Privacy Policy

Who we are

CloudRally Inc. (“CloudRally”, “we”, “us”) is a cloud consulting company based in Toronto, Ontario. This policy explains how we collect, use, share and protect personal information through our website, cloudrally.io (the “website”).

We handle personal information in line with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and, for residents of Quebec, Quebec’s Act respecting the protection of personal information in the private sector (as amended by Law 25).

This policy covers the website only. Client engagements are covered by the agreement for that engagement. Our newsletter and blog are covered in the section “Our newsletter and blog on Substack” below.

Information we collect

Information you give us. When you use our contact form, we collect your name, work email, and, if you choose to provide them, your company, primary cloud provider, team size, your message, and whether you asked for the cloud cost checklist or to subscribe to our newsletter. Please do not include sensitive personal information, or confidential information about your business, in your message.

Information collected automatically. Our hosting provider, Cloudflare, processes technical information to deliver and protect the website, such as your IP address, browser type and the pages you request. If you accept analytics, Cloudflare Web Analytics also records page views, the referring page, and your browser, device type and country. It does not use cookies and does not track you across other websites. If you accept advertising, the LinkedIn Insight Tag records the pages you visit, the referring page, your IP address, and your device and browser, and LinkedIn can link this to your account if you are a LinkedIn member. We only receive aggregated reports and audiences from LinkedIn, not the identity of individual visitors.

Information stored in your browser. The website stores your light or dark mode setting and your cookie choice in your browser. This information stays on your device. See our Cookie Policy.

How we use your information

• To reply to your enquiry and discuss how we might work together.
• To send you the cloud cost checklist, if you ask for it.
• To subscribe you to our newsletter on Substack, only if you opt in.
• To understand how the website is used and improve it, only if you accept analytics.
• To measure our LinkedIn advertising and show our ads on LinkedIn to people who visited the website, only if you accept advertising.
• To keep the website secure and prevent spam and abuse.
• To meet our legal obligations.

We do not sell or rent your personal information. We do not use it to make decisions about you by automated means alone.

Contact form submissions

When you send the contact form, your submission is emailed to our team and saved in a spreadsheet in our Google Workspace account, along with the time it was sent. Only CloudRally staff who need it to respond to you can access it. The form uses a hidden field to filter out automated spam; it does not collect anything extra about you.

Consent

We collect and use personal information with your consent, except where the law allows or requires otherwise.

• By sending the contact form, you consent to our using your details to respond to your enquiry.
• Subscribing to our newsletter needs a separate opt-in. The box on the form is unticked by default, and you don’t have to tick it to contact us.
• Analytics and advertising are separate choices in the cookie banner. Each is off until you turn it on. If your browser sends a Global Privacy Control signal, advertising stays off.

You can withdraw your consent at any time, subject to legal or contractual restrictions. Withdrawing consent does not affect anything we did before you withdrew it.

Our newsletter and blog on Substack

Our newsletter and blog, at blog.cloudrally.io, are published on Substack. They cover cloud infrastructure insights and updates about our services.

If you tick the newsletter box on our contact form, we add your email address to our Substack subscriber list. Substack then sends you the newsletter on our behalf. You can also subscribe directly on the blog. Either way, Substack collects and processes your information under its own privacy policy and terms, and may store it in the United States. Substack shares subscriber email addresses with us as the publisher, and we use them only to manage the newsletter.

We send the newsletter in line with Canada’s Anti-Spam Legislation (CASL). Every issue identifies CloudRally, includes our mailing address, and has an unsubscribe link. You can also unsubscribe by emailing [email protected]. We process unsubscribe requests within 10 business days.

We keep a record of when you gave consent and when you withdrew it, so we can show that we followed the law.

Service providers and sharing

We use trusted service providers to run the website and our business. They process personal information on our behalf, under contracts that require them to protect it and to use it only for the services they provide to us:

• Cloudflare: website hosting, security, and analytics (with your consent).
• LinkedIn: measuring and targeting our LinkedIn advertising (with your consent). LinkedIn also uses this information under its own privacy policy.
• Google Workspace: email and storage of contact form submissions.
• Substack: publishing our blog and sending our newsletter to subscribers.

We may also disclose personal information if the law requires it, to protect our rights or the safety of others, or as part of a sale or reorganization of our business, in which case the information stays subject to protections like those in this policy.

Where your information is stored

Our service providers may store and process personal information outside Quebec and outside Canada, including in the United States. While it is there, it is subject to the laws of that country, and may be accessible to its courts and authorities. Before transferring information outside Quebec, we assess whether it will be adequately protected.

How long we keep it

• Enquiries: up to 24 months after our last contact with you, unless you become a client. Client records are then kept under the terms of our agreement.
• Newsletter consent: as long as you stay subscribed. After you unsubscribe, we keep a record of your consent and withdrawal for as long as we need it to show that we followed the law.
• Analytics: Cloudflare keeps aggregate analytics data under its own retention periods. It does not identify you.
• Advertising: LinkedIn keeps Insight Tag data under its own retention periods. It says it removes members’ direct identifiers within seven days.

When we no longer need personal information, we delete it or make it anonymous.

Your rights

You can ask us to:

• tell you what personal information we hold about you, and give you access to it;
• correct information that is inaccurate or incomplete;
• unsubscribe you from our newsletter, or withdraw any other consent;
• delete information we no longer need.

If you live in Quebec, you also have the right to receive computerized personal information you gave us in a structured, commonly used technological format, and to ask us to stop disseminating your personal information or to de-index any hyperlink attached to your name, where the law allows.

To make a request, email our Privacy Officer at [email protected]. We may need to confirm your identity first. We will respond within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada. If you live in Quebec, you can also complain to the Commission d’accès à l’information du Québec.

Security

We use reasonable administrative, technical and physical safeguards to protect personal information. These include encrypted connections (HTTPS) and limiting access to the people who need it. No method of transmission or storage is completely secure. If a confidentiality incident creates a risk of serious harm to you, we will notify you and the relevant authorities as the law requires.

Children

The website is intended for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has sent us personal information, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. We will post the new version on this page and change the “Last updated” date. If we make significant changes, we will make that clear on the website.

Contact us

Our Privacy Officer is responsible for protecting personal information at CloudRally. For questions, requests or complaints about this policy or our privacy practices, contact:

Privacy Officer, CloudRally Inc.
Toronto, Ontario, Canada
[email protected]