Legal

Privacy Policy

Last updated: July 20, 2026

This Privacy Policy explains how Roalla Business Enablement Group (“Roalla,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects personal information in connection with www.roalla.com and related business operations.

We are a Canadian organization based in Burlington, Ontario. We design our practices to align with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, and with Canada’s Anti-Spam Legislation (CASL) for commercial electronic messages. If you are in Québec, we also respect applicable requirements under Québec privacy legislation (including Law 25) to the extent they apply to our activities.

1. Scope and accountability

This Policy applies to personal information collected through our website, forms, email, phone, assessments, and related marketing or sales communications. It does not apply to third-party websites we link to, or to Roalla products that publish their own privacy notices (those notices control for those products).

Roalla is accountable for personal information under its control. Day-to-day privacy questions and requests: sales@roalla.com · (289) 838-5868 · Burlington, ON, Canada. You may ask for our privacy contact or designate when making a formal request.

2. Personal information we collect

Information you provide may include: name; email address; phone number; organization and role; project goals and requirements; assessment answers; industry and timeline preferences; URLs you share; message content; and other details you choose to submit.

Information collected automatically may include: IP address; approximate location derived from IP; browser and device type; operating system; pages viewed; referring/exit pages; date and time stamps; and diagnostic or security logs.

We do not knowingly seek sensitive personal information (such as health information, government identifiers, or biometric data) through the public website. Do not submit such information via public forms. If an engagement requires handling regulated data, that will be scoped under a written agreement with appropriate safeguards.

3. Purposes of collection and use (PIPEDA fair information principles)

We collect and use personal information for identified purposes, including to: respond to inquiries and schedule discussions; prepare proposals and statements of work; deliver and support services under engagement agreements; operate, secure, and improve the website; understand site usage and marketing effectiveness; send transactional or relationship messages related to your request; send commercial electronic messages where permitted by CASL (with consent or another lawful basis, and unsubscribe options where required); detect fraud and abuse; and comply with legal, accounting, insurance, and regulatory obligations.

We limit collection to what is reasonably required for these purposes. If we need information for a new purpose, we will seek consent where required by law.

4. Consent

By submitting forms or contacting us, you consent to our collection, use, and disclosure of the personal information provided for the purposes described in this Policy. You may withdraw consent subject to legal or contractual restrictions and reasonable notice. Withdrawal may limit our ability to respond or provide services.

Where CASL requires express or implied consent for commercial electronic messages, we obtain and honour that consent and provide an unsubscribe mechanism in marketing messages.

5. Disclosure to service providers and others

We may disclose personal information to service providers who process it on our behalf (for example website hosting, cloud infrastructure, email delivery, form processing, analytics, customer relationship tools, or payment processors). We require them by contract to use the information only to provide services to us and to apply appropriate safeguards.

We may disclose information: to professional advisors under confidentiality; if required by law, court order, or lawful request by authorities; to protect the rights, property, or safety of Roalla, our clients, or others; or in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality and notice where required.

We do not sell personal information.

6. Cross-border transfers

Personal information may be stored or processed in Canada or in other countries (including the United States) where our service providers operate. When information is processed outside Canada, it may be subject to the laws of those jurisdictions, including lawful access by foreign authorities.

We use contractual and organizational measures intended to protect personal information consistent with this Policy and Canadian privacy expectations.

7. Cookies and similar technologies

We may use cookies, pixels, local storage, and similar technologies for essential site operation, security, preferences, analytics, and (where enabled) marketing measurement. You can control cookies through browser settings. Blocking certain cookies may affect site functionality.

Where required by applicable law, we will provide additional notice or choice mechanisms for non-essential cookies.

8. Retention

We retain personal information only as long as necessary for the purposes described, including to complete inquiries, manage client relationships, meet legal, tax, insurance, and accounting requirements, and resolve disputes. Typical inquiry records may be retained for a commercially reasonable period (often up to several years) unless a longer period is required or a shorter period is appropriate.

When retention is no longer required, we securely delete or anonymize information where feasible.

9. Security

We implement reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including access controls, secure transmission where appropriate, and vendor due diligence. No method of transmission or storage is completely secure; you use the site at your own risk regarding residual security risk.

If we experience a breach of security safeguards involving personal information that poses a real risk of significant harm, we will assess and notify individuals and the Office of the Privacy Commissioner of Canada (and other authorities as required) in accordance with PIPEDA and applicable provincial rules.

10. Your rights and requests

Subject to legal exceptions, you may request: access to personal information we hold about you; correction of inaccurate or incomplete information; deletion or anonymization where appropriate; information about our practices; and withdrawal of consent where processing is consent-based.

Québec residents may have additional rights under applicable Québec law (including rights relating to access, rectification, and certain automated decision-making disclosures) to the extent those laws apply to our processing.

Send requests to sales@roalla.com. We may verify identity and respond within timeframes required by law. You may contact the Office of the Privacy Commissioner of Canada or a provincial privacy commissioner if you have an unresolved concern.

11. Children

Our website and B2B services are directed to business professionals and organizations, not to children. We do not knowingly collect personal information from individuals under 16 through the public website. If you believe a minor has provided personal information, contact us and we will take steps to delete it.

12. Automated tools and AI

We may use automated tools, including AI-assisted systems, to help route inquiries, summarize content, improve responses, or power product features. Meaningful decisions about engaging you as a client remain subject to human involvement unless a specific product notice states otherwise. See our AI Policy for additional detail.

13. Changes to this Policy

We may update this Privacy Policy periodically. The “Last updated” date shows the current version. Material changes will be posted on this page and, where required, communicated by other appropriate means. Continued use of the site after changes take effect constitutes acceptance of the updated Policy, except where consent is required by law for a new purpose.

14. Contact

Privacy questions and requests: sales@roalla.com · (289) 838-5868 · Roalla Business Enablement Group, Burlington, Ontario, Canada.

Related documents: Terms & Conditions and AI Policy on this website.