ERYSAN CONSULTING
Privacy Policy
Version: 0.1
Effective date: August 31, 2026
This Privacy Policy explains how ERYSAN CONSULTING (“Erysan”) collects, uses, discloses, protects and manages personal information in connection with its website and services in Canada.
Erysan is operated by Guillem Blasco as a sole proprietor registered in British Columbia.
1. Our privacy responsibility
Erysan is responsible for personal information under its control.
Erysan has designated a Privacy Officer responsible for overseeing its privacy practices and responding to privacy questions, requests and complaints.
Privacy Officer
ERYSAN CONSULTING
Email: contact@erysan.com
2. What personal information we may collect
The personal information Erysan collects depends on how a person interacts with Erysan and on the service requested.
It may include:
- name and contact information;
- country and province or territory;
- information submitted through a Fit Check, contact form or other preliminary request;
- information about the decision, situation, options, constraints, priorities, assumptions, risks or other context provided for an Erysan service;
- information submitted through a service questionnaire;
- communications, clarifications and other correspondence with Erysan;
- contract information, including the Service Confirmation, acceptance records and case reference;
- payment and transaction information needed to administer a purchase or refund;
- completed analyses, deliverables and related working information;
- information contained in a privacy request, complaint or other administrative communication; and
- technical information that may be generated when the website or online systems are used, where applicable.
Erysan asks clients to provide only information that is relevant to the request or service.
Clients should avoid providing unnecessary personal information about themselves or other people.
3. Why we collect and use personal information
Erysan may collect and use personal information to:
- receive and respond to inquiries;
- review a Fit Check or other preliminary request;
- determine whether Erysan can offer an appropriate service;
- prepare and administer a Service Confirmation and client contract;
- process and confirm payments;
- provide the agreed analysis or decision-support service;
- request or respond to clarifications;
- communicate with the client about the service;
- maintain appropriate business and transaction records;
- protect the security and integrity of Erysan’s website, systems and services;
- respond to privacy requests or complaints;
- comply with applicable legal, regulatory, accounting or other obligations; and
- establish, exercise or defend legal rights where reasonably necessary.
Erysan does not use personal information for a materially different purpose unless permitted by law or the individual provides any consent required by law.
4. How we collect personal information
Erysan generally collects personal information directly from the person concerned, including through:
- the Erysan website;
- Fit Check and other online forms;
- service questionnaires;
- email and other written communications;
- the contractual acceptance process;
- payment transactions; and
- privacy, access or correction requests.
In some situations, a client may provide information concerning another person when that information is relevant to the client’s situation. The client should provide only information that the client is entitled to provide and that is reasonably necessary for the service.
5. Service providers
Erysan uses service providers to operate its website and deliver its services.
These may include providers used for:
- website hosting and technical infrastructure;
- online forms;
- email;
- document, spreadsheet and file storage;
- payment processing; and
- other technical or administrative functions reasonably necessary to operate the service.
Service providers may process personal information only for purposes connected with the services they provide to Erysan or as otherwise permitted by applicable law.
Erysan remains responsible for personal information under its control and takes reasonable steps to select and use service providers with appropriate privacy and security protections.
6. When personal information may be disclosed
Erysan does not sell personal information.
Personal information may be disclosed:
- to service providers where reasonably necessary to operate the website or provide the agreed service;
- when the individual directs or authorizes the disclosure;
- where required or authorized by applicable law;
- to respond to a lawful request, court order or legal process;
- where reasonably necessary to protect legal rights, security or the integrity of Erysan’s services; or
- in another situation where disclosure is permitted without consent by applicable privacy law.
Erysan limits disclosures to what is reasonably necessary in the circumstances.
7. Processing outside the individual’s province or outside Canada
Some service providers used by Erysan may process or store personal information outside the individual’s province or territory and, depending on the provider and service, outside Canada.
When personal information is processed in another jurisdiction, it may be subject to the laws of that jurisdiction and may be accessible to courts, law-enforcement authorities or other authorities in accordance with those laws.
