personal information, except where otherwise permitted or required by law.

  • Implied Consent: In some cases, your consent may be implied through your actions, such as when you provide us with your contact information to receive a requested product or service. We will only rely on implied consent for non-sensitive information where the purpose of collection is reasonably obvious to you.
  • Express Consent: For any use of your information for purposes not directly related to the service you requested, such as for marketing communications, we will obtain your express, opt-in consent. As noted in Section 5, our marketing practices are designed to comply with CASL.
  • Withdrawing Your Consent: You may withdraw your consent at any time by contacting us at info@aurdo.ca, subject to legal or contractual restrictions and reasonable notice. For marketing communications, you may withdraw consent at any time by using the unsubscribe mechanism included in every message. Please note that withdrawing consent may impact our ability to provide you with certain services or information.

7. Disclosure and Transfer of Personal Information

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your personal information with third parties only in the circumstances described below.

  • Third-Party Service Providers (Subprocessors): We rely on third-party service providers to perform a variety of functions on our behalf, such as cloud hosting, payment processing, data analytics, and customer relationship management. We provide these service providers with only the information necessary to perform their designated functions and contractually require them to maintain the confidentiality and security of your information and to use it only in accordance with our instructions and this Policy.
  • Business Transactions: In the event of a proposed or completed merger, acquisition, sale of assets, or other business transaction, your personal information may be transferred to the acquiring or successor entity. We will use reasonable efforts to notify you of any such transaction.
  • Legal and Regulatory Requirements: We may disclose your personal information if we have a good faith belief that such disclosure is required by law, in response to a subpoena or court order, or to protect our rights, property, or safety, or the rights, property, or safety of others.
  • With Your Consent: We may disclose your personal information to other third parties with your explicit consent.

International Data Transfers: Our operations are based in Canada. However, some of our third-party service providers may be located in other countries, including the United States. As a result, your personal information may be stored, processed, and transferred outside of Canada. When this occurs, your information will be subject to the laws of that jurisdiction, including laws that may permit law enforcement and national security authorities to access your information. We take steps to ensure that any international transfer of information is subject to appropriate safeguards and in compliance with applicable privacy laws.

8. Cookies and Similar Technologies

We use cookies and similar tracking technologies (such as web beacons and pixels) to operate and improve our Website and Services. A cookie is a small text file that a website stores on your computer or mobile device when you visit the site.

We use cookies for the following purposes:

  • Strictly Necessary Cookies: These are essential for you to browse the Website and use its features, such as accessing secure areas of the site.
  • Performance and Analytics Cookies: These cookies collect information about how you use our Website, such as which pages you visit most often. This data helps us understand usage patterns and improve the Website’s performance.
  • Functionality Cookies: These are used to recognize you when you return to our Website and enable us to remember your preferences (such as your language or region).
  • Marketing Cookies: These cookies are used to track your Browse habits and deliver advertisements that may be of interest to you. We will only use these cookies with your prior consent.

You can control and/or delete cookies as you wish. Most web browsers allow you to manage your cookie preferences through their settings. However, if you block all cookies, you may not be able to access all or parts of our Website.

9. Data Retention and Security

We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, to meet our legal or contractual obligations, or for legitimate business purposes.

Our retention periods are determined based on the type of information and the purpose of collection. For example, we are required to retain financial and transactional records for several years for tax and accounting purposes. Contact information for active clients is retained for the duration of the business relationship.

When personal information is no longer required for its identified purpose or a legal requirement, we will take steps to securely destroy it or render it permanently anonymous in accordance with industry best practices.

Data Security We take the security of your personal information seriously and have implemented administrative, technical, and physical safeguards designed to protect it against unauthorized access, use, disclosure, alteration, or destruction. These safeguards are appropriate to the sensitivity of the information and include:

  • Encryption: We use industry-standard encryption protocols, including Transport Layer Security (TLS) for data in transit and AES-256 for data at rest.
  • Access Controls: Access to personal information is strictly limited to authorized personnel who have a legitimate business need to access it. We employ role-based access controls and the principle of least privilege.
  • Secure Infrastructure: Our Services are hosted in secure cloud environments provided by leading infrastructure partners that maintain internationally recognized security certifications (such as SOC 2 and ISO 27001).
  • Breach Response: We have implemented an incident response plan to promptly address any potential data breaches in accordance with our legal obligations under PIPEDA, which includes notifying affected individuals and the Privacy Commissioner of Canada where required.

While we take extensive measures to protect your information, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security.

10. Your Privacy Rights

Under Canadian privacy law, you have certain rights regarding the personal information we hold about you. You can exercise these rights by contacting us at info@aurdo.ca.

  • Right to Access: You have the right to request access to your personal information and to receive an account of how it has been used and to whom it has been disclosed. We will respond to your request within 30 days, subject to any legally permitted extensions.
  • Right to Correction (Rectification): You have the right to challenge the accuracy and completeness of your personal information and have it amended as appropriate. We will make the necessary corrections and, where applicable, notify any third parties to whom we have disclosed the incorrect information.
  • Right to Withdraw Consent: You have the right to withdraw your consent to our collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions.
  • Right to Erasure (Right to be Forgotten): You have the right to request the deletion of your personal information when it is no longer required for the purposes for which it was collected. Please note that this right is not absolute and may be subject to our own legal and contractual retention obligations.
  • Right to Challenge Compliance: You have the right to challenge our compliance with these principles by contacting us. We are committed to resolving any complaints or disputes regarding our privacy practices. If we are unable to resolve your concern, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada.

To protect your privacy, we may require you to provide sufficient information to verify your identity before processing your request.

11. Children’s Privacy

Our Website and Services are not intended for or directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under this age, we will take steps to delete such information promptly.

12. Links to Other Websites

Our Website may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We strongly advise you to review the privacy policy of every site you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date at the top. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.