Privacy Policy

Canada wide privacy notice for JS Digital Incorporated

Version Effective Date: August 14, 2026
Last Updated: August 14, 2026

Company: JS Digital Incorporated
Privacy Contact: info@jsdigital.ca

Our commitment

JS Digital provides technology services to clients across Canada. We collect and use personal information only for legitimate business and service purposes, apply safeguards proportionate to the sensitivity of the information, and respect privacy rights under the Canadian laws that apply to our activities.

Privacy at a glance

What we collect

Contact and business information, website and device data, billing records, communications, and information needed to deliver client projects.

Why we use it

To respond to enquiries, provide contracted services, manage accounts and billing, maintain security, improve operations, and meet legal obligations.

Do we sell personal information?

No. JS Digital does not sell or rent personal information for monetary consideration and does not operate as a data broker.

Can information leave Canada?

Yes, in some cases. Approved service providers or client selected systems may process information outside Canada, where it may be subject to the laws of the destination jurisdiction.

Your rights

Depending on the law that applies, you may request access, correction, withdrawal of consent, and other rights, including portability in Quebec where applicable.

How to contact us

Privacy Officer, JS Digital Incorporated
Nanaimo, British Columbia, Canada
Email: info@jsdigital.ca
Telephone: 250 797 4649

About this policy
Who we are and how to contact us
Our role when handling personal information
Personal information we collect
How we collect and use personal information
Consent and limiting collection
Client data and development environments
Artificial intelligence and automated systems
Cookies, analytics and website technologies
Service providers, disclosures and business transfers
Cross border processing
Security safeguards
Privacy and security incidents
Retention, deletion and anonymization
Your privacy rights and requests
Marketing communications and CASL
Children and sensitive information
Provincial terms, changes, complaints and contact

1. About this policy

JS Digital Incorporated (JS Digital, we, us, or our) respects the privacy of clients, prospective clients, website visitors, business contacts, contractors, users, and other individuals whose personal information we handle.

This Privacy Policy explains how we collect, use, disclose, store, protect, transfer, retain, and otherwise process personal information in connection with jsdigital.ca, our business operations, communications, consulting services, software development, cloud and data services, artificial intelligence services, automation, integrations, technical support, maintenance, and related professional services.

JS Digital is based in British Columbia and provides technology services to clients across Canada. Depending on the location and nature of an activity, our handling of personal information may be governed by the federal Personal Information Protection and Electronic Documents Act (PIPEDA), British Columbia’s Personal Information Protection Act, Alberta’s Personal Information Protection Act, Quebec’s Act respecting the protection of personal information in the private sector, and other applicable Canadian privacy laws. PIPEDA may also apply to personal information that crosses provincial or national borders in the course of commercial activities.

This Policy should be read together with applicable service agreements, statements of work, confidentiality agreements, data processing agreements, terms of service, and other contractual documents. Where a contract or applicable law imposes stricter requirements, JS Digital will follow the stricter requirement to the extent it applies.

2. Who we are and how to contact us

JS Digital Incorporated is a Canadian information technology consulting and software services company. Our work may include custom software development, web and mobile applications, application programming interfaces, systems integration, cloud architecture, data engineering, databases, artificial intelligence, workflow automation, technical support, software maintenance, infrastructure management, security hardening, monitoring, and performance optimization.

Privacy Officer

The Privacy Officer is responsible for receiving privacy questions, requests, and complaints and for supporting JS Digital’s privacy compliance program.

Privacy Officer: JS Digital Incorporated
Location: Nanaimo, British Columbia, Canada
Email: info@jsdigital.ca
Telephone: 250 797 4649
Request subject: Privacy Request

3. Our role when handling personal information

Information JS Digital controls

JS Digital generally determines the purposes for handling personal information relating to website visitors, prospective clients, enquiries, consultations, business contacts, vendors, contractors, billing contacts, marketing subscribers, and individuals who communicate directly with us.

Information processed for clients

During software development, cloud, data, integration, automation, artificial intelligence, maintenance, or technical support engagements, JS Digital may receive access to information controlled by a client. In these circumstances, we generally process the information on the client’s documented instructions and subject to the applicable agreement.

If your request concerns personal information that a JS Digital client controls, we may direct you to that client or assist the client in responding where required by law or contract.

Clients are responsible for ensuring that information they provide to JS Digital, or instruct us to process, has been collected and disclosed lawfully. JS Digital may decline instructions that we reasonably believe would require unlawful processing.

4. Personal information we collect

Personal information generally means information about an identifiable individual. The information we collect depends on how you interact with us and on the services we provide.

Information you provide directly

• Name, business name, job title, email address, telephone number, and business or mailing address.

• Project descriptions, service requirements, consultation requests, quotation requests, support requests, feedback, and correspondence.

