Upper Harbour is a Canadian company that helps organizations understand jurisdictional compliance. We take our own data practices seriously. This policy explains what we collect, why, and where it goes.
Who we are
Upper Harbour is owned and operated by Joshua van Es in Victoria, British Columbia, Canada. Our website is upperharbour.ca.
What we collect
HarbourScan intake forms: When you submit a HarbourScan assessment request, we collect the information you provide — your name, email address, organization name, and the list of SaaS tools you select. This information is used to produce your compliance assessment and to communicate with you about the engagement.
Contact form submissions: If you contact us via email or a contact form, we collect your name, email address, and the content of your message.
Website analytics: We use privacy-respecting analytics that do not track individual users, do not use cookies, and do not collect personal information. We see aggregate page views and referral sources, not individual visitor profiles.
We do not collect payment information directly. If payment is required for a HarbourScan report, it is processed through a third-party payment provider with its own privacy terms.
Where your data is stored
Our website is hosted on GitHub Pages. HarbourScan intake data and contact form submissions are stored using Canadian-hosted infrastructure where possible. We do not intentionally store client data outside of Canada.
We recognize that as a company advising others on jurisdictional exposure, we have an obligation to practice what we recommend. We assess our own tool stack for sovereignty risk.
How we use your data
We use the information we collect to deliver the services you request (HarbourScan assessments, consultation), to respond to your inquiries, and to improve our products. We do not use your data for advertising. We do not sell, rent, or share your personal information with third parties for marketing purposes.
How long we keep it
HarbourScan engagement data is retained for the duration of the engagement and a reasonable period afterward for reference and follow-up. Contact form submissions are retained until the inquiry is resolved. You can request deletion of your personal information at any time by contacting us.
Your rights
Under Canadian privacy law (PIPEDA and, where applicable, Quebec's Law 25), you have the right to access the personal information we hold about you, to request corrections, and to request deletion. To exercise these rights, contact us at the email below.
Not legal advice
The content on upperharbour.ca — including guides, research, vendor analyses, and HarbourScan assessments — is provided for informational purposes. It is not legal advice. Compliance decisions should involve qualified legal counsel familiar with your organization's specific circumstances.
Changes to this policy
We may update this policy from time to time. The "last updated" date at the top reflects the most recent revision. Material changes will be noted on this page.
Contact
Questions about this policy or your personal information can be directed to:
Joshua van Es
Upper Harbour
[email protected]