Effective Date: January 1, 2025
Last Updated: January 15, 2025
Eft Nuclear Consulting Inc. (EFT Nuclear)
153 Victoria St, WATERDOWN - L0R 2H0, Canada (CA)
Email: reach@eftnuclear.hair
Phone: +1 (334) 788-1399
Website: https://www.eftnuclear.hair
This Privacy Policy governs the manner in which Eft Nuclear Consulting Inc. (referred to as "EFT Nuclear," "we," "us," or "our") collects, uses, maintains, and discloses information collected from users (each a "User" or "you") of the https://www.eftnuclear.hair website and any associated services, tools, or communications. This policy applies to the Site and all products and services offered by EFT Nuclear. We are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. By accessing or using our Site, you agree to the terms of this Privacy Policy. If you do not agree with the practices described herein, please do not use our Site or services.
EFT Nuclear operates in the nuclear consulting sector, providing expert advisory, risk assessment, regulatory compliance, and technical analysis services. Given the sensitive nature of nuclear energy and related technologies, we place the highest priority on data protection, confidentiality, and transparency. This Privacy Policy explains in detail the types of information we may collect from you or that you may provide when you visit our Site, as well as our practices for collecting, using, maintaining, protecting, and disclosing that information. We have structured this document to be as comprehensive as possible, covering every aspect of our data handling practices, your rights, and our legal obligations under applicable laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) of Canada and other relevant international frameworks.
EFT Nuclear Consulting Inc. (EFT Nuclear) is a Canadian corporation headquartered at 153 Victoria St, WATERDOWN - L0R 2H0, Canada. We specialize in providing high-level consulting services to the nuclear energy industry, including but not limited to nuclear safety analysis, regulatory strategy, operational optimization, decommissioning planning, and advanced reactor technology assessment. Our clients include nuclear power plant operators, government agencies, research institutions, and engineering firms across North America, Europe, and Asia. As part of our commitment to excellence and integrity, we have developed this Privacy Policy to inform you about how we handle personal information when you interact with our website or engage our services.
This Privacy Policy is designed to be read in conjunction with our Terms of Service, which govern your use of our Site. Any capitalized terms not defined herein shall have the meaning ascribed to them in the Terms of Service. We reserve the right to update or modify this Privacy Policy at any time, and we will notify you of material changes by posting the updated policy on this page with a revised "Last Updated" date. Your continued use of the Site after any changes constitutes your acceptance of the new terms. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.
Our approach to privacy is rooted in the principles of accountability, identifying purposes, consent, limiting collection, limiting use, disclosure and retention, accuracy, safeguards, openness, individual access, and challenging compliance. These principles align with PIPEDA and the General Data Protection Regulation (GDPR) where applicable. We recognize that your personal data belongs to you, and we act as stewards of that data, not owners. This policy explains the choices you have regarding your data and how you can exercise your rights. If you have any questions or concerns about our privacy practices, please contact us using the information provided in Section 15.
We collect several types of information from and about users of our Site, including information that can be used to identify you personally, such as your name, email address, phone number, postal address, and professional affiliation. This information is typically collected when you voluntarily submit it to us through contact forms, newsletter sign-ups, account registration, or when you request a consultation or quote. We also collect information that is about you but does not identify you individually, such as your job title, company name, industry, and areas of interest. Additionally, we may collect technical information such as your IP address, browser type, operating system, referring URLs, and browsing behavior on our Site.
We collect personal information only to the extent that it is necessary for the purposes identified in this policy. For example, if you wish to receive our monthly newsletter on nuclear regulatory updates, we will collect your email address and your name to personalize the communication. If you request a proposal for consulting services, we will collect your company name, contact details, and a description of your project requirements. We do not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data unless you voluntarily provide it in the context of a specific engagement and we have obtained your explicit consent.
We also collect non-personal information automatically as you navigate through the Site. This includes usage details such as the pages you visit, the time and date of your visit, the time spent on each page, and the links you click. We use cookies, web beacons, and similar tracking technologies to collect this information. The data we collect automatically helps us improve our Site and deliver a better and more personalized service. For more details about our use of cookies, please refer to Section 3. We do not sell any personal information to third parties, and we do not use your data for automated decision-making or profiling that produces legal effects concerning you.