• Account information, billing contacts, invoice information, payment status, transaction references, and tax information.

• Documents, files, technical information, and other information you choose to provide.

Website and technical information

• IP address, browser and device information, operating system, referring page, pages viewed, links clicked, timestamps, session information, and approximate region derived from an IP address.

• Website performance information, diagnostic information, error data, authentication events, security alerts, and other logs used to operate and protect our systems.

Client and project information

Depending on the engagement, client systems may expose JS Digital to user account information, application data, databases, application programming interface data, system logs, configuration files, source code, infrastructure information, support tickets, customer records, transaction information, analytics data, credentials, documents, and files. We limit access to information reasonably required for the service.

Payment information

Where a third party payment processor is used, payment card or banking information may be provided directly to that processor rather than stored by JS Digital. We do not intentionally collect or retain complete payment card information unless there is a legitimate need and appropriate controls are in place.

5. How we collect and use personal information

We collect personal information directly from individuals, from authorized representatives, from clients that engage us to process information, from service providers, and automatically through website and system technologies where permitted by law.

We may use personal information to:

• Operate, secure, maintain, and improve our website and business systems.

• Respond to enquiries, schedule consultations, assess requirements, prepare proposals, and provide quotations.

• Establish and manage client relationships and perform contracts.

• Design, build, test, deploy, integrate, maintain, and support software, cloud, data, automation, and artificial intelligence solutions.

• Administer accounts, invoices, payments, taxes, vendors, and business records.

• Communicate about projects, support issues, security matters, service changes, and other operational matters.

• Detect, investigate, and prevent fraud, abuse, security threats, and unauthorized activity.

• Perform analytics, capacity planning, quality assurance, and service improvement using information appropriate to the purpose.

• Establish, exercise, or defend legal rights and comply with legal, regulatory, contractual, and professional obligations.

We will not use personal information for a materially different purpose without appropriate authority, notice, or consent where required.

Aggregated, de identified, and anonymized information

Where permitted by law, we may create aggregated, de identified, or anonymized information for security analysis, statistical analysis, service improvement, capacity planning, research, and business analysis.

Where information has been lawfully anonymized so that an individual cannot reasonably be identified, it may no longer be treated as personal information under applicable law.

We do not intentionally attempt to identify individuals from properly anonymized information except where permitted by law for validation, security, or similar legitimate purposes.

6. Consent and limiting collection

Where consent is required, we seek consent that is appropriate to the nature, sensitivity, and reasonable expectations associated with the information. Consent may be express or implied where permitted by law. We seek express consent where the sensitivity of the information, the purpose, or applicable law requires it.

You may withdraw consent, subject to legal or contractual restrictions and reasonable notice. Withdrawal may affect our ability to provide a service that reasonably requires the information.

We collect only personal information reasonably necessary for identified and legitimate purposes. Our personnel and service providers are expected not to collect personal information merely because it might be useful later.

7. Client data and development environments

Technology engagements may require access to source code, repositories, databases, application programming interfaces, infrastructure, development and staging environments, deployment systems, system logs, credentials, or production systems.

JS Digital applies access and handling controls appropriate to the engagement and the sensitivity of the information.

Development and testing

We minimize the use of production personal information in development and testing. Where practical, we use test, synthetic, anonymized, masked, or pseudonymized data instead of production personal information.

Credentials and secrets

Where credentials are necessary to perform services, access should be limited to authorized personnel and handled using secure methods.

Passwords, application programming interface keys, private keys, database credentials, cloud credentials, tokens, and similar secrets should not be transmitted through unsecured channels where secure alternatives are available.

Credentials should be rotated or revoked when no longer required.

Client specific terms

A master services agreement, statement of work, confidentiality agreement, data processing agreement, or similar document may impose additional requirements concerning access, subprocessors, data location, breach notification, retention, return, deletion, or audit rights.

Those terms will apply to the extent stated in the agreement.

8. Artificial intelligence and automated systems

Some JS Digital services and client projects may involve machine learning models, large language models, artificial intelligence application programming interfaces, automation platforms, or other computational systems.

Client data and model training

JS Digital does not submit client confidential information or personal information to publicly accessible generative artificial intelligence services for provider model training except where the client has expressly authorized that processing and it is permitted by applicable law and contract.

Where personal information is used in an artificial intelligence workflow, we apply controls appropriate to the use case, which may include data minimization, purpose limitation, access restrictions, vendor assessment, retention controls, confidentiality protections, human review, and privacy risk assessment.

We do not train JS Digital owned models on client information unless our contract provides a clear right to do so and the processing is lawful.

Automated decisions

The general JS Digital website does not currently rely on decisions based exclusively on automated processing that produce legal or similarly significant effects for website visitors.

