Privacy Policy

1. Identity of the organisation

This Privacy Policy describes the personal information handling practices of RoboNarrative Inc. ("RoboNarrative," "we," "us," or "our"), a corporation incorporated in Quebec, Canada. Our registered office is at 4200 Saint-Laurent Boulevard, Suite 210, Montreal, QC H2W 2R2, Canada. Business Number: 802467135 RC0001.

RoboNarrative provides professional robotics strategy and transformation advisory services to business clients — primarily mid-market manufacturers and industrial operators in Quebec and Canada. This policy applies to personal information collected through the website robonarrative.life, through our contact and enquiry channels, and in the course of delivering professional services where individuals are identified.

Privacy Officer: [email protected]
General contact: [email protected]
Telephone: +1 (514) 419-6273

2. Applicable law

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and its ten fair information principles. Because we are established in Quebec and serve Quebec clients, we also comply with the Act respecting the protection of personal information in the private sector, commonly referred to as Law 25, including its requirements for transparency, consent, privacy governance, and incident response.

Where PIPEDA and Law 25 impose overlapping obligations, we apply the standard that affords greater protection to individuals.

3. Accountability

RoboNarrative is responsible for personal information under its control. Our Privacy Officer, reachable at [email protected], oversees compliance and responds to access requests and complaints. We maintain internal practices — access controls, retention schedules, vendor review — designed to give effect to PIPEDA and Law 25.

When third-party service providers process personal information on our behalf, we require contractual commitments that information will be protected consistently with this policy. We remain accountable for information processed by such providers, subject to the provider demonstrating that information was processed outside our instructions.

4. Purposes for collection, use, and disclosure

We collect and use personal information only for purposes a reasonable person would consider appropriate. Primary purposes include:

• Responding to enquiries: When you submit our contact form, email us, or call, we collect name, email, telephone (if provided), company name (if provided), and message content to respond and maintain a communication record.
• Delivering advisory services: When you engage RoboNarrative for feasibility, roadmap, vendor selection, change management, or related work, we collect contact and professional information for contracting, project management, invoicing, site access coordination, and advisory communication.
• Website operation: Strictly necessary cookies and, with consent, optional analytics cookies operate robonarrative.life. See our Cookie Policy.
• Legal and regulatory compliance: Processing required to comply with law, respond to lawful authority requests, enforce our Terms of Service, and protect rights and safety.
• Internal administration: Business records, quality assurance, and internal reporting related to our advisory practice.

We do not collect personal information for surveillance of individuals. We do not design advisory engagements whose primary purpose is worker monitoring, biometric identification, or behavioural tracking.

5. Consent

We obtain meaningful consent before collecting, using, or disclosing personal information, except where permitted or required by law. Contact form consent is obtained through an explicit, unchecked checkbox — not pre-selected — confirming agreement to collection and use to respond to your enquiry under this policy, PIPEDA, and Law 25.

Consent may be express (checkbox, signed contract) or implied (business card at an industry event with reasonable follow-up expectation). You may withdraw consent subject to legal or contractual restrictions; withdrawal may limit our ability to respond or deliver services.

Optional analytics cookies require opt-in consent via our cookie banner before placement. Professional services engagements define client data handling in contracts or data processing addenda.

6. Limiting collection

We collect only information necessary for identified purposes. Our contact form requests name, email, subject, and message — fields needed for meaningful response. We do not request government identification numbers or financial account details through the public website.

During advisory engagements, we may access client operational data — production metrics, layout diagrams, workforce role descriptions — only to the extent required for scoped work and only with client authorisation.

7. Limiting use, disclosure, and retention

We do not use or disclose personal information for unrelated purposes except with consent or as required by law. We do not sell, rent, or trade personal information for marketing.

Personal information may be disclosed to:

• Service providers assisting with hosting, email delivery, analytics (with consent), and internal tools — under contractual confidentiality obligations;
• Professional advisors bound by confidentiality;
• Law enforcement or regulators when required by law;
• Successors in merger, acquisition, or asset sale, with notice where required.

Retention periods:

• Contact enquiries: up to twenty-four (24) months from last communication, then securely deleted unless an engagement proceeds;
• Client project records: duration of engagement plus seven (7) years for contractual, tax, and professional liability purposes, unless shorter period agreed in writing;
• Cookie consent records: six (6) months;
• Analytics data (if consented): per vendor policy, typically thirteen (13) months maximum in aggregated form.

When information is no longer needed, we securely destroy, anonymise, or return it per our retention schedule.

8. Accuracy

We take reasonable steps to ensure personal information is accurate, complete, and current for its purposes. Request correction at [email protected]. We respond within thirty (30) days, or the timeframe Law 25 requires where stricter.

9. Safeguards

We protect personal information with safeguards appropriate to sensitivity, including:

• Canadian hosting with access controls;
• TLS/HTTPS for website communications;
• Restricted internal access on need-to-know basis;
• Secure disposal for retired records;
• Contractual security requirements for sub-processors.

No method of transmission or storage is completely secure. You are responsible for confidentiality of credentials issued for project collaboration portals.

10. Openness

We make privacy practices available through this policy, our Cookie Policy, and Legal imprint. Questions: [email protected].

11. Individual access

You may request access to personal information we hold and challenge its accuracy. To request access:

• Email [email protected] with sufficient detail to identify yourself and the information sought;
• We respond within thirty (30) days, subject to permitted extensions for complex requests under Law 25;
• We may charge a reasonable fee for transcription or copying where permitted;
• We may refuse access where permitted by law and will explain refusals in writing.

12. Challenging compliance

If you believe we have not handled your information in accordance with this policy, contact our Privacy Officer first. We investigate and respond within a reasonable timeframe.

If unsatisfied, you may contact:

Office of the Privacy Commissioner of Canada (PIPEDA)
30 Victoria Street, Gatineau, QC K1A 1H3
Toll-free: 1-800-282-1376 · www.priv.gc.ca

Commission d'accès à l'information du Québec (Law 25)
575, rue Saint-Amable, bureau 1.10, Québec, QC G1R 5A5
Toll-free: 1-888-528-7741 · www.cai.gouv.qc.ca

13. Quebec Law 25 — additional disclosures

Law 25 imposes specific obligations on Quebec private-sector organisations. The following supplements our PIPEDA-aligned practices:

13.1 Privacy Officer

Our Privacy Officer is responsible for ensuring Law 25 compliance and serves as the primary contact for privacy matters: [email protected]. The Officer's role includes policy maintenance, consent mechanism oversight, incident response coordination, and privacy impact assessment for new projects involving personal information.

13.2 Transparency and policy publication

Law 25 requires clear publication of personal information handling practices. This policy satisfies that requirement for robonarrative.life and our advisory services. We describe categories of information collected, purposes, retention, third parties, and cross-border transfers where applicable.

13.3 Consent for sensitive contexts

Where we process personal information beyond enquiry response — for example, identifying plant personnel in workshop notes or interviews — we obtain consent appropriate to sensitivity, often through client-facilitated introduction and documented project agreements. We do not collect biometric or health information through our website.

13.4 Automated decision-making

We do not make decisions based exclusively on automated processing of personal information that produce legal or similarly significant effects on individuals. Advisory scoring of vendor proposals uses human judgment; any spreadsheet or template tools support advisor review, not autonomous decisions about individuals.

13.5 Privacy impact assessments

For new projects involving personal information processing that presents privacy risk — such as large-scale employee interviews for change management — we conduct privacy impact assessments proportionate to risk and document mitigation measures before processing begins.

13.6 Confidentiality incidents

Law 25 requires notification to the Commission d'accès à l'information du Québec and affected individuals when a confidentiality incident presents a risk of serious injury, unless impossible. Our incident response procedure includes containment, assessment, notification, and remediation steps. Report suspected incidents affecting your information to [email protected] immediately.

13.7 De-identification and anonymisation

When we use client operational data for internal method improvement, we de-identify or anonymise it and do not attempt re-identification. Client-identifiable case material on our website is composite and anonymised unless written permission is granted.

14. Client data and project information

During advisory engagements, we may access client production data, facility layouts, workforce role descriptions, vendor proposals, and safety documentation. Such data is:

• Accessed only for scoped advisory purposes defined in the project contract;
• Stored on client-approved systems or RoboNarrative infrastructure in Canada, as agreed;
• Not used to train general models for other clients without explicit written consent;
• Returned or destroyed at project completion per contract terms;
• Not disclosed to third parties except sub-processors bound by confidentiality where necessary for delivery.

Clients remain controllers for operational data originating on their premises. RoboNarrative acts as processor or service provider, handling data only under client instruction and contract terms.

15. Cookies and similar technologies

robonarrative.life uses cookies as described in our Cookie Policy. Strictly necessary cookies operate without consent. Analytics cookies are placed only after banner consent. You may withdraw consent at any time.

16. Sub-processors

Categories of sub-processors who may handle personal information:

• Web hosting: Canadian provider for robonarrative.life;
• Email delivery: Transactional email for contact form routing;
• Analytics (optional, with consent): Privacy-oriented analytics processing aggregated visit data.

A current list of named sub-processors is available on request to [email protected].

17. International transfers

We host our website and primary business systems in Canada. Where a sub-processor operates outside Canada, we ensure contractual protections consistent with PIPEDA and Law 25 before transfer. Client operational data is not transferred internationally without explicit agreement and appropriate safeguards.

18. Children's privacy

robonarrative.life and our services target business professionals. We do not knowingly collect information from individuals under eighteen (18). Contact [email protected] if you believe we have inadvertently collected such information and we will delete it promptly.

19. Changes to this policy

We may update this Privacy Policy to reflect practice, technology, or legal changes. Material changes will be posted here with an updated effective date. We encourage periodic review.

20. Changelog

• 14 July 2026: Initial publication of Privacy Policy for robonarrative.life launch, including PIPEDA and Law 25 disclosures.

© 2026 RoboNarrative Inc. · Last updated 14 July 2026