Privacy Policy

1Introduction

One Stop Stack Inc., operating as OneStopGigs ("OneStopGigs," "we," "us," or "our"), is committed to protecting your privacy and handling your personal information with transparency and care. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website at https://onestopgigs.com (the "Site") or use our services.

This Policy is intended to comply with applicable Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, the privacy laws of Ontario. By using the Site, you consent to the collection and use of your information as described in this Policy.

Please read this Policy carefully. If you do not agree with its terms, please do not use the Site.

2Information We Collect

We collect information in the following ways and categories:

2.1 Information You Provide Directly

When you interact with the Site, you may voluntarily provide us with:

• Contact Information: Your name, business name, and email address when you submit a contact or service inquiry form.
• Account Information: Username, password, and profile details when you register for the Client Portal or Staff Portal.
• Service Information: Details about your business, financial situation, or project requirements that you share when engaging our services.
• Communications: The content of messages, feedback, or correspondence you send to us.

2.2 Information Collected Automatically

When you visit the Site, we may automatically collect:

• Usage Data: Pages visited, time spent on pages, referring URLs, click-through data, and navigation paths.
• Device and Technical Information: IP address, browser type and version, and operating system (derived from your browser's user-agent string).
• First-Party Analytics: Page visits, button clicks, scroll depth, referring URLs, and a session-scoped anonymous identifier — recorded on our own servers under our legitimate interest basis. This data is not tied to cookies and is collected regardless of your cookie preferences (see Section 4).
• Cookie and Tracking Data: Information collected through cookies and similar tracking technologies as described in Section 5 of this Policy.

2.3 Information from Third Parties

We may receive information about you from third-party services integrated with the Site (e.g., LinkedIn or Facebook if you interact with our social media presence). We handle such information in accordance with this Policy.

3How We Use Your Information

We use the personal information we collect for the following purposes:

• To respond to your inquiries and communicate with you about your service requests.
• To provide, manage, and improve our accounting, financial advisory, and technology services.
• To manage your account and Client Portal access.
• To send you administrative communications, including updates to our Terms of Use or Privacy Policy.
• To analyze usage patterns and improve the functionality, content, and user experience of the Site.
• To comply with legal and regulatory obligations.
• To detect, prevent, and address technical issues, fraud, or unauthorized access.
• To market our services to you where you have consented or where we have a legitimate interest, and to allow you to opt out at any time.

We will only use your personal information for the purposes for which it was collected, or for compatible purposes that you would reasonably expect. If we wish to use your information for a new purpose, we will seek your consent.

4Consent and Legal Basis for Processing

Under PIPEDA and applicable Canadian privacy law, we rely on the following bases for collecting and using your personal information:

• Consent: In most cases, we rely on your express or implied consent, provided when you voluntarily submit information through our forms, register for an account, or opt into communications.
• Contractual Necessity: Where we have a client engagement agreement with you, processing is necessary to fulfill our contractual obligations.
• Legal Obligation: Where processing is required to comply with applicable laws and regulations.
• Legitimate Interests: For purposes such as maintaining Site security, analyzing usage, and improving our services, where these interests are not overridden by your privacy rights. This includes our first-party, server-side analytics (page events, button clicks, scroll depth) which use a session-scoped anonymous identifier stored in your browser's sessionStorage — not a cookie — and do not involve any third party. This data is collected on all visits without requiring your explicit consent.

You may withdraw your consent at any time by contacting us at info@onestopgigs.com. Please note that withdrawing consent may affect our ability to provide certain services.

5Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve the Site. A cookie is a small text file placed on your device when you visit a website.

5.1 Categories of Cookies We Use

• Essential Cookies: Necessary for the Site to function properly, including authentication, session management, and security. These cookies are always active and cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with the Site by collecting aggregated, anonymized information about page visits and user journeys.
• Marketing Cookies: Used to deliver relevant content and advertising, and to track the effectiveness of our marketing campaigns.

