Book a Call
Book a Call
  1. Home
  2. Privacy Policy

Privacy Policy

Privacy Policy

Effective Date: August 31, 2026
www.aedval.com (the “Site”) is owned and operated by Aedval Canada Ltd. (“Aedval,” “we,” “us,” or “our”). Aedval Canada Ltd. is the organization responsible for the personal information collected through the Site and can be contacted at:

Aedval Canada Ltd.
3055 Boulevard St-Martin Ouest, Suite T500, H7T 0J3
Email: info@aedval.com

1. Purpose

The purpose of this Privacy Policy is to inform users of our Site (“you”) of the following:

  1. The personal information we collect;
  2. How we use the personal information we collect;
  3. Who has access to the personal information we collect;
  4. Your rights with respect to your personal information; and
  5. Our Site’s cookie practices.

This Privacy Policy applies in addition to the terms and conditions of our Site. It applies to all users of our Site regardless of where they are located: it sets out specific statutory requirements that apply to users in Canada (including Quebec) and the United Kingdom, and a general baseline of protection, described in Section 2.1, for users located anywhere else.

2. Laws We Comply With

Depending on where you are located, one or more of the following laws govern how we handle your personal information:

  • Canada (federal): the Personal Information Protection and Electronic Documents Act (“PIPEDA”) and any applicable provincial private-sector privacy legislation;
  • Quebec: the Act respecting the protection of personal information in the private sector, CQLR c P-39.1, as amended by the Act to modernize legislative provisions as regards the protection of personal information (“Law 25”); and
  • United Kingdom: the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, each as amended by the Data (Use and Access) Act 2025 (“DUAA”).

Where any of these laws impose a higher standard than another for a particular practice (for example, consent, breach notification, or individual rights), we apply the higher standard to the extent reasonably practicable, rather than maintaining different practices for different users.

2.1 Users Located Outside Canada, Quebec, and the United Kingdom

We designed this Privacy Policy with a general baseline in mind, not only the specific jurisdictions named above. If you are accessing our Site from a country other than Canada or the United Kingdom, we will still handle your personal information in accordance with the following principles, regardless of whether a specific privacy law in your location requires them:

  1. We will only collect personal information for identified purposes, with your knowledge and consent where required;
  2. We will limit our collection and use of personal information to what is reasonably necessary for those purposes;
  3. We will keep personal information accurate and secure, and will not retain it longer than necessary;
  4. We will not sell your personal information; and
  5. We will let you access, correct, or request deletion of your personal information, and raise any questions or concerns, in the same manner described in Section 16 (How to Exercise Your Rights).

If a mandatory law in your jurisdiction grants you rights that are additional to, or different from, those described in this Privacy Policy, we will honour that law to the extent it applies to us and to the processing in question.

3. Privacy Officer

In accordance with Law 25, Aedval has designated a person responsible for the protection of personal information (our “Privacy Officer”). Unless a delegation is otherwise indicated below, this responsibility rests with the person holding the highest authority within Aedval Canada Ltd.

You may reach our Privacy Officer at:
Title: Privacy Officer
Email: info@aedval.com

By using our Site, you acknowledge that you have read and understood this Privacy Policy.Where our legal basis for processing your personal information is your consent, that consent must be clear, freely given, informed, and given for specific purposes. Consent for the collection, use, or disclosure of sensitive personal information (if any is collected) will be express.

You may withdraw your consent at any time by notifying us at the email address above. Withdrawing your consent will not affect the lawfulness of processing carried out before you withdrew it, and may limit our ability to provide certain services to you.

Minors. In Quebec, if you are under 14 years of age, consent to the collection of your personal information must be given by a parent or legal guardian. In the United Kingdom, we do not knowingly offer information society services directly to, or collect personal information directly from, children under 13 without appropriate parental or guardian consent. Elsewhere, we do not knowingly collect personal information from children under 13 without such consent. See Section 15 (Children) for more detail.

We only collect and process personal information where we have a legal basis to do so, which may include:

  1. Your consent to processing for one or more specific purposes;
  2. Processing that is necessary to provide a product or service you have requested;
  3. Processing for purposes that a reasonable person would consider appropriate in the circumstances and that are not for purposes that outweigh your interests (as recognized under PIPEDA and Quebec private-sector privacy law); or
  4. Processing that is necessary for our legitimate interests, including a “recognised legitimate interest” (such as direct marketing to existing business contacts) under the UK GDPR as amended by the DUAA, provided those interests are not overridden by your rights and freedoms.

