Omnifys Consulting Inc.

Last updated: 20 July 2026

Omnifys Consulting Inc., company registered in Toronto, Canada.

We are accountable for the personal information under our control. This policy explains what we collect, why we collect it, who we share it with, how long we keep it, and the rights you have under Canadian privacy law — principally the Personal Information Protection and Electronic Documents Act (PIPEDA).

For further details please review sections below

1. Personal information we collect

We collect only what we need for the purposes described below.

Information you give us

Identity and contact details — name, business email, phone number, company name, job title, country
Consultation and enquiry details — what you tell us about your business, requirements and timelines
Course and account information — registration details, enrolment records, course progress and completion
Transaction information — billing name and address, order history, invoices. Card details are entered directly with our payment processor and are never stored on our servers
Support and correspondence — messages, tickets and call notes

Information collected automatically

Device and usage data — IP address, browser type, pages viewed, referring URL, timestamps
Cookies and similar technologies (see Section below)

Information from other sources

Business contact information from public sources and referral partners, where permitted by law

We do not knowingly collect sensitive personal information (such as health or financial account details) unless it is necessary for a service you have specifically requested, and we obtain your express consent first.

2. Why we collect it — our identified purposes

We collect, use and disclose personal information only for purposes a reasonable person would consider appropriate:

To respond to your enquiries and provide consultations, quotes and proposals
To deliver, support and improve our AI agents, SaaS tools, consulting and training services
To register and administer course enrolments, issue certificates and track progress
To process transactions, issue invoices and maintain financial records
To communicate service updates, security notices and administrative messages
To send marketing communications where you have consented (see Section 5)
To secure our systems, prevent fraud and troubleshoot problems
To meet legal, regulatory, tax and audit obligations

If we ever wish to use your personal information for a new purpose, we will identify that purpose and obtain your consent first, unless the law permits otherwise.

3. How we use artificial intelligence

Our services are built on artificial intelligence, so we want to be clear about how this affects your information:

We route processing across multiple large language model providers. Content you submit may be transmitted to these providers to generate a response
We contract with providers on terms that prohibit the use of your content to train their public models
We do not use your confidential business data to train models for other customers
Automated processing supports our services, but we do not make decisions producing legal or similarly significant effects about you based solely on automated processing without human involvement
Where an AI agent operates on your own systems under a client engagement, the terms of that engagement govern, and we act as a service provider processing data on your instructions

4. Consent, and your right to withdraw it

We obtain consent before collecting, using or disclosing personal information, except where the law allows otherwise. Consent may be express (for example, ticking a box to receive marketing) or implied (for example, providing your email so we can reply to your enquiry).

Commercial electronic messages (CASL). We send commercial electronic messages only with your express or implied consent as defined in Canada’s Anti-Spam Legislation. Every message identifies us, provides our contact information, and includes an unsubscribe mechanism. We action unsubscribe requests without delay and in any event within 10 business days.

Withdrawing consent. You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice. Contact privacy@omnifys.com. Withdrawing consent may mean we can no longer provide certain services to you.

5. Disclosure to third parties

We do not sell personal information. We share it only as follows:

Service providers who process information on our behalf — hosting, customer relationship management, payment processing, email delivery, analytics and AI model providers — bound by contract to use it only for our purposes and to protect it appropriately
Professional advisers such as auditors and lawyers, where necessary
Legal and regulatory disclosure where required by law, court order or lawful government request, or to establish or defend legal claims
Business transactions — in connection with a merger, acquisition or sale of assets, subject to appropriate safeguards and notice

A current list of the categories of service providers we use is available on request from privacy@omnifys.com.

6. Transfers outside Canada

Please note: some of our service providers store or process personal information outside Canada, including in the United States, the European Union and other jurisdictions.

While personal information is located in another country, it is subject to the laws of that country, and may be accessible to the courts, law enforcement and national security authorities of that jurisdiction. We remain accountable for information transferred to a third party for processing, and we use contractual and other means to provide a comparable level of protection.

If you would like more information about our policies and practices regarding service providers outside Canada, contact our Privacy Officer.

7. Safeguards

We protect personal information with safeguards appropriate to its sensitivity, including:

Encryption in transit (TLS) and at rest where appropriate
Role-based access controls and least-privilege access
Multi-factor authentication on administrative systems
Network protection, monitoring and logging
Vendor security assessment before engagement
Staff confidentiality obligations and privacy training
Secure disposal of records at end of life

No method of transmission or storage is completely secure, but we work to protect your information and to respond promptly if an issue arises.

8. Retention and accuracy

We keep personal information only as long as necessary for the purposes it was collected, or as required by law:

Enquiry and consultation records — 24 months from last contact
Client and contract records — 7 years after the engagement ends
Course enrolment and certification records — 7 years
Financial and tax records — 7 years, per CRA requirements
Website analytics — 26 months
Marketing subscriber records — until you unsubscribe, plus 3 years

We keep personal information as accurate, complete and up to date as necessary. You can ask us to correct anything that is wrong.

9. Cookies and analytics

We use essential cookies to operate the site and analytics cookies to understand how it is used. Our cookie banner lets you accept analytics cookies or continue with essential cookies only, and you can change that choice at any time by clearing your browser storage for this site. Most browsers also let you refuse or delete cookies directly.

We do not use cookies for cross-context behavioural advertising.

10. Your rights

Under PIPEDA and applicable provincial law, you have the right to:

Access the personal information we hold about you, and be told how it has been used and to whom it has been disclosed
Correct information that is inaccurate or incomplete
Withdraw consent, subject to legal or contractual restrictions
Challenge our compliance with this policy
Request deletion of information we no longer need for a legal or business purpose

To exercise any of these rights, email privacy@omnifys.com. We will respond within 30 business days. If we need more time, we will tell you why and when to expect our response. We may ask you to verify your identity before we act. Access is provided at little or no cost; if a fee would apply, we will tell you in advance and you may withdraw your request.

In limited circumstances the law requires or permits us to refuse access — for example, where doing so would reveal personal information about another individual or is subject to solicitor-client privilege. If we refuse, we will explain why and tell you how to challenge that decision.

11. Privacy breaches

We maintain procedures to contain, assess and report privacy breaches. Where a breach of security safeguards creates a real risk of significant harm to an individual, we will report it to the Office of the Privacy Commissioner of Canada and notify affected individuals as soon as feasible, and we will keep records of breaches as PIPEDA requires.

12. Provincial and international laws

Residents of Alberta, British Columbia and Quebec are covered by substantially similar provincial legislation, and this policy is intended to meet those standards
Where Quebec’s Law 25 applies, additional rights may be available, including data portability and rights concerning automated decision-making
Where we serve clients in the United States, Middle East, Australia or Asia Pacific, we apply this policy as our baseline and comply with additional local requirements where they apply

13. Children

Our services are directed at businesses and professionals. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact privacy@omnifys.com and we will delete it.

14. Changes to this policy

We may update this policy from time to time. The “last updated” date above shows the most recent revision. If changes are significant, we will provide notice through the site or by email. Continued use of our services after the effective date means you accept the revised policy.

15. Contact us for privacy matters

Privacy Contact — Omnifys Email: privacy@omnifys.com Canada: canada@omnifys.com