If JS Digital implements such a process, we will provide notices, explanations, and review opportunities required by applicable law.

Client projects that use automated decisions are governed by the roles and responsibilities agreed with the client and by the law that applies to the project.

9. Cookies, analytics and website technologies

Our website may use cookies, server logs, scripts, pixels, or similar technologies to operate the site, maintain security, remember preferences, diagnose issues, measure performance, and understand website usage.

Website technologies may include:

• Strictly necessary technologies used for core operation, security, forms, and network management.

• Functional technologies used to remember preferences and provide requested functionality.

• Analytics technologies used to understand traffic, performance, and interaction patterns.

• Marketing technologies, if introduced, used to measure campaigns or support advertising activities.

Where applicable law requires consent before nonessential technologies are activated, we will obtain the required consent.

You may also control many cookies through your browser settings. Disabling certain technologies may affect website functionality.

JS Digital should maintain an accurate inventory of website technologies and service providers.

If a separate Cookie Policy or consent interface is published, it forms part of this Policy for the technologies it describes.

10. Service providers, disclosures and business transfers

We may use trusted service providers to support hosting, cloud infrastructure, communications, source control, security, analytics, artificial intelligence, payment processing, professional services, and other business functions.

Providers receive only the access reasonably required for the service and are subject to contractual, technical, or organizational controls appropriate to the circumstances.

We may disclose personal information:

• With service providers and subcontractors that perform services for JS Digital.

• With a client where the information relates to a service we perform for that client.

• With professional advisers such as legal, accounting, insurance, or security advisers where appropriate.

• Where required by law, court order, regulatory process, or lawful government request.

• Where reasonably necessary to protect rights, safety, systems, property, or the integrity of our services.

• In connection with an actual or proposed financing, merger, acquisition, restructuring, sale of assets, or other business transaction, subject to appropriate confidentiality and legal requirements.

JS Digital does not sell or rent personal information for monetary consideration and does not operate as a data broker.

11. Cross border processing

JS Digital is based in Canada, but some service providers, cloud platforms, client selected systems, or technical resources may process or store information in the United States or other jurisdictions.

As a result, personal information may be subject to the laws and lawful access requirements of the jurisdiction where it is processed.

We consider factors such as the sensitivity of the information, the purpose of the processing, contractual protections, provider security, data location, retention, and the requirements of the client engagement when selecting or approving processing arrangements.

Where a privacy impact assessment, transfer assessment, consent, notice, or other measure is required by applicable law, including Quebec requirements where applicable, JS Digital will take the required step before the relevant processing begins.

12. Security safeguards

JS Digital uses administrative, technical, and organizational safeguards intended to protect personal information against unauthorized access, collection, use, disclosure, copying, modification, loss, disposal, or similar risks.

The controls used depend on the sensitivity of the information and the nature of the system or engagement.

Safeguards may include:

• Encryption in transit and, where appropriate and supported, encryption at rest.

• Multi factor authentication, role based access, least privilege, and access reviews.

• Secure credential and secret handling.

• Environment separation and controlled administrative access.

• Logging, monitoring, alerting, and security investigation procedures.

• Backups, recovery planning, patching, vulnerability management, and secure configuration practices.

• Confidentiality obligations, privacy and security procedures, and access removal when access is no longer required.

• Privacy and security review during solution design where the nature of the project warrants it.

No method of transmission or storage can be guaranteed to be completely secure. JS Digital therefore uses risk based safeguards and continually evaluates controls appropriate to its services and obligations.

13. Privacy and security incidents

JS Digital maintains processes to identify, contain, investigate, document, and respond to suspected privacy and security incidents.

When an incident involves personal information, we assess the nature and sensitivity of the information, the circumstances of the incident, the individuals affected, the likelihood of misuse, possible consequences, containment measures, and legal or contractual notification duties.

Where PIPEDA applies, JS Digital will assess whether a breach creates a real risk of significant harm, make required reports and notifications, and maintain breach records as required by law.

Where Alberta law applies, we will assess and make Commissioner notifications required by Alberta PIPA.

Where Quebec law applies, we will assess confidentiality incidents, notify the Commission d’acces a l’information and affected individuals when the legal threshold is met, and maintain the required incident register.

Where JS Digital processes information for a client, we will notify and cooperate with the client in accordance with applicable law and the governing contract.

14. Retention, deletion and anonymization

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, the delivery of services, security, business record keeping, tax and accounting obligations, dispute resolution, legal claims, regulatory requirements, contractual requirements, and applicable limitation periods.

Different categories of information may have different retention periods.

When information is no longer reasonably required, we securely delete, destroy, de identify, or anonymize it as appropriate and as permitted by law.

Information in backups may remain until the applicable backup cycle expires, subject to access restrictions and normal restoration processes.