5.2 Consent Management Cookies

When you make a cookie choice (Accept All, Decline All, or Manage), we set three essential cookies — cookie_consent, allow_analytics, and allow_marketing — for a period of one year. These cookies record your preferences so you are not asked again on every visit. They are set regardless of which choice you make, including if you decline all optional cookies, because they are necessary to honour your decision.

5.3 Managing Cookie Preferences

When you first visit the Site, you will be presented with a cookie consent banner. You may accept all cookies, reject optional cookies, or customize your preferences. You can update your preferences at any time via the 'Manage Cookies' link in the Site footer.

You may also control cookies through your browser settings. Please note that disabling certain cookies may limit the functionality of the Site or prevent you from accessing certain features.

6Disclosure of Your Information

We may share your information in the following limited circumstances:

6.1 Service Providers

We may share your information with trusted third-party service providers who assist us in operating the Site or delivering our services, including:

• Web hosting and infrastructure providers — for operating and securing the Site.
• Payment processors (Stripe) — when processing payments through the Site. Stripe receives payment-related personal data and operates under its own privacy policy.
• Analytics platforms (Google Analytics) — when you have consented to analytics cookies, to help us understand how the Site is used.
• Advertising platforms (Google Ads) — when you have consented to marketing cookies, to measure the effectiveness of our advertising.
• Email delivery providers — for transactional and administrative communications.

These providers are contractually required to protect your information and use it only for the purposes we specify.

6.2 Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of OneStopGigs, our clients, or the public.

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of all or substantially all of our assets, your personal information may be transferred to the acquiring entity. We will notify you of any such change and any choices you may have.

6.4 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

7Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. When determining the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, and applicable legal requirements.

Contact form submissions are retained for a period sufficient to respond to your inquiry and maintain records of our communications. Account information is retained for the duration of your account and for a reasonable period thereafter. Client engagement records are retained in accordance with applicable professional and legal standards.

When personal information is no longer required, we securely delete or anonymize it.

8Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include secure server infrastructure, encryption of data in transit (SSL/TLS), access controls, and staff training.

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach that poses a real risk of significant harm to you, we will notify you and the applicable regulatory authority in accordance with applicable law.

9Your Privacy Rights

Under PIPEDA and applicable Canadian privacy law, you have the following rights with respect to your personal information:

• Right of Access: You may request access to the personal information we hold about you, along with information about how it is being used and disclosed.
• Right to Correction: You may request that we correct any inaccurate or incomplete personal information.
• Right to Withdraw Consent: You may withdraw consent to the collection, use, or disclosure of your personal information at any time, subject to legal and contractual restrictions.
• Right to Complaint: You have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada (www.priv.gc.ca) or the applicable provincial privacy authority if you believe we have not handled your personal information appropriately.

To exercise any of these rights, please contact our Privacy Officer at info@onestopgigs.com. We will respond to your request within a reasonable timeframe (typically 30 days) and may require verification of your identity before processing your request.

10Children's Privacy

The Site is not directed to individuals under the age of 18, and we do not knowingly collect personal information from minors. If you believe that a minor has provided us with personal information, please contact us at info@onestopgigs.com and we will take steps to delete such information.

11Links to Third-Party Websites

The Site may contain links to third-party websites, including our LinkedIn and Facebook pages. This Privacy Policy applies solely to information collected through our Site. We are not responsible for the privacy practices of third-party websites and encourage you to review their privacy policies before providing any personal information.

12Cross-Border Data Transfers

Your personal information is collected and processed in Canada. If we use service providers located outside of Canada, your information may be transferred to, stored, or processed in other jurisdictions. We take steps to ensure that adequate protections are in place for any cross-border transfers, consistent with applicable Canadian privacy law.

Please be aware that personal information transferred outside Canada may be subject to the laws of the receiving country, and may be accessible to governmental authorities in that jurisdiction.

13Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes, we will update the 'Last Updated' date at the top of this Policy and, where appropriate, notify you by email or by a notice on the Site. Your continued use of the Site after any changes constitutes your acceptance of the updated Policy.

We encourage you to review this Policy periodically to stay informed about how we are protecting your information.

14Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact our Privacy Officer: