Effective date: March 1st, 2025
ABX Stack (“we,” “us,” or “our”) provides account-based growth consulting services. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit abxstack.com, interact with us on social media, contact us, or use our services (together, the “Services”).
If you do not agree with this Policy, please do not use the Services. We may update this Policy from time to time; the “Effective date” above shows when it was last updated.
Who we are and how to contact us
- Entity: ABX Stack
- Business type: Independent consulting practice
- Location: Montréal, Québec, Canada
- Email: info@abxstack.com
For questions or to exercise your privacy rights, email info@abxstack.com.
Scope
This Policy covers personal information we process about:
- Visitors to our website and landing pages;
- Prospective customers, clients, and partners;
- Individuals who contact us or engage with our content;
- Client personnel whose data we process to provide our consulting services.
It does not apply to personal information we process on behalf of clients as their service provider under a separate agreement (e.g., a data processing addendum). In such cases, our clients’ privacy policies govern.
Personal information we collect
The personal information we collect depends on how you interact with us. It may include:
Information you provide directly
- Contact details (name, email, phone, company, role);
- Account and communication preferences;
- Content of messages you send to us;
- Billing and invoicing details (e.g., business address, tax IDs). We do not store full payment card numbers.
Information collected automatically
- Device and usage data (IP address, browser type, operating system);
- Site activity (pages viewed, links clicked, time on page);
- Approximate location based on IP.
Information from third parties
- Lead/contact data from referrals or publicly available sources (e.g., LinkedIn, company websites);
- Analytics and advertising partners (subject to your consent and settings).
Cookies and similar technologies
We use cookies and similar technologies to operate the site, measure performance, and (with consent, where required) for marketing. You can control cookies through your browser settings. If you block certain cookies, parts of the site may not function properly.
We do not respond to Do Not Track signals.
How we use personal information
We use personal information to:
- Provide and improve the Services;
- Communicate with you (support, proposals, updates);
- Manage our relationship (billing, accounting, legal);
- Operate, secure, and troubleshoot our website;
- Analyze site performance and the effectiveness of our content and campaigns;
- Send marketing communications with an opt-out option;
- Comply with legal obligations and enforce agreements.
Legal bases (EEA/UK) Where GDPR/UK GDPR applies, we process personal data based on: (i) performance of a contract; (ii) legitimate interests (e.g., running and improving our business, securing our Services, B2B marketing); (iii) consent where required (e.g., certain cookies/marketing); and (iv) legal obligations.
When we disclose personal information
We share personal information only as necessary, including with:
- Service providers/Processors who support our operations (e.g., cloud hosting, email, CRM, analytics, scheduling, billing). They are bound by contracts to protect your information and act on our instructions.
- Professional advisors (e.g., legal, accounting, auditors).
- Compliance and legal when required to satisfy applicable law, regulation, subpoena, or court order; to protect rights, safety, or property; or to enforce agreements.
- Business transfers in the event of a merger, acquisition, or sale of assets.
We do not sell personal information and we do not share personal information for cross‑context behavioral advertising as defined by California law.
International data transfers
We are based in Canada and may process data in other countries. Where required, we use appropriate safeguards for cross‑border transfers (e.g., Standard Contractual Clauses) and take steps to ensure an adequate level of protection consistent with applicable law.
Data retention
We keep personal information only as long as needed for the purposes described in this Policy, to comply with legal/contractual obligations, resolve disputes, and enforce our agreements. Retention periods depend on the type of data and context of processing.
Your privacy rights
Your rights depend on where you live. We will honor requests as required by applicable law.
EEA/UK (GDPR/UK GDPR) – You may have the right to: access; correct; delete; restrict or object to processing; data portability; and withdraw consent where processing is based on consent. You may lodge a complaint with a supervisory authority in your country or the UK ICO.
Canada (PIPEDA & Québec Law 25) – You may have the right to request access to and correction of your personal information, withdraw consent (subject to legal/contractual limits), and make a complaint to the Office of the Privacy Commissioner of Canada or the Commission d’accès à l’information du Québec.
California (CCPA/CPRA) – California residents may have the right to know/access, correct, and delete personal information, and to opt out of sales or sharing for cross‑context behavioral advertising. We do not sell or share personal information. You also have the right not to be discriminated against for exercising your rights.
How to exercise your rights – Email info@abxstack.com with your request and sufficient information to verify your identity. We may need additional details to process your request. We will respond within the time required by law.
Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
Marketing communications
You can opt out of marketing emails by using the unsubscribe link in the email or by contacting us. Even if you opt out, we may still send non‑marketing communications (e.g., service, legal, or billing notices).
Children’s privacy
Our Services are intended for business users and are not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us to request deletion.
Third‑party links
Our website may link to third‑party sites or services we do not control. Their privacy practices are governed by their own policies.
Changes to this Policy
We may update this Policy from time to time. We will post the updated version on this page with a new effective date. If changes are material, we will take additional steps to notify you as required by law.
Additional information for clients
When we act as a service provider/processor to a client, we process personal information per the client’s instructions and our agreement. If your data was provided to us by a client, please direct any rights requests to that client. We will assist them as required.
Contact
Questions or requests? Email info@abxstack.com.
Service providers we use
- Cloud hosting, communications & productivity: Google Workspace
- Website & analytics: WordPress, Google Analytics/GA4 (consent-based)
- Scheduling: Calendly