6. Personal Information We Collect

We only collect personal information that helps us achieve the purposes identified in this Privacy Policy, and we will not knowingly collect additional categories of personal information without notifying you.

6.1 Information You Provide to Us

We may collect the following information when you interact with certain features of our Site:

  1. First and last name;
  2. Email address;
  3. Phone number;
  4. Mailing or business address; and
  5. Company name and job title.

We collect this information through methods such as:

  • Filling out a contact or inquiry form; and
  • Using the Site’s chat functionality to ask questions.

6.2 Information Collected Automatically

When you visit our Site, we and our service providers may automatically collect certain technical information through cookies and similar technologies, including your IP address, browser type, device information, pages viewed, and the date, time, and duration of your visit. See Section 14 (Cookie Policy) for details.

7. How We Use Personal Information

We use the personal information we collect only for the purposes disclosed in this Privacy Policy or on the relevant pages of our Site, including to:

  1. Respond to inquiries submitted through our contact form or chat function;
  2. Communicate with potential and existing clients about our professional services;
  3. Operate, maintain, secure, and improve our Site; and
  4. Comply with our legal obligations.

We do not use automated decision-making that produces legal or similarly significant effects concerning you. If this changes, we will update this Privacy Policy and provide the additional disclosures and safeguards required under Law 25 and the UK GDPR, including your right to be informed of the decision, to know the personal information used to render it, and, where applicable, to have a human review the decision.

8. Who We Share Personal Information With

8.1 Our Personnel

We may disclose your personal information to employees, contractors, and agents of Aedval who reasonably need access to that information to fulfil the purposes set out in this Privacy Policy, and who are bound by confidentiality obligations.

8.2 Service Providers

We may share personal information with third-party service providers who perform services on our behalf (for example, IT hosting, email, and communications providers), under contractual terms that require them to protect your personal information and use it only for the purposes we specify.

8.3 Other Disclosures

We will not sell your personal information. We will not otherwise share your personal information with third parties except:

  1. Where required by law or legal process;
  2. Where required in connection with a legal proceeding;
  3. To establish, exercise, or defend our legal rights; and
  4. With actual or prospective buyers of our business, subject to appropriate confidentiality protections.

If you follow a hyperlink from our Site to another website, we are not responsible for, and have no control over, that third party’s privacy practices.

9. Cross-Border Data Transfers

Your personal information may be stored or processed outside of your province, territory, or country, including in Canada, the United States, or the United Kingdom, wherever Aedval or its service providers maintain facilities.

Before transferring personal information outside Quebec, we conduct an assessment to confirm that the information will receive a level of protection that is equivalent to that required under Quebec’s private-sector privacy law, taking into account the sensitivity of the information, the purposes for which it will be used, the protective measures in place, and the legal framework applicable in the destination jurisdiction.

For transfers of personal information out of the United Kingdom, we rely on legally recognized transfer mechanisms (such as an applicable adequacy decision, or standard contractual clauses together with the required transfer risk assessment confirming that protections are not materially lower than under the UK GDPR).

10. How Long We Retain Personal Information

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. If we retain your personal information for a period longer than the purpose for which it was collected would suggest, we will notify you of the reason.

11. How We Protect Personal Information

We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the personal information we hold, including encryption of data in transit and storage of data on servers in secure facilities. Access to personal information is limited to personnel who need it, and our personnel are bound by confidentiality obligations, the breach of which may result in disciplinary action up to and including termination.

No method of transmission or storage is completely secure. While we take reasonable precautions to protect your personal information, we cannot guarantee its absolute security.

12. Confidentiality Incidents (Data Breaches)

If we experience a confidentiality incident (a breach of security safeguards involving personal information) that presents a real risk of significant harm, we will:

  1. Notify the Commission d’accès à l’information du Québec (“CAI”), where the incident concerns Québec residents;
  2. Notify the Office of the Privacy Commissioner of Canada (“OPC”) and affected individuals, as required under PIPEDA;
  3. Notify the UK Information Commissioner’s Office (“ICO”) and affected individuals, where required under the UK GDPR; and
  4. Maintain an internal register of confidentiality incidents, as required under Law 25.