We collect information through various methods, both direct and indirect. Direct collection occurs when you provide information to us voluntarily. For instance, when you fill out a contact form on our Site, we collect your name, email address, phone number, and the content of your message. When you subscribe to our newsletter, we collect your email address and optionally your name and company. When you register for a webinar or event, we collect your contact details and professional background. When you apply for a job through our careers page, we collect your resume, cover letter, and any other information you choose to submit. In each case, we clearly indicate which fields are required and which are optional, and we explain how the information will be used.
Indirect collection occurs through automated technologies. We use cookies, which are small text files stored on your device, to remember your preferences, understand how you interact with our Site, and improve your experience. We use both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device until they expire or you delete them). We also use web beacons (also known as pixel tags) to track the effectiveness of our marketing campaigns and to compile aggregate statistics about Site usage. Additionally, we may use third-party analytics services such as Google Analytics to collect and analyze usage data. These third parties may use cookies and similar technologies to collect information about your use of our Site and other websites over time.
We also collect information from third-party sources in certain circumstances. For example, if you engage with us through a professional networking platform like LinkedIn, we may receive your profile information if you choose to share it with us. If you are referred to us by a business partner or client, we may receive your contact information and a brief description of your interest in our services. We take reasonable steps to ensure that any information we receive from third parties is collected and processed in accordance with applicable privacy laws and that you have consented to the disclosure of your information to us. We do not purchase personal information from data brokers or other commercial sources.
The types of information we collect can be categorized as follows: (a) Personal Identification Information, (b) Professional and Business Information, (c) Technical and Usage Data, (d) Communication Data, and (e) Inferred and Derived Data. Each category is described in detail below.
(a) Personal Identification Information: This includes your full name, email address, phone number, postal address, and any other information that can be used to identify you as an individual. We collect this information only when you voluntarily provide it to us. For example, if you request a consultation, we will ask for your name and contact details so that we can respond to your inquiry. We do not require you to create an account to access most parts of our Site, but if you choose to register for an account, we will collect your username and password, which are stored securely using encryption.
(b) Professional and Business Information: Given the nature of our consulting services, we often collect information about your professional background, including your job title, company name, industry sector, years of experience, areas of expertise, and professional certifications. This information helps us tailor our services to your specific needs and ensures that we provide relevant and accurate advice. We may also collect information about your company, such as its size, location, and the types of nuclear facilities or projects you are involved with. This information is used for business development, client management, and service delivery purposes.
(c) Technical and Usage Data: When you visit our Site, we automatically collect certain technical information, including your IP address, browser type and version, operating system, device type, screen resolution, and the referring URL. We also collect usage data such as the pages you view, the time and duration of your visit, the links you click, and the search terms you use. This data is aggregated and anonymized where possible to analyze trends, administer the Site, track user movement, and gather demographic information. We use this information to improve the functionality and user experience of our Site.
(d) Communication Data: This includes the content of any communications you send to us, whether through email, contact forms, phone calls, or social media. We may record or log these communications for quality assurance, training, and record-keeping purposes. If you participate in our webinars, surveys, or feedback forms, we collect your responses and any additional information you provide. We treat all communication data as confidential and use it only for the purpose for which it was provided.
(e) Inferred and Derived Data: We may analyze the information we collect to infer your preferences, interests, and likely needs. For example, if you frequently read articles about nuclear decommissioning, we may infer that you are interested in our decommissioning consulting services. This derived data is used to personalize your experience on our Site and to send you relevant marketing communications, subject to your consent where required by law. We do not use inferred data for automated decision-making that has legal or similarly significant effects on you.
We use the information we collect for the following purposes: (i) to provide and improve our services, (ii) to communicate with you, (iii) to personalize your experience, (iv) to comply with legal obligations, (v) to protect our rights and interests, and (vi) for internal business purposes such as analytics, research, and development. Each of these purposes is explained in detail below.
(i) Providing and Improving Services: The primary purpose for collecting your information is to deliver the consulting services you have requested. This includes responding to inquiries, preparing proposals, conducting assessments, delivering reports, and providing ongoing support. We also use your information to improve our services by analyzing feedback, identifying trends, and developing new offerings. For example, if multiple clients express interest in a particular regulatory topic, we may develop a white paper or webinar on that subject.
(ii) Communication: We use your contact information to communicate with you about your account, our services, and any changes to our policies or terms. We may also send you marketing communications, such as newsletters, event invitations, and promotional offers, but only if you have opted in to receive such communications. You can opt out of marketing emails at any time by clicking the unsubscribe link in the email or by contacting us directly. We also use your information to respond to your inquiries, comments, or complaints.