Where British Columbia PIPA applies and JS Digital uses an individual’s personal information to make a decision that directly affects that individual, we retain the information for at least one year after it is used for that decision so the individual has a reasonable opportunity to request access, unless a longer period is required for another lawful purpose.

Where Quebec law applies, destruction or anonymization will be handled in accordance with the requirements applicable to the information and purpose.

15. Your privacy rights and requests

Depending on the law that applies, you may have rights to access personal information, receive information about its use or disclosure, request correction, withdraw consent, challenge accuracy, request deletion where a legal right exists, receive eligible information in a portable format, object to or obtain information about certain automated processing, and complain to an appropriate privacy regulator.

How to make a request

Send a written request to info@jsdigital.ca with the subject Privacy Request.

Describe the information or correction you are requesting with enough detail for us to locate the relevant records.

We may request information reasonably necessary to verify your identity before responding.

Response periods

We respond within the period required by the law that applies to the request.

For example, British Columbia and Quebec generally require a response within 30 days, while Alberta generally provides 45 days, subject in each case to statutory extensions, exceptions, and procedural requirements.

Limits on access

Privacy rights are not absolute.

We may refuse or limit a request where permitted or required by law, including where disclosure would reveal another person’s personal information, legally privileged information, confidential commercial information, security sensitive information, or information subject to another lawful restriction.

Where required, we will explain the basis for a refusal and available review rights.

Quebec portability and automated processing

Where Quebec law applies, eligible computerized personal information collected from you may be available in a structured and commonly used technological format, subject to legal conditions and exclusions.

If a decision concerning you is based exclusively on automated processing, we will provide the information and review rights required by Quebec law where JS Digital is responsible for that decision.

16. Marketing communications and CASL

JS Digital may send commercial electronic messages where permitted by Canada’s Anti Spam Legislation and other applicable law.

Where required, messages will be sent with appropriate consent or other lawful authority, identify JS Digital or the applicable sender, provide required contact information, and include an effective unsubscribe mechanism.

You may unsubscribe from marketing communications using the unsubscribe mechanism in the message or by contacting us.

We may continue to send transactional, security, billing, project, support, or other nonmarketing communications where reasonably necessary or legally permitted.

Where JS Digital relies on consent for marketing, we maintain records appropriate to demonstrate the consent or other authority relied on.

17. Children and sensitive information

JS Digital’s general website and professional services are directed primarily to businesses and adult users and are not designed as consumer services for children.

We do not knowingly seek personal information from children through general website forms.

A client project may involve information about minors or other sensitive information.

In that case, the applicable contract, client instructions, sector specific law, consent requirements, and heightened security controls may apply.

Please do not submit health information, government identifiers, financial account credentials, passwords, private keys, or other highly sensitive information through a general contact form unless JS Digital has specifically instructed you to do so through an approved secure method.

18. Provincial terms, changes, complaints and contact

British Columbia

For private sector activities governed by British Columbia’s Personal Information Protection Act, JS Digital follows the requirements applicable to collection, use, disclosure, access, correction, safeguards, retention, and accountability.

Individuals may contact the Office of the Information and Privacy Commissioner for British Columbia where they have a right to do so.

Alberta

For private sector activities governed by Alberta’s Personal Information Protection Act, JS Digital follows the requirements applicable to access, correction, safeguards, breach reporting, and other obligations.

Individuals may contact the Office of the Information and Privacy Commissioner of Alberta where they have a right to do so.

Quebec

For activities governed by Quebec’s private sector privacy law, JS Digital applies the requirements that govern privacy accountability, clear privacy information for technological collection, access and rectification, portability where applicable, confidentiality incidents, privacy impact assessments where required, and transparency for certain automated decisions and profiling technologies.

JS Digital respects applicable French language obligations in Quebec.

Where Quebec law requires French language availability for this Policy or other commercial materials, JS Digital will provide the required French version.

The English and French versions should be maintained with the same effective and revision dates.

Changes to this Policy

We may update this Policy to reflect changes in law, services, technology, service providers, business operations, or privacy practices.

The Last Updated date will identify the most recent revision.

Where a material change requires additional notice or consent, we will provide that notice or obtain consent as required.

Continued website use does not replace consent where the law requires a separate consent.

Questions and complaints

Questions, concerns, complaints, access requests, and correction requests should be sent to the Privacy Officer.

We will review privacy complaints and respond within the period required by applicable law.

If a concern cannot be resolved directly with JS Digital, you may have the right to contact the federal or provincial privacy regulator that has jurisdiction over the matter.

Privacy contact

Privacy Officer, JS Digital Incorporated
Nanaimo, British Columbia, Canada
Email: info@jsdigital.ca
Telephone: 250 797 4649
Website: jsdigital.ca
Subject line: Privacy Request