13. Your Rights

13.1 If You Are in Canada (Including Quebec)

Subject to certain exceptions provided by law, you have the right to:

  1. Be informed of the purposes for which your personal information is collected;
  2. Access the personal information we hold about you;
  3. Request correction of inaccurate or incomplete personal information;
  4. Withdraw your consent to the processing of your personal information;
  5. Request the cessation of dissemination of, or de-indexation of, your personal information in certain circumstances (Quebec residents);
  6. Receive your personal information in a structured, commonly used technological format, or have it transferred to another organization at your request, where technically feasible (Quebec residents); and
  7. Lodge a complaint with the applicable privacy regulator (see Section 17).

13.2 If You Are in the United Kingdom

Subject to certain exceptions, you have the right to:

  1. Be informed about how your personal information is used;
  2. Access your personal information;
  3. Have inaccurate personal information rectified;
  4. Have your personal information erased in certain circumstances;
  5. Restrict how we use your personal information;
  6. Receive your personal information in a portable format;
  7. Object to certain processing, including for direct marketing; and
  8. Complain to us directly, and/or to the Information Commissioner’s Office.

13.3 If You Are Located Elsewhere

Regardless of your location, you may contact us at any time to ask what personal information we hold about you, to request that we correct or delete it, to withdraw any consent you have given, or to object to a particular use, using the contact details in Section 16 (How to Exercise Your Rights). We will respond in accordance with the general principles described in Section 2.1, and with any mandatory law that applies to you.

A cookie is a small file stored on your device by a website to collect information about your browsing activity. We use the following categories of cookies on our Site:

  1. Strictly necessary cookies – required for the Site to function and cannot be switched off;
  2. Functional cookies – remember your preferences and selections between visits; and
  3. Analytical cookies – help us understand how visitors use the Site so we can improve its design and performance.

In accordance with Quebec’s Law 25 and the UK’s cookie rules (the Privacy and Electronic Communications Regulations, as they continue to apply alongside the UK GDPR and DUAA), we will not deploy non-essential cookies (functional or analytical) until you have given your consent through our cookie banner or preference tool. You may withdraw consent or change your cookie preferences at any time through that tool, or by adjusting your browser settings to notify you when cookies are used or to disable cookies entirely; disabling cookies may reduce the functionality of the Site.

15. Children

We do not knowingly collect personal information directly from children below the age at which they can provide their own consent under the law applicable to them (14 in Quebec; 13 in the United Kingdom; 13 elsewhere, absent a specific applicable rule). Where a parent or guardian’s consent is required, we will seek to obtain it before collecting a child’s personal information. If we learn that we have collected personal information from a child without the required consent, we will delete that information as soon as reasonably possible. A parent or guardian who believes we may have collected personal information from their child may contact our Privacy Officer using the details in Section 16.

16. How to Exercise Your Rights

To ask whether we hold your personal information, to request access to, correction of, or deletion of your personal information, to exercise your right to data portability, to withdraw consent, or to exercise any other right described in this Privacy Policy, please contact our Privacy Officer at:
Email: info@aedval.com
We will respond to your request within the time limits required by applicable law.

17. Opting Out of Marketing Communications

You may opt out of receiving marketing emails or newsletters from us at any time by clicking “unsubscribe” at the bottom of any such communication, or by contacting our Privacy Officer directly. Our marketing communications are sent in accordance with Canada’s Anti-Spam Legislation (“CASL”) and applicable UK marketing rules.

18. Complaints

If you have concerns about how we handle your personal information, we encourage you to contact our Privacy Officer first so that we can try to resolve the issue (see Section 16).
You also have the right to lodge a complaint directly with the applicable regulator:

  • Québec: Commission d’accès à l’information du Québec (CAI) – www.cai.gouv.qc.ca
  • Canada (federal): Office of the Privacy Commissioner of Canada (OPC) – www.priv.gc.ca
  • United Kingdom: Information Commissioner’s Office (ICO) – www.ico.org.uk

19. Governing Law

This Privacy Policy is governed by the laws of the Province of Quebec, Canada, and, to the extent applicable to a user’s location, by the privacy laws of Quebec and the United Kingdom described above.

20. Modifications

We may amend this Privacy Policy from time to time to maintain compliance with the law and to reflect changes to our data collection and use practices. When we do, we will update the “Effective Date” at the top of this Privacy Policy and, where the changes are material, we will take reasonable steps to notify you (which may include posting a notice on the Site or contacting you by email). We encourage you to review this Privacy Policy periodically.

21. Contact Information

If you have any questions, concerns, or complaints about this Privacy Policy or our handling of your personal information, please contact:
Aedval Canada Ltd.
Attn: Privacy Officer
Email: info@aedval.com