(iii) Personalization: We use the information we collect to personalize your experience on our Site. For example, we may display content that is relevant to your industry or interests, or we may remember your preferences so that you do not have to re-enter them each time you visit. Personalization helps us provide a more efficient and enjoyable user experience.
(iv) Legal Compliance: We may use your information to comply with applicable laws, regulations, and legal processes. This includes responding to subpoenas, court orders, or other lawful requests from public authorities. We may also use your information to enforce our Terms of Service, to detect and prevent fraud, and to protect the security and integrity of our Site and services.
(v) Protection of Rights and Interests: We may use your information to protect our rights, property, or safety, and the rights, property, or safety of our users, employees, or others. This includes taking legal action against individuals who violate our policies or engage in illegal activities.
(vi) Internal Business Purposes: We use aggregated and anonymized data for internal business purposes such as data analysis, research, product development, and improving our marketing strategies. For example, we may analyze usage patterns to determine which pages of our Site are most popular and to identify areas for improvement. We may also use your information to train our staff and to evaluate the effectiveness of our services.
We process your personal information on the following legal bases, as applicable under the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where relevant, the General Data Protection Regulation (GDPR) for individuals in the European Economic Area (EEA) or the United Kingdom. We have identified the appropriate legal basis for each processing activity and have documented our reliance on that basis.
(a) Consent: We rely on your consent for the collection, use, and disclosure of your personal information in many circumstances. For example, when you subscribe to our newsletter, you provide explicit consent for us to use your email address for that purpose. You may withdraw your consent at any time by contacting us or by using the unsubscribe mechanism provided in our communications. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
(b) Contractual Necessity: We process your personal information when it is necessary for the performance of a contract with you or to take steps at your request before entering into a contract. For instance, if you engage us to provide consulting services, we need your contact information and project details to fulfill our obligations under the service agreement. Without this information, we would not be able to provide the requested services.
(c) Legal Obligation: We may process your personal information to comply with a legal obligation to which we are subject. This includes obligations under Canadian federal and provincial laws, as well as international laws applicable to our operations. For example, we may be required to retain certain records for tax or regulatory purposes, or to disclose information to government authorities in response to a lawful request.
(d) Legitimate Interests: We may process your personal information for our legitimate interests, provided that such interests are not overridden by your rights and interests. Our legitimate interests include improving our services, ensuring the security of our Site, conducting analytics, and marketing our services to existing clients. We conduct a balancing test to ensure that our interests are proportionate and that we do not infringe on your privacy. You have the right to object to processing based on legitimate interests.
(e) Vital Interests: In rare circumstances, we may process your personal information to protect your vital interests or the vital interests of another person. This could include situations where you are incapacitated and we need to share your information with emergency services. We will only rely on this basis when absolutely necessary.
We do not sell, trade, or rent your personal information to third parties. We may share your information with trusted third parties who assist us in operating our Site, conducting our business, or providing services to you, provided that those third parties agree to keep your information confidential and use it only for the purposes for which we disclose it to them. These third parties include: (i) service providers such as web hosting companies, email marketing platforms, analytics providers, and payment processors; (ii) professional advisors such as lawyers, accountants, and consultants; (iii) business partners with whom we jointly offer services or co-sponsor events; and (iv) government authorities or law enforcement agencies when required by law.
We require all third parties that process personal information on our behalf to enter into data processing agreements that comply with applicable privacy laws. These agreements specify the scope and purpose of processing, the duration of processing, the types of personal information involved, and the obligations of the third party to protect the data. We conduct due diligence on our service providers to ensure they have adequate security measures in place. We do not authorize third parties to use your personal information for their own purposes, and we do not allow them to disclose your information to additional parties without our explicit consent.
In the event of a merger, acquisition, reorganization, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity. We will notify you of any such change in ownership or control and will ensure that the acquiring entity agrees to protect your information in accordance with this Privacy Policy. We may also disclose your information if we believe in good faith that such disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
EFT Nuclear is based in Canada, and your personal information may be stored and processed in Canada, the United States, the European Union, or other countries where we or our service providers operate. We transfer personal information across international borders only when necessary for the purposes described in this Privacy Policy and in compliance with applicable data protection laws. When we transfer your information to countries that have not been deemed to provide an adequate level of data protection, we implement appropriate safeguards to protect your information.
For transfers from the European Economic Area (EEA) or the United Kingdom to Canada, we rely on the European Commission's adequacy decision for Canada (under PIPEDA) or, where applicable, standard contractual clauses approved by the European Commission. For transfers to other third countries, we use standard contractual clauses, binding corporate rules, or other lawful transfer mechanisms. We also ensure that our service providers are contractually obligated to protect your personal information in accordance with this Privacy Policy and applicable laws.
