Legal

Privacy Policy

Last updated: June 2026

Where To Turn ("we," "us") is a sole proprietorship operating in Ontario, Canada. We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). This page explains what we collect, why, and what your options are. The short version: we collect the minimum needed to run the service, we don't sell your data, and you can ask us what we hold about you at any time.

What we collect

Assessment responses. When you take the Business Systems Snapshot or Operational Health Check, your answers are scored in your browser. They are only sent to us if you choose to submit a report request, in which case we receive your answers, scores, name, email, and business name.

Contact information. If you subscribe to our updates or email us, we receive the information you provide, typically your name and email address.

Purchase information. Payments for tools are processed by a third-party payment provider. We do not receive or store your credit card number. We receive your name, email, and a record of what you bought so we can deliver it and provide updates.

Technical data. Our hosting provider may log standard technical information (such as IP address and browser type) for security and performance. We do not run advertising trackers.

How we use it

We use your information to deliver what you asked for: assessment reports, purchased tools and their updates, replies to your messages, and the newsletter if you subscribed. We may use aggregated, anonymized assessment data to build industry benchmarks; this never identifies you or your business. We do not sell, rent, or trade personal information. We share it only with the service providers needed to operate (payment processing, email delivery, form handling, website hosting), each governed by their own privacy terms, or where required by law.

Email

Newsletter and marketing emails comply with Canada's Anti-Spam Legislation (CASL). We only email you if you opted in or asked us something, and every marketing email includes a working unsubscribe link. Unsubscribing is immediate and permanent unless you opt in again.

Retention and security

We keep personal information only as long as needed for the purpose it was collected, or as required for legal and tax records. Data is stored with reputable providers using industry-standard security. No system is perfectly secure; if a breach creates a real risk of significant harm, we will notify affected individuals and the Privacy Commissioner as PIPEDA requires.

Your rights

You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it (subject to legal record-keeping requirements). Email hello@wheretoturn.ca and we will respond within 30 days. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.

Changes

If this policy changes, we will update this page and the date above. Material changes affecting how we use existing data will be communicated by email where we have one on file.

Questions? hello@wheretoturn.ca