Privacy policy

NDB Innovations Inc. ("NDB Innovations," "we," "us," or "our") operates the website located at ndbinnovations.ca (the "Site"). This Privacy Policy explains what personal information we collect through the Site, how we use and store it, who we share it with, and the choices and rights you have with respect to it.

The Site is directed at businesses and professional visitors. It is not directed at, and we do not knowingly collect personal information from, individuals under the age of 18.

This Policy is governed by the laws of the Province of Ontario and the federal laws of Canada applicable therein, including the Personal Information Protection and Electronic Documents Act (PIPEDA). By using the Site, you agree to the collection and use of information as described in this Policy.

Last updated: September 18, 2026

Information We Collect

Information you provide directly. When you submit our contact form at ndbinnovations.ca/contact, we collect:

• Name
• Email address
• Phone number
• Company name
• The message you send us

Information collected automatically. The Site runs on Cloudflare, which incidentally processes limited technical information about your visit as part of its infrastructure and security services, including your IP address, browser/device signals, and general geographic location (derived from your IP address). See "Cloudflare Services" below for details on Web Analytics, Turnstile, and Bot Management. We do not use this technical information to build a profile of you and it is not linked to your contact form submission unless you provide that information yourself.

We do not collect payment information, government identification, or any special categories of personal information through the Site.

How We Use Your Information

We use the personal information collected through the contact form to:

• Respond to your inquiry and communicate with you
• Maintain an internal record of business inquiries and client/prospect relationships
• Detect, prevent, and investigate spam, abuse, or fraudulent submissions
• Meet our legal and regulatory obligations

We do not use your contact form submission to send you marketing or promotional emails at this time.

How We Store and Share Your Information

Storage. Contact form submissions are stored securely in our website's backend infrastructure.

HubSpot CRM. Contact form submissions are also passed to HubSpot, Inc., which we use as our internal customer relationship management (CRM) system. HubSpot stores this information on our behalf so our team can track and follow up on inquiries. We do not use HubSpot's website tracking scripts or cookies, and we do not send marketing emails through HubSpot.

We do not sell, rent, or share your personal information with third parties for their own marketing purposes.

We may disclose personal information where required to do so by law, court order, or governmental regulation, or where we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Cross-Border Data Transfer

Some of our service providers, including HubSpot and Cloudflare, store or process data on servers located outside of Canada, including in the United States. As a result, your personal information may be accessed by courts, law enforcement, and regulatory agencies in those jurisdictions under their applicable laws.

By submitting information through the Site, you acknowledge that it may be transferred to and processed in a country other than Canada. We take reasonable steps to ensure our third-party service providers maintain privacy and security protections consistent with this Policy and applicable Canadian law.

Cloudflare Services

The Site is hosted on Cloudflare Workers and uses several Cloudflare products to operate securely:

• Cloudflare Web Analytics (Real User Measurements). We use Cloudflare's cookieless analytics service to measure aggregate site traffic (e.g., page views and visit counts). This service does not use cookies or persistent identifiers, does not track you across other websites, and does not build an individual profile of you. We configure it to exclude visitors located in the European Union.
• Cloudflare Turnstile. We use Turnstile to distinguish human visitors from bots on our contact form, helping prevent spam and abuse. Turnstile evaluates signals such as your browser and device characteristics; it does not require you to solve a puzzle and does not set tracking cookies used for advertising.
• Cloudflare Bot Management. Cloudflare analyzes request patterns and technical signals (such as IP address and request headers) at the network level to detect and mitigate automated or malicious traffic to the Site.
• Data storage infrastructure. We use Cloudflare's storage infrastructure to store website content and contact form submissions securely, as described above. This infrastructure functions as our service provider, not as a separate party that receives your information for its own purposes.
• IP-based geolocation. We use your IP address, processed by Cloudflare, to determine your general location for the purpose of excluding EU visitors from Web Analytics measurement.

Cloudflare acts as our infrastructure and service provider (data processor) for these services. For more information, see Cloudflare's Privacy Policy.

Cookies and Tracking

The Site does not use cookies to track visitors. Cloudflare Web Analytics is cookieless, and we do not use any other third-party tracking or advertising cookies on the Site.

Data Retention

We retain contact form submissions for as long as necessary to respond to and resolve your inquiry. Once an inquiry is resolved, we delete the associated message shortly thereafter from both our website database and HubSpot, unless we are required to retain it longer to comply with a legal obligation, resolve a dispute, or enforce our agreements.

Children's Privacy

The Site is directed at businesses and is not intended for use by children. We do not knowingly collect personal information from anyone under the age of 18. If you believe a child has provided us with personal information, please contact us using the details below and we will delete it.

Your Rights Under PIPEDA

Under Canadian privacy law, you have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Withdraw your consent to our collection, use, or disclosure of your information, subject to legal or contractual restrictions
• Ask us to delete your personal information, subject to our retention obligations

To exercise any of these rights, contact us using the details in the "Contact Us" section below. We will respond within a reasonable time.

If you have concerns about how we handle your personal information that we have not resolved to your satisfaction, you may file a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our use of third-party services, or legal requirements. We will revise the "Last updated" date at the top of this Policy when we do. We encourage you to review this Policy periodically.

Contact Us

If you have questions about this Privacy Policy or how we handle your personal information, contact us by email at hello@ndbinnovations.ca, or by mail at NDB Innovations Inc. 56A Mill St E, Unit #321 Acton, ON L7J 1H3, Canada.