Erysan remains responsible for personal information transferred to service providers for processing and uses contractual, organizational or other appropriate measures to protect that information.
For personal information subject to Québec privacy law, Erysan carries out the assessment and contractual measures required by applicable law before communicating personal information outside Québec where those requirements apply.
8. Consent and choices
Erysan seeks consent where required by applicable privacy law.
The form of consent may depend on the nature of the information, the purpose and the circumstances.
An individual may withdraw consent to a collection, use or disclosure that depends on consent, subject to legal or contractual restrictions and reasonable notice.
Withdrawing consent may mean that Erysan can no longer provide a service that requires the personal information concerned.
Erysan may retain or use information without consent where applicable law permits or requires it.
9. Limiting collection
Erysan limits the collection of personal information to information reasonably necessary for identified purposes.
Because Erysan’s services involve analysis of situations described by clients, the amount and sensitivity of information provided may vary from one matter to another.
Clients are encouraged not to provide information that is unnecessary for the analysis.
10. Retention and destruction
Erysan retains personal information only for as long as reasonably necessary for the purposes for which it was collected and for applicable legal, accounting, contractual or dispute-resolution requirements.
Different types of information may therefore be retained for different periods.
When personal information is no longer required, Erysan takes reasonable steps to securely delete, destroy or anonymize it, as appropriate and as permitted by applicable law.
Erysan maintains internal retention and destruction practices proportionate to its activities.
11. Security
Erysan uses reasonable administrative, technical and organizational safeguards appropriate to the nature and sensitivity of the personal information under its control.
Measures may include:
- limiting access to information to what is reasonably necessary;
- using access controls and account-security measures;
- using reputable service providers and appropriate contractual protections;
- protecting accounts and devices used to access client information;
- maintaining appropriate records of privacy and security incidents; and
- reviewing practices when material changes are made to systems or information flows.
No method of electronic transmission or storage can provide absolute security.
Where a privacy or security incident creates a risk of significant harm or otherwise meets an applicable legal notification threshold, Erysan will notify affected individuals and the applicable privacy regulator as required by law.
12. Accuracy
Erysan takes reasonable steps to use personal information that is sufficiently accurate and complete for the purposes for which it is used.
Clients are responsible for providing information that is accurate to the best of their knowledge and should inform Erysan if relevant information changes or requires correction.
13. Access, correction and other privacy rights
Depending on the privacy law that applies, an individual may have rights concerning personal information held by Erysan, including rights to:
- ask whether Erysan holds personal information about them;
- obtain access to that information;
- request correction of information that is inaccurate, incomplete or ambiguous;
- withdraw consent where the processing depends on consent;
- obtain information about certain uses and disclosures;
- make a privacy complaint; and
- exercise other rights provided by applicable privacy law.
Where applicable, an individual may also have a right to receive certain computerized personal information in a structured and commonly used technological format.
A request may be subject to identity verification and to exceptions or restrictions permitted by law.
Requests may be sent to:
Privacy Officer
ERYSAN CONSULTING
contact@erysan.com
Erysan responds to requests within the period required by applicable law.
14. Privacy complaints
A person who has a question or concern about Erysan’s handling of personal information should first contact the Privacy Officer.
Erysan will review the concern and respond in accordance with its privacy complaint process and applicable law.
A person may also have the right to make a complaint to the privacy regulator with jurisdiction over the matter.
15. Website technologies
Erysan may use technical technologies that are reasonably necessary to operate, secure and maintain its website and online services.
Erysan will provide any additional information or choices required by applicable law if it uses technologies that collect personal information for analytics, identification, localization, profiling, advertising or other purposes requiring additional transparency or consent.
16. Changes to this Privacy Policy
Erysan may update this Privacy Policy when its privacy practices, services, technology or legal obligations change.
The current version and effective date will be published on the Erysan website.
Where required by applicable law, Erysan will provide additional notice of material changes.
17. Contact
Questions, privacy requests and complaints may be sent to:
Privacy Officer
ERYSAN CONSULTING
Email: contact@erysan.com