Privacy Policy

Version 1.1 — August 2026

1. Our Commitment to Privacy

SSB Defence is a trade name used by StartSmartBusiness.com Inc. We are committed to safeguarding personal information entrusted to us and to handling it responsibly, transparently and in accordance with applicable privacy requirements.

We believe privacy and information security are fundamental parts of responsible technology management.

2. Scope

This Privacy Policy applies to personal information collected through this website; contact, consultation and assessment requests; client and prospective-client communications; resource downloads where information is requested; business relationships; and related online services operated by SSB Defence.

Separate agreements, notices or privacy requirements may apply to information processed as part of a specific client engagement.

3. Information We May Collect

• Contact information such as name, business email address, telephone number and organization.
• Business information supplied as part of an inquiry, consultation or assessment request.
• Information provided through our free or paid assessment processes.
• Communications, correspondence and communication preferences.
• Technical information such as IP address, browser information, device information, server logs and security events.
• Website analytics and cookie information where those technologies are enabled.

We seek to limit collection to information reasonably necessary for the relevant business purpose.

4. How We Use Information

We may collect and use personal information to respond to inquiries and requests; provide consultations, assessments and other services; establish and administer client and prospective-client relationships; prepare requested reports, recommendations and communications; operate, maintain and improve our website and services; protect our systems, website, clients and users against security threats; investigate suspected misuse, fraud or security incidents; maintain appropriate business and security records; meet contractual, legal and regulatory obligations; and communicate with individuals where permitted or requested.

We do not use personal information for purposes that are materially different from those for which it was collected unless permitted by law or appropriate consent has been obtained.

5. Consent and Lawful Bases

Where Canadian privacy law applies, we seek meaningful consent where required and limit the collection, use and disclosure of personal information to identified and appropriate purposes. The form of consent may vary depending on the nature and sensitivity of the information and the circumstances in which it is collected.

Where the General Data Protection Regulation (GDPR) applies, processing may rely on consent, performance of a contract, steps requested before entering into a contract, legitimate interests, compliance with legal obligations, or another lawful basis permitted under applicable law. Where processing relies on legitimate interests, we seek to consider those interests against the rights and reasonable expectations of the individuals concerned.

6. Limiting Collection, Use and Retention

We seek to collect only information reasonably necessary for identified purposes and to use and disclose it only for those purposes or as otherwise permitted or required by law.

Personal information is retained only for as long as reasonably required for the purposes for which it was collected and for legitimate business, contractual, legal, security, insurance and record-keeping requirements. When personal information is no longer reasonably required, we seek to securely delete, destroy or anonymize it, subject to applicable legal and technical requirements.

7. Security Safeguards

SSB Defence uses administrative, technical and organizational safeguards designed to protect information against unauthorized access, use, disclosure, alteration, loss or destruction.

• Access controls and authentication measures.
• System and network security controls.
• Backup and recovery measures where appropriate.
• Security monitoring and logging.
• Limiting access according to business need.
• Service-provider controls.
• Administrative policies and procedures.

Safeguards are reviewed and adjusted as risks, technology, systems and business requirements evolve. No Internet-based service or information system can guarantee absolute security.

8. Service Providers and International Processing

We may use reputable third-party service providers for website and infrastructure hosting, email and communications, cybersecurity and website protection, analytics, business applications and other services required to operate the business.

Depending on the provider and service involved, information may be processed or stored in Canada, the United States, the European Economic Area or other jurisdictions. Information processed outside an individual's home jurisdiction may be subject to the laws and lawful-access requirements of the jurisdiction in which it is processed. Where required, SSB Defence uses appropriate safeguards for international transfers and cross-border processing.

9. Cookies and Analytics

Essential cookies and similar technologies may be used where necessary for website operation, security, fraud prevention and functionality. Analytics, preference, functional or marketing technologies may also be used where appropriate.

Additional information is provided in our Cookie Policy. Where applicable law requires consent before non-essential technologies are used, we will seek appropriate consent.

10. Individual Privacy Rights

Subject to applicable law, individuals may have the right to request access to personal information held about them and to request correction of information that is inaccurate or incomplete. Individuals may also challenge our compliance with applicable privacy obligations.

Where the GDPR or other applicable legislation provides additional rights, these may include erasure, restriction of processing, objection to certain processing, data portability and withdrawal of consent where processing is based on consent. These rights may be subject to legal limitations and exceptions.

We may need to verify an individual's identity before responding to a privacy-rights request in order to protect personal information against unauthorized disclosure.

11. Artificial Intelligence and Technology-Assisted Processing

SSB Defence may use technology-assisted tools, including artificial intelligence, to support internal research, analysis, documentation and business processes where appropriate.

We seek to use these technologies in a manner consistent with applicable privacy obligations, confidentiality requirements and our information-security practices. Personal, confidential or client information will not knowingly be submitted to public or consumer AI services where doing so would be inconsistent with our obligations to the individual or client.

SSB Defence does not rely solely on automated decision-making through this website to make decisions having significant legal or similarly significant effects on individuals. Additional information is provided in our Responsible AI Statement.

12. Sale of Personal Information

SSB Defence does not sell personal information.

We do not sell or rent personal information to third parties for their independent marketing purposes. Information may be disclosed to service providers or other parties where reasonably necessary for the purposes described in this policy, with appropriate consent where required, or where disclosure is required or permitted by law.

13. Privacy and Security Incidents

We maintain processes designed to identify, assess and respond to privacy and information-security incidents. Where an incident involving personal information creates notification, reporting or record-keeping obligations under applicable law, SSB Defence will take appropriate steps in accordance with those requirements.

14. Contact and Privacy Inquiries

Questions, concerns, access or correction requests, and other privacy inquiries may be directed to:

SSB Defence
A trade name of StartSmartBusiness.com Inc.
Email Privacy

Until a separate Privacy Officer contact is published, inquiries sent to this address will be routed to the person responsible for addressing the applicable privacy matter. Individuals may also have the right to raise concerns with the appropriate privacy or data-protection authority in their jurisdiction.

15. Changes to This Policy

We may revise this Privacy Policy as our services, technology, legal requirements or business practices change. Material changes may be identified through an updated version or effective date. The current version published on the SSB Defence website will apply from its stated effective date.

Version 1.1 — August 2026