Effective date: May 9, 2026 | Last updated: May 9, 2026
Tumbleweed Consulting (“we”, “us”, “our”) respects your privacy. This Privacy Policy explains what personal information we collect, why we collect it, how we use it, who we share it with, and the choices you have. It applies to information collected through:
We are based in Langley, British Columbia, Canada. We comply with British Columbia’s Personal Information Protection Act (PIPA) and the federal Personal Information Protection and Electronic Documents Act (PIPEDA) where it applies.
Privacy Officer: Eddy Davis
Email: info@tumbleweedconsulting.ca
Phone: 250-938-7388
Mail: Tumbleweed Consulting, PO Box 487 Stn Ft Langley, Langley, BC V1M 2R8, Canada
If you have a question, complaint, or request about your personal information, contact our Privacy Officer using the details above. We respond to requests within 30 days as required by law.
We only collect information that we need to provide our services or run our business.
When you visit our website, our web server may automatically log:
This information comes from standard server logs. We use it to monitor site health and understand general traffic patterns. We do not currently use any third-party analytics service. If we add one in the future, we will update this policy accordingly.
Our website uses only essential cookies needed for the site to function (for example, remembering your light/dark theme preference). We do not use advertising cookies or third-party tracking pixels.
We collect personal information only for the following purposes:
We do not sell or rent your personal information. We do not use your information for any purpose other than those listed above without obtaining your consent.
Under PIPA BC and PIPEDA, we need a lawful basis to collect, use, or disclose your information. The bases we rely on are:
You can withdraw consent at any time (see Section 8), subject to legal or contractual requirements.
We share your personal information only with the third parties listed below, and only to the extent necessary for the purposes described above.
| Provider type | What we share | Why |
|---|---|---|
| Email & document storage (Google Workspace) | Your name, email, signed agreements, deliverables, working files, and anything you send by email | To communicate with you and store engagement records securely |
| Contact form processor (Formsubmit.co) | Form submission contents (name, email, phone, message) | To deliver your inquiry to us by email |
| Payment (Interac e-Transfer via your bank) | Your name and email (used to send the e-Transfer); we do not handle banking credentials | To accept payment |
| Accounting & tax (our bookkeeper / accountant) | Invoices, payments, business identifiers | For bookkeeping and tax filing |
| Legal advisors (our lawyer, in confidence) | Only as needed for a specific matter | For legal advice |
Some of these providers store data outside of Canada, including in the United States. By using our website and services, you understand that your information may be transferred to and stored in jurisdictions whose data-protection laws differ from those in BC and Canada. We choose providers that maintain industry-standard security and contractual data-protection commitments.
We will only disclose personal information to other third parties if:
We use reasonable physical, technical, and administrative safeguards, including:
No system is perfectly secure. If a privacy breach occurs that creates a real risk of significant harm, we will notify affected individuals and the Office of the Information and Privacy Commissioner for BC as required by law.
| Type of information | Retention |
|---|---|
| Inquiries that don’t lead to engagement (form submissions) | Up to 2 years from your last contact, then deleted |
| Active engagement records | Duration of engagement |
| Signed agreements, invoices, and core engagement records | 7 years after engagement ends (matches CRA tax-record requirements and BC limitation periods) |
| Session recordings | Duration of engagement plus 7 years |
| Server logs | Up to 90 days, then auto-rotated |
After the retention period, information is securely deleted or anonymized.
Under PIPA BC and PIPEDA, you have the right to:
To exercise these rights, contact our Privacy Officer (Section 1). We respond within 30 days. We may need to verify your identity before responding.
There are limited cases in which we may decline a request — for example, where granting access would reveal someone else’s confidential information, where the information is subject to legal privilege, or where retention is required by law. If we decline, we’ll explain why.
Our services are not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact our Privacy Officer and we will delete it.
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The “Last updated” date at the top will reflect the date of the most recent change. For material changes, we’ll post a notice on our website. Continued use of the site or services after a change means you accept the updated policy.
If anything in this policy isn’t clear, or if you’d like to know more about how we handle your information, contact:
Eddy Davis, Privacy Officer
Tumbleweed Consulting
Email: info@tumbleweedconsulting.ca
Phone: 250-938-7388
Mail: PO Box 487 Stn Ft Langley, Langley, BC V1M 2R8, Canada