Privacy policy.

Effective Date: October 6, 2025
Last Updated: October 6, 2025

At Ironwood Advisory (“we,” “our,” or “us”), your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website, use our services, or interact with us in any other way.

By using our website or providing your personal information, you consent to the terms of this Privacy Policy.

1. Information We Collect

We collect personal and non-personal information to provide and improve our services. This may include:

1.1 Personal Information

When you contact us, subscribe to our mailing list, request a consultation, or engage our services, we may collect:

  • Full name

  • Email address

  • Phone number

  • Company name and role

  • Billing or mailing address (if applicable)

  • Any additional information you voluntarily provide (e.g., project details or business goals)

1.2 Non-Personal Information

When you visit our website, we automatically collect:

  • Browser type, device, and operating system

  • IP address and general location

  • Pages visited, time spent, and referring websites

  • Cookies or similar technologies used for analytics and functionality

This non-identifiable data helps us understand how visitors use our website and how we can improve it.

2. How We Use Your Information

We use the information we collect to:

  • Provide, personalize, and improve our consulting services

  • Respond to inquiries, bookings, or service requests

  • Send updates, newsletters, or marketing communications (only with consent)

  • Analyze website traffic and performance

  • Maintain business records and comply with legal requirements

We will not sell, rent, or share your personal information with third parties without your consent, except as outlined below.

3. When We Share Information

We may share your personal information in limited circumstances:

  • Service Providers: With trusted third-party partners who assist in website hosting, analytics, marketing, or customer communications. These providers are bound by confidentiality agreements.

  • Legal Requirements: When required by law, court order, or to protect our rights or property.

  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, with notice provided where applicable.

4. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience and understand behavior.
You can manage or disable cookies through your browser settings, but this may affect certain site functions.

We may use:

  • Essential cookies – necessary for basic site functionality.

  • Analytics cookies – to understand how visitors use our site (e.g., Google Analytics).

  • Marketing cookies – to deliver relevant ads and measure effectiveness.

For more details on Google Analytics and your privacy options, visit https://policies.google.com/privacy.

5. Data Storage and Security

We store personal information securely and take reasonable measures to protect it against loss, theft, unauthorized access, or disclosure.
Only authorized personnel have access to personal data, and all such access is limited to the purposes outlined in this policy.

6. Data Retention

We retain personal information only for as long as necessary to:

  • Fulfill the purposes for which it was collected

  • Comply with legal or regulatory requirements

  • Resolve disputes or enforce agreements

When information is no longer required, we securely destroy or anonymize it.

7. Your Rights and Choices

You have the right to:

  • Access the personal information we hold about you

  • Request corrections to inaccurate or incomplete information

  • Withdraw consent to marketing communications at any time

  • Request deletion of your personal information, subject to legal obligations

To exercise any of these rights, please contact us using the information below.

8. Email Marketing and Communications

We comply with Canada’s Anti-Spam Legislation (CASL).
If you receive emails from us, it is because you have:

  • Opted in through our website or service forms, or

  • Have an existing business relationship with us.

You can unsubscribe at any time by clicking the “unsubscribe” link in our emails or contacting us directly.

9. International Visitors (GDPR Notice)

If you are located in the European Economic Area (EEA), we process your personal data under lawful bases such as:

  • Your consent

  • Performance of a contract

  • Compliance with legal obligations

  • Legitimate business interests

You may also have additional rights under the GDPR, including data portability and the right to restrict processing.

10. Links to Other Websites

Our website may contain links to third-party sites.
We are not responsible for the privacy practices or content of those websites.
We encourage you to review their privacy policies before providing any personal information.

11. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal obligations.
Any revisions will be posted on this page with an updated effective date.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us