Privacy Policy

Last updated: November 6, 2026

VYSHYNSKYI ("we", "our", "us") is a boutique consultancy based in Toronto, Ontario, Canada. This policy explains what personal information we collect through vyshynskyi.ca, why, who else handles it, how long we keep it, and the choices and rights you have. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and its ten fair information principles, and Canada's Anti-Spam Legislation (CASL) for commercial electronic messages.

1. Accountability

Kostiantyn Vyshynskyi is responsible for our compliance with this policy and is our privacy officer. Send questions, access requests or complaints to contact@vyshynskyi.ca. We remain responsible for personal information in our custody, including information handled for us by the service providers listed in section 5.

2. What we collect, and why

We collect only what we need for the purposes below, and we tell you the purpose when we ask.

  • Contact form and email. Your name, email address, phone number (if you give it), company name and the message you write. Purpose: to reply to your enquiry, scope a possible engagement and, if you become a client, to deliver and invoice our services.
  • Optional cookies (analytics), only if you accept. Page views, approximate location (city level), device and browser type, and how you arrive at and move through the site, collected through Google Analytics via Google Tag Manager. Purpose: to understand which pages are useful and improve the site. This is off until you choose "Accept optional cookies".
  • Technical data. Our hosting provider (Cloudflare) processes your IP address and request details to deliver the site, block abuse and keep it secure. We do not use this to profile you.
  • Your cookie choice. We store your accept or reject choice in your browser (section 6).

We do not knowingly collect personal information from children under 13, and the site is not directed at them. We do not collect sensitive information through the site and ask you not to send any.

3. Consent

We ask for your consent before we collect, use or disclose your personal information, in the form that fits the sensitivity of the information. Sending us a message is your consent to our using it to reply. Analytics needs your separate, opt-in consent, and we treat a browser Global Privacy Control signal as a refusal. You can withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice, by writing to us or, for analytics, by changing your cookie settings. Withdrawing may mean we can no longer respond to your request.

4. Marketing messages (CASL)

We send commercial electronic messages only with your express consent, or where CASL allows implied consent (for example, an existing business relationship or a conspicuously published business address combined with a message relevant to your role). Every such message identifies us and has a working unsubscribe mechanism, which we honour within 10 business days.

5. Who else handles your information

We do not sell or rent personal information. We use these service providers, who act on our behalf:

  • Cloudflare, Inc.: website hosting, DNS and security delivery.
  • EmailJS: relays the contact form message to our mailbox.
  • Microsoft 365: our business email, where your messages are stored.
  • Google (Analytics and Tag Manager): analytics, only if you accept.

We may also disclose information when the law requires it, to respond to a lawful request from a government body, or to protect our rights and safety. Our providers operate internationally, so your information may be stored or processed outside Canada, including in the United States, where it may be accessible to courts and authorities under local law. We use contractual and technical safeguards and share only what each provider needs.

6. Cookies and similar technologies

  • Strictly necessary: vy-consent (browser local storage). Remembers your choice. It holds no personal information and never leaves your browser. Kept until you clear it.
  • Analytics (only after you accept): Google Analytics cookies such as _ga and _ga_*. Up to 2 years.

You can change your mind at any time: (also in the footer). Rejecting analytics removes the Google cookies on this site and stops Google Tag Manager from loading. You can also block cookies in your browser settings.

7. How long we keep it

Enquiries that do not lead to an engagement: up to 24 months, then deleted. Client records and invoices: as long as the engagement lasts and for the period Canadian tax and corporate law require (generally six years). Analytics data: up to 14 months in Google Analytics. We securely delete or anonymise information we no longer need.

8. How we protect it

We use encryption in transit (HTTPS), access limited to people who need it, multi-factor authentication on our accounts, and a static website with no database of visitors. No system is perfectly secure. If a breach creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as PIPEDA requires, and keep a record of it.

9. Your rights

You may, subject to the exceptions in PIPEDA:

  • ask what personal information we hold about you and how it has been used and disclosed;
  • ask us to correct information that is inaccurate or incomplete;
  • withdraw your consent;
  • ask us to delete information we no longer need.

Write to contact@vyshynskyi.ca. We may need to verify your identity, and we respond within 30 days, free of charge in most cases. If we refuse, we will explain why. Residents of Quebec also have the rights set out in Quebec's Law 25 where it applies, and we will honour them on request.

10. Complaints

If we have not resolved your concern, you may complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca or 1-800-282-1376.

11. Changes to this policy

We will post changes here and update the date above. If a change is significant, we will say so prominently on the site, and if we want to use your information for a new purpose we will ask you first.

12. Contact

Privacy officer: Kostiantyn Vyshynskyi, VYSHYNSKYI, Toronto, Ontario, Canada
Email: contact@vyshynskyi.ca
Phone: +1 (647) 939-9824