TRUE NORTH LATTICE INC. / WEBSITE INFORMATION

Privacy notice

Effective and last updated: November 12, 2026

1. Who we are and the scope of this notice

True North Lattice Inc. is a Canadian federally incorporated company, also registered in Ontario and operating from Southwestern Ontario. This notice explains how we handle personal information through our website, inquiry form and related correspondence. A project-specific notice or agreement may provide additional information about an engagement. This notice does not cover employee records.

2. Information we collect

3. How we use your information

We use personal information to receive, assess and respond to inquiries; communicate about your requirements; prepare and administer potential engagements; maintain appropriate business records; protect our systems; and meet applicable legal obligations. We collect and use information with consent where required and on other grounds permitted by applicable law.

Required and optional fields are identified on the form. If necessary contact or project details are not provided, we may be unable to respond or assess the inquiry. Submitting a form authorizes transmission of its entries for the stated inquiry purposes; merely browsing does not authorize collection of unsubmitted form entries.

We do not use inquiry content for unrelated marketing, targeted advertising, or training general-purpose AI models. We do not make decisions producing legal or similarly significant effects about you solely through automated processing. A materially different use requires any additional notice or consent required by law.

4. Your submission and confidentiality

Provide only information reasonably needed to describe your request. Do not submit trade secrets, health information, government identifiers, financial account details or other sensitive information through the general inquiry form. Do not include personal information about another person without appropriate authority. Arrange a suitable confidential channel and any necessary confidentiality agreement before exchanging sensitive technical material.

Submitting an inquiry does not establish a client relationship, guarantee a response or acceptance of work, create a confidentiality agreement, or subscribe you to marketing. Applicable statutory privacy and confidentiality duties remain in force. Clearing the form, closing the page or deleting a local copy does not delete information already submitted to us.

5. When information is disclosed

Authorized personnel may access inquiries as needed to respond and administer business discussions. We use service providers for hosting, form delivery, email, business storage and security. They may process information for these functions under appropriate contractual and access safeguards. We do not authorize them to use inquiry content for unrelated advertising.

Information may also be disclosed where required by law, to professional advisers where necessary, or as legally permitted to address misuse, security incidents, legal claims or protection of rights. If information is involved in a business reorganization or transfer, applicable legal safeguards and notice requirements apply. We do not publish inquiry content without appropriate authorization.

6. Service providers and international processing

The website uses OpenAI Sites and Cloudflare infrastructure. Our delivery, email and storage providers may process information in Canada, the United States or other countries where they operate. Information processed in another jurisdiction may be accessible to authorities under its laws. We do not represent that all information remains in Canada. Where required, we assess transfers and apply appropriate contractual or other safeguards.

For information the hosting providers handle independently, including platform accounts, see OpenAI’s privacy policy and Cloudflare’s privacy policy. Not every service described by those providers is used on this website. Questions about providers processing your inquiry on our behalf can be directed to our privacy contact below.

7. Cookies, tracking and privacy signals

We do not use advertising pixels, cross-site tracking, fingerprinting, social-media tracking embeds or third-party analytics in the website application. Fonts use your device’s installed fonts. Hosting and security services may use cookies or comparable controls for authentication, session management and abuse prevention.

We do not sell personal information or share it for cross-context behavioural advertising, and do not use it for targeted advertising or consequential automated profiling. There is no processing of those kinds on this website for a Global Privacy Control or other recognized universal opt-out signal to disable. The application does not otherwise change its behaviour in response to the older Do Not Track signal. We do not permit third-party advertising networks to collect information here about your activities over time and across unrelated sites.

8. Retention and security

We retain inquiry information only as long as reasonably necessary to respond, manage follow-up and a potential engagement, and meet applicable legal, accounting or dispute-related obligations. Retention decisions take account of whether an inquiry leads to work, the last substantive contact, recordkeeping requirements and any legitimate legal hold. When information is no longer needed, we securely delete or de-identify it, subject to controlled backup expiry and applicable legal requirements. Technical and security records are retained according to their operational purpose and applicable requirements.

We use safeguards appropriate to the nature of the information, including HTTPS for the website, restricted access and appropriate provider arrangements. No system or transmission method can be guaranteed completely secure. We address privacy incidents and provide notifications where required by applicable law.

9. Your privacy rights

Depending on your location, the information involved and the law that applies, you may request confirmation or access, a copy in a portable format, correction or deletion; withdraw consent where processing relies on consent; challenge compliance; or opt out of certain sales, targeted advertising or profiling. Some U.S. state laws also provide an appeal of a denied request and permit authorized agents. We do not unlawfully discriminate against individuals for exercising privacy rights.

Requests may concern records held by us and providers acting on our behalf. We verify identity and an agent’s authority only to the extent reasonably necessary, assess requests under applicable law, and respond within the applicable time limits. Legal exceptions may require retention or restrict disclosure. If a request is refused, we explain the reason where required and provide available appeal or complaint options. You may request an appeal through the same privacy-contact channel, identifying it as an appeal. You do not need to create an account to make a request.

Withdrawal of consent does not reverse processing already lawfully performed and may limit our ability to continue responding or providing services. For information a hosting platform handles independently, use its privacy-request process.

10. Privacy contact and complaints

For questions, access requests, corrections, deletion requests, consent withdrawal, complaints or appeals, contact True North Lattice Inc. — Privacy Officer through our website inquiry form. Begin your message with “Privacy request” or “Privacy appeal” and describe the request without including sensitive identity documents. We will arrange an appropriate method for any verification or confidential information needed.

You may also contact the Office of the Privacy Commissioner of Canada, the relevant provincial privacy regulator, or your U.S. state privacy regulator or attorney general. Nothing in this notice restricts a complaint or other remedy available under applicable law.

11. Canadian and U.S. visitors

We respect privacy rights under applicable Canadian and U.S. laws. Legal coverage and particular rights depend on jurisdiction, the activities involved, statutory thresholds and exceptions. Canadian requirements may include PIPEDA and applicable provincial private-sector privacy laws. California and other U.S. state laws may provide additional rights where they apply. Nothing in this notice limits non-waivable rights or represents that every privacy statute applies to every interaction.

12. Children and marketing

This business-services website is intended for adults acting in a professional capacity. It is not directed to children under 13, and we do not knowingly solicit their personal information. If you believe a child’s personal information has been submitted, contact our Privacy Officer so we can assess and address it appropriately. An inquiry does not constitute consent to receive promotional messages. Any separate marketing activity is subject to applicable notice, consent, identification and unsubscribe requirements.

13. Changes to this notice

We post revisions on this page and update the date above. We provide additional notice and obtain consent where required for material changes or new uses. Continued browsing is not treated as consent to new purposes or a waiver of privacy rights.