Privacy should be part of the operating model.

1. Scope and accountability

This policy applies to personal information handled by Boundary Condition Inc. through boundarycondition.ca, founder and Canadian-expansion intake, network-interest forms, and related correspondence. “Personal information” means information about an identifiable individual; it does not generally include business contact information used only to communicate in relation to a person’s employment, business, or profession where applicable law excludes it.

Boundary Condition Inc. is responsible for personal information under its control. The company’s designated Privacy Officer may be reached through the contact details below. Our practices are intended to reflect British Columbia’s Personal Information Protection Act and, where applicable, Canada’s Personal Information Protection and Electronic Documents Act.

This website may link to services operated by others. Their privacy practices are governed by their own policies.

2. What we collect

Information you provide

Depending on the path you choose, we may collect:

• name, email, phone number, role, organization, website, and location;
• company stage, size, team, product, customers, market evidence, revenue or funding ranges, milestones, and requested support;
• Canadian expansion plans, timing, locations, headcount, activities, facility needs, budget range, internal decision ownership, and professional, regulatory, immigration, privacy, or security questions;
• network expertise, sectors, availability, intended contribution, and disclosed commercial interests or conflicts;
• accessibility or participation needs you choose to share; and
• the contents of messages and subsequent correspondence.

Some application information may be commercially sensitive even where it is not personal information. We apply the same restricted-access approach to the submission as a whole.

Information we ask you not to provide

Do not submit passwords, government identification numbers, payment-card or bank information, health records, information about children, export-controlled technical data, source code, or trade secrets through a website form. Do not provide personal information about another person unless you have authority and a reasonable purpose to do so. Intake communications are not protected by solicitor-client, accountant-client, or other professional privilege.

Information collected automatically

Our hosting systems may record technical information such as IP address, request time, requested page, browser or device type, referring page, and security events. We use this data to deliver, diagnose, protect, and maintain the site. We do not currently use third-party advertising trackers or behavioural advertising on this website.

3. How we use information

We may use information to:

• receive, store, review, and respond to an inquiry;
• assess potential fit for a program, engagement, referral, partnership, or network contribution;
• design initial programs and understand participation barriers, in aggregated or de-identified form where practical;
• coordinate a next conversation or, with appropriate notice and permission, involve a relevant team member or specialist;
• operate, secure, troubleshoot, and improve the website and intake systems;
• keep records of consent, decisions, complaints, and our relationship with you;
• meet legal, regulatory, insurance, accounting, or dispute-resolution requirements; and
• send occasional program or insight updates only when you separately request them or where otherwise permitted by law.

Submitting an application or inquiry does not subscribe you to marketing. You may withdraw marketing consent through the unsubscribe method in a message or by contacting us. Withdrawing marketing consent does not prevent us from responding to an active inquiry or sending necessary service communications.

4. Service providers and processing location

We use a limited set of systems to operate this site and process forms. At launch, these may include:

• our web-hosting and database infrastructure, which runs WordPress and stores private submissions outside publicly accessible site content;
• Postmark, an email-delivery service, which receives the recipient, sender, subject, and message content needed to deliver form notifications and receipts; and
• Cloudflare Turnstile, when enabled, to distinguish legitimate submissions from automated abuse.

Providers process information for us under their own security and privacy commitments. Information may be processed in another province or outside Canada, including in the United States, where it may be accessible to courts, law enforcement, or national-security authorities under local law. If our material providers or processing practices change, we will update this policy.

5. Cookies and website data

The public site does not currently require an account and is designed to work without advertising cookies. WordPress may use necessary cookies for signed-in administrators. If Turnstile is enabled, Cloudflare may use necessary technical signals to prevent abuse. We do not currently run a third-party marketing analytics platform. If we add non-essential analytics or similar tools, we will describe them here and provide appropriate controls before using them.

6. When we disclose information

We do not sell or rent personal information. We may disclose it:

• to staff, contractors, or advisors who need it for the purposes described above and are expected to protect it;
• to service providers acting for us;
• with your knowledge or consent—for example, when you ask for an introduction to an operator or professional;
• where reasonably necessary to protect rights, safety, systems, or the integrity of a selection process;
• as required or permitted by law, court order, regulatory process, or lawful investigation; or
• as part of a proposed financing, reorganization, sale, or transfer of all or part of the business, subject to appropriate confidentiality and legal requirements.

We will not circulate an applicant’s information broadly through a mentor, investor, or partner network without a defined purpose and appropriate permission.

7. Safeguards and confidentiality

Safeguards are proportionate to the sensitivity and context of the information. They include restricted administrative access, private rather than public form storage, anti-spam and rate-limiting controls, production transport encryption, environment-held mail credentials, software maintenance, and deletion processes. People handling submissions are expected to limit access and forwarding to the purpose of the inquiry.

No internet transmission, email system, or database is perfectly secure. Email receipts deliberately do not repeat form answers. If a more sensitive exchange becomes necessary, we will arrange a more suitable channel. Please contact us promptly if you believe information has been submitted to the wrong place or accessed improperly.

8. Retention and deletion

Website intake submissions are scheduled for deletion 24 months after receipt. We may delete them sooner when no longer needed. If a program, client, partner, investment, or other substantive relationship begins, relevant information may be moved into relationship records and retained for the period reasonably required to administer that relationship, meet legal and financial obligations, resolve disputes, and enforce agreements.

Technical logs are generally retained for shorter operational and security periods determined by our hosting configuration. Backups may retain deleted information for a limited rotation period before it is overwritten. We may retain minimal records of consent, suppression requests, complaints, or legal matters where necessary.

9. Access, correction, consent, and complaints

Subject to applicable exceptions, you may ask to access personal information we hold about you, understand how it has been used or disclosed, correct inaccurate information, withdraw consent, or request deletion. We may need to verify your identity before acting. Withdrawing consent may prevent us from considering or continuing an inquiry where the information is necessary for that purpose.

To make a request, contact the Privacy Officer and include the form reference from your receipt if available. We will respond within the period required by applicable law and explain any permitted refusal.

If you are not satisfied with our response, you may contact the Office of the Information and Privacy Commissioner for British Columbia or, where federal law applies, the Office of the Privacy Commissioner of Canada.

10. Children

This site and our programs are directed to adults acting in a business or professional context. We do not knowingly solicit personal information from children through these forms. Contact us if you believe a child has submitted personal information so we can assess and delete it as appropriate.

11. Changes to this policy

We may update this policy as our programs, providers, and legal obligations develop. We will post the revised policy with a new effective date and provide additional notice when a change is material and appropriate in the circumstances. We will not use previously collected information for a materially new purpose without notice and any consent required by law.

12. Contact the Privacy Officer

Privacy Officer
Boundary Condition Inc.
Vancouver Island, British Columbia, Canada
hello@boundarycondition.ca

Use the subject “Privacy request” and include your intake reference if you have one. Please do not send identity documents until we ask for an appropriate verification method.