1. Scope of this policy
This Privacy Policy explains how WalsonParker handles personal information associated with its public website, inquiries and related business communications. WalsonParker operates in the United States and Canada. This policy is intended to describe general practices in that context; the rights and obligations applicable to a particular interaction depend on the relevant federal, state or provincial law.
“Personal information” means information that identifies an individual, or that can reasonably be linked to an identifiable individual. Business contact information may be personal information, depending on its use and the applicable law. Information that has been appropriately anonymized and cannot reasonably identify an individual is treated differently where permitted by law.
Separate notices or written agreements may apply to a particular platform, engagement, employment relationship or service. Those documents address processing specific to that relationship. This policy does not replace them or reduce rights that cannot be waived under applicable law.
2. Information collected
The information involved depends on how an individual interacts with WalsonParker. It may be provided directly, generated through use of the website or supplied by an authorized representative in a business relationship.
| Category | Examples and source |
|---|---|
| Identity and business contact details | Name, business email, company, professional role, country and industry, supplied through the contact form or correspondence. |
| Inquiry and relationship information | Selected department, reason for contact, subject, message, relevant solution and subsequent communications. |
| Submission and preference records | Submission reference, time of submission, form acknowledgments, cookie preferences and technical identifiers used to protect forms and manage sessions. |
| Technical and usage information | Connection and browser information used to deliver the website, session identifiers and, when analytics is enabled, information about website interactions. |
Required fields are identified on the relevant form. Without the information necessary to understand and route an inquiry, WalsonParker may be unable to process it. Public forms should not be used to submit payment card details, government identification, medical records or other sensitive information that is unnecessary for the inquiry. Information about another individual should be provided only with appropriate authority.
3. How information is used
Personal information is used for purposes connected with the interaction in which it is collected. These include:
- Receiving, routing and responding to business inquiries and maintaining related correspondence.
- Administering an existing professional relationship or taking steps requested in connection with a proposed relationship.
- Operating website features, maintaining sessions and protecting forms against duplicate submissions, abuse and unauthorized activity.
- Recording preferences and acknowledgments and responding to privacy requests.
- Understanding website usage through optional analytics when enabled.
- Meeting applicable legal requirements, resolving disputes and protecting legitimate rights and interests.
Submitting a general inquiry does not itself constitute consent to unrelated marketing. Where consent is required for an additional purpose, it must be obtained separately. A new use of information must be assessed against the original purpose, applicable notice and any consent or other authorization required by law.
4. Consent and choices
Where applicable law requires consent, the collection, use or disclosure of personal information is subject to that requirement. The appropriate form of consent depends on the sensitivity of the information, the purpose and the reasonable expectations of the individual.
Consent may be withdrawn for activities that depend on it, subject to applicable legal or contractual restrictions and reasonable notice. Withdrawal does not necessarily require deletion of records that must be retained for a separate lawful purpose. WalsonParker can explain relevant consequences when handling a request.
Optional analytics can be declined through the cookie controls. Browser settings may also be used to restrict cookies or clear stored preferences. Disabling technologies necessary for site operation may affect functionality. If marketing messages are received, the instructions provided with those messages or the contact channel below may be used to request that they stop.
6. Disclosure of information
Information may be made available to personnel and service providers involved in the relevant activity, including website hosting, technical support, communications, security and analytics. The nature of access depends on the service performed and the information needed for that purpose. Analytics providers receive information when their technologies are enabled.
Other disclosures may be necessary to comply with a lawful request, protect rights, investigate suspected misuse or administer a business transaction, subject to applicable confidentiality and privacy requirements. Information may also be disclosed at the direction of the individual or with appropriate consent.
This policy does not provide blanket permission for unrelated use or disclosure. Whether a particular disclosure constitutes a “sale,” “sharing” or targeted advertising under a state law depends on that law and the actual arrangement. Applicable notices and opt-out rights must be addressed for any activity falling within those definitions. Questions about recipients or a particular use may be submitted through the privacy contact channel.
7. Processing across borders
Online communications and the services used to support them may involve processing outside an individual’s state, province or country. In particular, use of an external analytics service may involve information being processed in locations determined by that provider’s service arrangements.
Information processed in another jurisdiction may be subject to that jurisdiction’s laws and lawful access by public authorities. Where applicable law requires notice, consent, contractual protection or another safeguard for cross-border processing, those requirements apply. WalsonParker may be contacted for information about the arrangements relevant to a specific interaction.