We take steps to ensure that any international transfer of your personal information is subject to appropriate security measures, including encryption, access controls, and data minimization. We regularly review our data transfer practices to ensure compliance with evolving legal requirements. If you are located in the EEA or the UK, you have the right to obtain a copy of the safeguards we use to protect your information when it is transferred internationally. To request such information, please contact us using the details in Section 15.
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The retention period varies depending on the type of information and the context in which it was collected. For example, we retain contact information for clients and prospects for the duration of our business relationship plus a reasonable period thereafter to allow for follow-up and to comply with record-keeping obligations. We retain usage data for analytics purposes for a period of 26 months, after which it is anonymized or deleted.
We have established a data retention policy that specifies the retention periods for different categories of personal information. We review our retention periods periodically to ensure that they are appropriate and that we are not holding data longer than necessary. When we no longer need your personal information, we will securely delete or anonymize it. In some cases, we may need to retain your information for a longer period to comply with legal or regulatory requirements, such as tax laws or anti-money laundering regulations. For example, we may retain financial records for up to seven years as required by the Canada Revenue Agency.
We also retain your personal information if it is necessary to protect our legal interests, such as in the event of a dispute or litigation. In such cases, we will retain the information until the matter is resolved and any applicable appeal periods have expired. After the retention period has expired, we will securely destroy your personal information using industry-standard methods, such as shredding physical documents and securely erasing electronic files. We maintain a data retention schedule that is available upon request.
We implement a variety of security measures to maintain the safety of your personal information when you enter, submit, or access your information. These measures include physical, technical, and administrative safeguards designed to protect your information from unauthorized access, alteration, disclosure, or destruction. We use industry-standard encryption protocols, such as Transport Layer Security (TLS), to protect data transmitted over the internet. Our servers are housed in secure data centers with 24/7 monitoring, biometric access controls, and fire suppression systems.
We restrict access to personal information to employees, contractors, and service providers who need to know that information in order to perform their job functions. All personnel with access to personal information are required to undergo privacy and security training and are bound by confidentiality agreements. We conduct regular security audits and vulnerability assessments to identify and address potential risks. We also have incident response plans in place to respond to data breaches or security incidents promptly and effectively.
Despite our best efforts, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee the absolute security of your information. In the event of a data breach that affects your personal information, we will notify you and the relevant supervisory authorities as required by applicable law. We will provide you with information about the nature of the breach, the types of data involved, the steps we are taking to mitigate the risks, and recommendations for how you can protect yourself. We maintain cyber liability insurance to cover costs associated with data breaches.
Depending on your location and applicable law, you may have the following rights regarding your personal information: (i) the right to access, (ii) the right to rectification, (iii) the right to erasure (right to be forgotten), (iv) the right to restrict processing, (v) the right to data portability, (vi) the right to object, (vii) the right to withdraw consent, and (viii) the right to lodge a complaint with a supervisory authority. We explain each of these rights below.
(i) Right to Access: You have the right to request confirmation of whether we process your personal information and, if so, to access that information along with certain details about the processing. You can request a copy of your personal information in a structured, commonly used, and machine-readable format. We will respond to your request within 30 days, subject to any extensions permitted by law.
(ii) Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you. We will make the correction promptly and notify any third parties with whom we have shared your information, unless this proves impossible or involves disproportionate effort.
(iii) Right to Erasure: You have the right to request that we delete your personal information in certain circumstances, such as when the information is no longer necessary for the purposes for which it was collected, when you withdraw your consent, or when you object to processing and there are no overriding legitimate grounds. We will evaluate your request and delete the information unless we are required to retain it by law or for the establishment, exercise, or defense of legal claims.
(iv) Right to Restrict Processing: You have the right to request that we restrict the processing of your personal information in certain situations, such as when you contest the accuracy of the data, when the processing is unlawful but you oppose erasure, or when you need the data to establish, exercise, or defend legal claims. When processing is restricted, we may store the data but not use it further without your consent.
(v) Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that data to another controller without hindrance, where the processing is based on consent or contract and is carried out by automated means.
(vi) Right to Object: You have the right to object to the processing of your personal information based on our legitimate interests, including profiling. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims. You also have the right to object to processing for direct marketing purposes at any time.
(vii) Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.
