Privacy
Privacy policy
Last updated 12 October 2026
This policy explains how Delphi Financial Corp. ("Delphi", "we") collects, uses, shares and protects personal information. We follow Alberta's Personal Information Protection Act (PIPA) and, where it applies, the federal Personal Information Protection and Electronic Documents Act (PIPEDA).
1. Who we are
Delphi Financial Corp. is an Alberta corporation that designs, builds and runs workflow automation for businesses and organizations. Delphi Financial Corp. operates as Delphi Workflow Automation.
2. Two kinds of information
Information we collect for ourselves. When you contact us, become a client, or work with us as a supplier, we collect some personal information about you. Most of this policy is about that information.
Information we handle for our clients. When we build or run automation for a client, we may process personal information that belongs to that client, such as details of their customers, donors or staff. We act as the client's service provider: we handle it only on their instructions and under a signed data processing agreement, and we hold none of it until that agreement is in place. The client's own privacy policy governs that information, so questions about it are best directed to the client first. You can also contact us.
3. What we collect
- When you contact us: your name, work email, company, where you'd like to start, and anything you choose to write in your message.
- When we work together: business contact details of the people we deal with at clients, prospective clients and suppliers, and records of our correspondence, agreements and invoices.
- When you visit this website: the site doesn't use cookies, analytics or tracking tools. Like any web server, our website host automatically records technical details of each visit, such as your IP address, browser and device type, the page requested and the page that linked to it. They're used only to deliver the site, keep it secure and fix problems, and are kept for less than 30 days.
Please don't send sensitive information, such as Social Insurance Numbers, banking details or health information, through our contact form or by email. If an engagement needs it, we'll arrange a secure way to receive it.
4. How we use it
- To reply to your enquiry and talk about how we might help.
- To provide our services, and to manage our agreements, billing and the working relationship.
- To meet our legal, tax and accounting obligations.
- To keep our systems and this website secure.
We don't sell personal information, and we don't use it for any other purpose without your consent, unless the law permits or requires it. We'll only send you marketing emails if you've agreed to receive them, and you can unsubscribe at any time.
5. Your consent
When you contact us, you consent to our using your information to respond. You can withdraw your consent at any time by contacting us, subject to legal or contractual limits. We'll tell you what withdrawing would mean, for example if we could no longer provide a service.
6. Who we share it with
- Service providers that help us run our business, such as our email and document services and our website host. They receive only what they need to do that work, and our agreements with them require them to protect it.
- For client work, the outside services named in that client's agreement, such as a cloud computing platform or an AI model. We review every outside service for security, including its SOC 2 report, before we use it.
- When the law requires it, for example in response to a court order.
- If our business changes hands, with the parties to a sale or merger, only as PIPA allows and on condition that they protect it.
7. Service providers outside Canada
Some of the service providers we use to run our business and deliver our services, such as email, document storage, website hosting and cloud computing, store or process personal information outside Canada, including in the United States. Information held outside Canada is subject to the laws of that country, and its courts or authorities may be able to access it. We only use providers we've reviewed for security, and our agreements require them to protect the information.
Our privacy contact (section 11) can give you our written policies and practices on service providers outside Canada, including the countries involved and the purposes, and can answer questions about how those providers collect, use, disclose or store personal information.
8. How we protect it
We protect personal information with reasonable security arrangements against unauthorized access, use, disclosure, copying, changes or destruction. Access is limited to people who need it for their work, our accounts are protected with multi-factor authentication, and we use only service providers we've reviewed for security.
9. How long we keep it
We keep personal information only as long as we need it for the purposes above, or as long as the law requires. Business and tax records are kept for at least six years, as the Canada Revenue Agency requires. Enquiries that don't lead to work are deleted after 24 months. When an engagement ends, client data is returned or deleted as set out in our agreement.
10. Your rights
- See your information. You can ask what personal information we hold about you, how we've used it and who we've shared it with.
- Correct it. If something is wrong, you can ask us to correct it.
- Withdraw consent, as described in section 5.
Send requests in writing to our privacy contact. We'll respond within 45 days, or tell you if we need longer, as the law allows. We may charge a reasonable fee for access requests, and we'll tell you the amount before we begin. In the limited cases where the law lets us refuse a request, we'll explain why.
11. Questions and complaints
Our privacy contact can answer questions about this policy and how we handle personal information, including by our service providers outside Canada:
Brad Andrus
Delphi Financial Corp., operating as Delphi Workflow Automation
brad@delphiautomation.ca
If you're not satisfied with our response, you can contact the Office of the Information and Privacy Commissioner of Alberta (oipc.ab.ca) or, for matters under PIPEDA, the Office of the Privacy Commissioner of Canada (priv.gc.ca).
12. If something goes wrong
If personal information we're responsible for is lost or accessed without authorization, and that creates a real risk of significant harm, we'll notify the Information and Privacy Commissioner of Alberta and the people affected, as the law requires. When we act for a client, we'll tell that client promptly so they can meet their own obligations.
13. Changes to this policy
We'll update this page when our practices or the law change, and change the date at the top.