Privacy Policy

1. Accountability

Choi Business Partners Inc. is responsible for personal information under its control. Our Privacy Officer oversees our privacy practices and responds to access, correction, and privacy-related requests.

2. Information we collect

We may collect:

• contact and business information, such as your name, business email, company, and optional phone number;
• information you provide about your projects, technical challenges, and potential SR&ED work;
• records of our communications with you; and
• basic technical and security information that may be recorded by our hosting infrastructure, such as IP address, browser type, access time, and requested pages.

Please do not submit tax account numbers, passwords, login credentials, or other highly sensitive information through the initial assessment form.

3. How we use information

We use personal information to:

• review and respond to your inquiry;
• assess whether our services may be relevant to you;
• provide services under a signed engagement agreement;
• maintain business and communication records;
• protect the website and prevent misuse; and
• meet legal, regulatory, and professional obligations.

We do not use assessment-form information for unrelated marketing without consent, and we do not sell or rent personal information.

4. Consent

By submitting information through this website, you consent to its collection, use, and disclosure for the purposes described at the time of collection and in this policy. You may withdraw consent, subject to legal or contractual restrictions and reasonable notice. Withdrawal may affect our ability to respond or provide services.

5. When we share information

We limit disclosure to what is reasonably necessary. We may share information with authorized personnel and contractors; Vercel, which hosts this website and its infrastructure; Resend, which transmits assessment-form emails; professional advisers; or government and law enforcement authorities when required or permitted by law.

Vercel may process information in the United States and other countries where it or its service providers operate. Resend’s primary processing operations are in the United States. Information processed outside Canada may be subject to the laws and lawful access requirements of the country where it is processed.

6. Retention

If an inquiry does not become a client engagement, we generally retain the inquiry and related communications for up to 24 months after our last interaction. Client records are retained for the periods required by the engagement agreement and applicable tax, accounting, legal, and professional requirements. We securely delete or anonymize information when it is no longer required, subject to backup and legal retention cycles. The 24-month period applies to inquiry records under our control, including our business email records. Service-provider logs and backups may be retained under the provider’s service settings, retention cycles, and legal obligations.

7. Safeguards

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information. These may include access controls, account security, secure transmission, service-provider controls, and limited access on a need-to-know basis. No electronic system or transmission method can be guaranteed to be completely secure.

8. Access and correction

You may ask whether we hold personal information about you and request access to or correction of that information, subject to exceptions under applicable law. You may also ask us to delete information that we are not required to retain. We may need to verify your identity before completing a request.

9. Third-party websites

This website may link to third-party websites. Their privacy practices are governed by their own policies, not this policy.

10. Changes to this policy

We may update this policy when our practices or legal obligations change. The effective date above identifies the current version.