(viii) Right to Lodge a Complaint: If you believe that we have violated your privacy rights, you have the right to lodge a complaint with the relevant supervisory authority. In Canada, you may contact the Office of the Privacy Commissioner of Canada. In the EEA, you may contact your local data protection authority. We encourage you to contact us first so that we can attempt to resolve your concerns.
Our Site and services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you are under 16, please do not use our Site or provide any information to us. If we learn that we have collected personal information from a child under 16 without verification of parental consent, we will delete that information as quickly as possible. If you believe that we might have any information from or about a child under 16, please contact us immediately using the contact information provided in Section 15.
We recognize that children may have different privacy needs and that they may be more vulnerable to privacy risks. Therefore, we take extra precautions to protect the privacy of minors. We do not offer any services that are specifically directed to children, and we do not use any marketing techniques that target children. Our Site does not contain any content that is harmful or inappropriate for children, but we encourage parents and guardians to monitor their children's online activities and to teach them about safe internet practices.
In the event that we need to collect personal information from a child for a specific purpose, such as an educational program or a competition, we will obtain verifiable parental consent before collecting, using, or disclosing that information. We will also provide parents with the opportunity to review their child's information, to request that it be deleted, and to refuse any further collection or use. We will comply with all applicable laws regarding children's privacy, including the Children's Online Privacy Protection Act (COPPA) in the United States and similar laws in Canada and other jurisdictions.
Our Site may contain links to third-party websites, plugins, and applications, such as social media buttons, embedded content, and external resources. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices. We encourage you to read the privacy policies of every website you visit. This Privacy Policy applies solely to information collected by our Site.
We use third-party service providers to help us operate our Site and deliver our services. These providers include: (i) web hosting services (e.g., Amazon Web Services, Google Cloud Platform), (ii) email marketing platforms (e.g., Mailchimp, SendGrid), (iii) analytics services (e.g., Google Analytics, Hotjar), (iv) customer relationship management (CRM) software (e.g., Salesforce, HubSpot), (v) payment processors (e.g., Stripe, PayPal), and (vi) content delivery networks (CDNs). We select our service providers carefully and require them to comply with data protection laws and to implement appropriate security measures.
We also use social media features, such as the LinkedIn follow button and Twitter share button, on our Site. These features may collect your IP address and which page you are visiting on our Site, and they may set a cookie to enable the feature to function properly. Your interactions with these features are governed by the privacy policy of the company providing the feature. We do not share your personal information with social media platforms unless you explicitly choose to interact with them. We recommend that you review the privacy policies of any third-party services you use.
We reserve the right to update or change this Privacy Policy at any time. When we make material changes, we will notify you by posting the updated policy on this page with a revised "Last Updated" date. We may also notify you by email if you have provided us with your email address and the changes are significant. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the Site after any changes to this Privacy Policy constitutes your acceptance of the new terms.
We will not make any retroactive changes that reduce your rights under this Privacy Policy without your explicit consent. If we make changes that affect the way we use or disclose your personal information, we will provide you with a clear and conspicuous notice of those changes. We will also update our internal records and ensure that our employees and service providers are aware of the changes. If you have any questions about the changes, please contact us using the information in Section 15.
We maintain a version history of this Privacy Policy and can provide you with copies of previous versions upon request. We are committed to transparency and will keep you informed about how we handle your personal information. If you do not agree with any changes to this Privacy Policy, you should stop using our Site and services and request that we delete your personal information, subject to any legal obligations we may have to retain it.
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us using the following information. We are committed to addressing your inquiries promptly and thoroughly. We will respond to your request within 30 days, unless a longer period is required by law.
Eft Nuclear Consulting Inc. (EFT Nuclear)
153 Victoria St, WATERDOWN - L0R 2H0, Canada (CA)
Email: reach@eftnuclear.hair
Phone: +1 (334) 788-1399
Website: https://www.eftnuclear.hair
We have appointed a Privacy Officer who is responsible for overseeing our compliance with this Privacy Policy and applicable data protection laws. If you have any concerns about our privacy practices, you may direct your inquiry to our Privacy Officer by emailing reach@eftnuclear.hair with the subject line "Privacy Officer." We will investigate your concern and take appropriate action.
If you are not satisfied with our response, you have the right to lodge a complaint with the relevant supervisory authority. In Canada, you may contact the Office of the Privacy Commissioner of Canada at 30 Victoria Street, Gatineau, Quebec, K1A 1H3, or by phone at 1-800-282-1376. In the European Economic Area, you may contact your local data protection authority. We will cooperate with any such authority and comply with their decisions.