8. Retention of information
Retention is determined by the purpose of the record, the status of the relationship and applicable requirements. Relevant considerations include the time needed to answer an inquiry, administer a relationship, maintain security, establish compliance, resolve a dispute or meet a legal obligation.
A single retention period does not apply to all categories. Correspondence, session information, preference records and analytics data have different purposes and may be subject to different settings. Records should be deleted, securely disposed of or appropriately anonymized when they are no longer required, subject to lawful retention and backup processes.
Information about retention relevant to a particular request may be sought through the contact channel below. See also Records retention.
9. Information security
Safeguards should be appropriate to the sensitivity of information and the risks associated with its use. Website controls include session management, validation of form submissions and protection against unauthorized form requests. Security also depends on the configuration and operation of supporting systems.
No website, transmission method or storage system can be guaranteed completely secure. Individuals should avoid disclosing unnecessary sensitive information through a public form and should report suspected misuse through the established contact channel. This policy does not represent a certification or an assurance that every possible incident can be prevented.
10. Artificial intelligence and business solutions
WalsonParker develops and describes AI and digital solutions. A product description does not establish that personal information submitted through the public website is used to train a model or make an automated decision about that individual.
Where a particular solution processes personal information, its purposes, data sources, access arrangements and responsibilities should be addressed in the applicable service documentation and agreements. Any use for model training, profiling or automated decisions must be assessed and disclosed as required for that activity. This general policy does not grant unrestricted permission for those uses.
11. United States and Canadian privacy rights
United States
Depending on state law, an individual’s residence and whether the relevant law applies to WalsonParker and the processing concerned, rights may include access to or confirmation of personal information, correction, deletion, a portable copy and the ability to opt out of certain sales, sharing, targeted advertising or profiling. Some laws also provide an appeal process, authorized-agent rights or limits on particular uses of sensitive information.
These rights are subject to applicable conditions and exceptions. This general notice does not state that every state privacy statute applies to every interaction. WalsonParker will evaluate requests under the law relevant to the request and will not impose unlawful discrimination for exercising protected privacy rights.
Canada
Where Canadian private-sector privacy law applies, individuals may request access to personal information, seek correction of inaccuracies, obtain information about its use or disclosure, withdraw consent subject to applicable restrictions and raise concerns about privacy practices. Federal and provincial requirements can differ according to the organization, activity and location involved.
Handling a request
A request should identify the right or concern and provide enough context to locate the relevant information. Reasonable verification may be required to protect against unauthorized disclosure; only information appropriate to that purpose should be requested. Responses, any permitted extensions, explanations of a refusal and available appeals are subject to the applicable legal requirements. Individuals may also raise concerns with the competent privacy commissioner, regulator or other authority.
12. Children and third-party websites
The website is directed to business and professional audiences and is not intended as a service for children under 13. A parent or guardian who believes a child has submitted personal information can contact WalsonParker so the matter can be assessed and addressed as appropriate.
Links to social platforms and other external websites lead to services governed by their own notices and practices. This policy does not control their collection or use of information. Reviewing the relevant external notice is appropriate before providing information to those services.
13. Relationship to general terms
This policy addresses personal information. General website use, intellectual property, the scope of analytical materials and other conditions are addressed separately in Terms and conditions and the existing Legal and policies section.
Specific written agreements may govern an engagement or platform. A website visit, a privacy acknowledgment or an inquiry does not by itself create an advisory engagement, extend a service agreement or waive privacy rights. Nothing in this policy excludes obligations or rights that applicable law does not permit to be excluded.
14. Changes to this policy
This policy may be updated to reflect changes in the website, processing activities or applicable requirements. The date at the top identifies the most recent revision. Where a material change requires additional notice or consent, that requirement applies; publication of revised text is not a substitute for consent where consent is required.
15. Privacy inquiries and requests
Privacy questions and requests should be addressed to WalsonParker through the existing Contact us page. Select “Legal, Privacy & Compliance” as the department and “Legal, privacy or compliance” as the reason, and identify the message as a privacy request.
Include the nature of the request and sufficient information to identify the relevant interaction. Do not include identity documents, passwords or sensitive records in the initial message. If additional verification is necessary, the appropriate next step can be established in the response.
Related institutional information is available in Data subject requests and Data protection.