Privacy Policy

Effective September 4, 2026

Who is responsible for your information

Business Design is a brand, methodology and program operated by Sinclair Creative Agency Inc. (“SCA,” “we,” “us,” or “our”). Business Design is not a separately incorporated legal entity. SCA is responsible for personal information handled through the Business Design Services.

1. About this Policy

This Policy explains how SCA collects, uses, discloses, stores and protects personal information through businessdesignmethod.com, app.businessdesignmethod.com, the Business Design Score, Business Design Experience, reports, workspaces and related communications (collectively, the “Services”). We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act and other applicable Canadian privacy laws.

2. Information we collect

Identity and contact information: name, email address and business contact details.
Business profile and workspace information: business name, industry, size, descriptions, assessment responses, Scores, constraints, decisions, workflows, experiments, authority boundaries, evidence, reports and feedback you provide.
Account and consent records: account identifier, sign-in events, policy version, consent choice and timestamp, and marketing preference.
Transaction information: purchases, products and payment status. Payment providers process card details under their own policies; we do not intentionally store full payment-card numbers.
Technical and usage information: IP address, browser, device, logs, cookie or similar identifiers, pages and features used, errors and security events.
Communications: support requests, feedback and messages you send to us.

3. How we use information

We use personal information to provide, secure and maintain the Services; authenticate users; save and restore workspaces; calculate and explain Scores; generate user-requested reports and recommendations; process purchases; deliver service communications; respond to support and privacy requests; diagnose errors; prevent misuse; improve the Services; comply with law; and send marketing only where we have the consent or other lawful authority required.

Business Design outputs are decision-support hypotheses. We may use workspace information to generate personalized outputs, but we do not use automated processing to make legally binding, employment, credit, insurance or similarly high-consequence decisions about you.

4. Consent and choices

We obtain consent in a form appropriate to the sensitivity of the information and the circumstances. Agreeing to the Terms and acknowledging this Policy is required to create a secure account and use account-based features. Marketing consent is separate, optional and off by default. Refusing or withdrawing marketing consent does not prevent access to the Services or requested service emails.

You may withdraw marketing consent using the unsubscribe link in a marketing message or by contacting us. Withdrawal does not affect processing already permitted by law and may limit a feature where the information is reasonably necessary to provide it.

5. How we disclose information

We may disclose personal information to service providers that support hosting, authentication, secure data storage, customer relationship management, communications, payments, analytics, support and AI-assisted functionality. They may use information only to provide services to us or as otherwise permitted by law and their applicable agreements. We may also disclose information when required or permitted by law, to protect rights and security, or in connection with a proposed or completed financing, reorganization, sale or transfer of all or part of SCA, subject to appropriate protections.

We do not sell personal information. We do not disclose a user’s confidential business workspace to sponsors or unrelated third parties for their independent marketing without express consent.

6. AI-assisted processing

Some features may use AI service providers to analyze information you submit and produce guidance or summaries. Information supplied to those features may be processed by those providers on our behalf. Avoid submitting unnecessary personal information, trade secrets or confidential third-party information. AI outputs may be inaccurate and should be reviewed by a person.

7. Storage and cross-border processing

Our service providers may store or process personal information in Canada, the United States or other jurisdictions. Information processed outside Canada may be subject to the laws of that jurisdiction and accessible to courts, law enforcement or regulatory authorities there. We use contractual, technical and organizational measures appropriate to the sensitivity of the information.

8. Retention

We retain personal information only as long as reasonably necessary for the purposes described in this Policy, including to provide an active workspace, maintain business and consent records, resolve disputes, enforce agreements and meet legal obligations. Retention periods vary by record type. When information is no longer required, we delete, anonymize or securely dispose of it, subject to lawful backup and recordkeeping requirements.

9. Safeguards

We use reasonable administrative, technical and physical safeguards appropriate to the sensitivity of the information, including access controls and secure authentication. No transmission or storage method is completely secure, and we cannot guarantee absolute security. You are responsible for controlling access to your email account and devices.

10. Access, correction, export and deletion

Subject to applicable law, you may request access to personal information we hold about you, ask us to correct inaccurate or incomplete information, request a portable copy where available, withdraw consent or ask us to delete information. We may need to verify your identity and may retain information where permitted or required by law.

Send requests to hello@businessdesignmethod.com with “Business Design privacy request” in the subject line.

11. Cookies and analytics

The Services use local storage and similar technologies where needed for authentication, saved progress, security and preferences. Optional measurement and advertising technologies are disabled unless you choose “Allow analytics.” Choosing “Necessary only” does not send Business Design conversion events to our analytics or advertising destinations. See our Tracking and Cookie Notice for details and controls.

12. Children

The Services are intended for adults and are not directed to children. We do not knowingly collect personal information from children.

13. Changes to this Policy

We may update this Policy. The effective date will be posted above. Where required by law or where a change is material, we will provide additional notice and obtain consent where required.

14. Contact and complaints

Questions, requests or complaints may be directed to Sinclair Creative Agency Inc. at hello@businessdesignmethod.com. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or the applicable provincial privacy regulator.