ALTIUS
← Back to site
Legal

Privacy Policy

Last updated: July 2026  ·  Altius  ·  altius.agency

1. Who we are

Altius (“we”, “us”, “our”) is an AI automation agency based in the Greater Toronto Area, Ontario, Canada. We provide automation systems and related services to allied health and wellness clinics. Our website is altius.agency. You can reach us at hello@altius.agency.

Altius is accountable for the personal information under its control. We have designated a Privacy Officer who is responsible for our compliance with this policy and with applicable privacy law. You can reach our Privacy Officer at hello@altius.agency.

2. What information we collect

We collect information in the following ways:

  • Information you provide directly — when you book a strategy call via Calendly, we collect your name, email address, and any details you provide in the booking form.
  • Communications — if you email us, we retain that correspondence.
  • Client business information — when you become a client, we collect business contact information and the access credentials and integrations needed to deliver our services. Depending on the automations you purchase, this may include your booking software (e.g. Jane App API keys and login details) and your Google Business Profile. We encrypt integration credentials such as booking-software API keys before storing them.
  • End-customer data we process on your behalf — to run your automations and dashboards, we process information about your own clients/patients, such as their name, phone number, appointment details, service booked, and appointment value. This data originates from your booking software and is stored in our secure application database (hosted on Supabase, in the Canada Central region) that powers your live dashboard. Altius processes this information as a service provider on your behalf. In this context, our client (the clinic) is the data controller and is responsible for obtaining the necessary consents from its customers. If you are a patient or customer of one of our clients and have a privacy request, please contact that clinic directly, as they control your information.
  • Usage data — our website may collect standard server logs including IP addresses, browser type, and pages visited through our hosting provider Vercel.

3. How we use your information

We use collected information to:

  • Schedule and conduct strategy calls
  • Deliver and manage automation services for clients
  • Communicate about your account or services
  • Improve our website and services
  • Comply with legal obligations

We do not sell your personal information to third parties. We do not use your information for advertising purposes.

Where we send you commercial electronic messages (such as marketing emails) we do so in compliance with Canada's Anti-Spam Legislation (CASL). Every such message includes a way to unsubscribe, and you may opt out at any time by using that link or by emailing us.

4. SMS messaging

Where we send automated SMS messages on behalf of our clients, those messages are sent to the clients' own customers who have provided consent through the client's booking and intake processes. Altius acts as a service provider in this context. Recipients may reply STOP to any SMS message to unsubscribe. Message and data rates may apply.

5. Third-party services

We use the following third-party services in delivering our operations and client automations:

  • Calendly — for scheduling strategy calls. Subject to Calendly's privacy policy.
  • Google Workspace & Google Business Profile — for email and business communications, and for review-generation automations that read your public Google profile.
  • Jane App and other booking platforms — connected via the client's own account to read booking and appointment data.
  • Go High Level — our CRM and automation platform.
  • Make.com — our automation workflow builder.
  • Vercel — hosting for our marketing website, client portal, and owner console.
  • Supabase — our database and authentication provider, hosted in the Canada Central region. It stores client account information, the data that powers client dashboards, and encrypted integration credentials.

Each of these providers operates under their own privacy policies and data handling practices.

6. International data transfers

Your account information and the end-customer data that powers your dashboards are stored in Canada (Supabase, Canada Central region). Some third-party providers we use — including Google, Go High Level, Make.com, Calendly, and Vercel — store or process certain data on servers located outside Canada, primarily in the United States. By using our website or services, you understand that some of your personal information (and, for clients, your end-customers' information) may be transferred to, stored in, and processed in jurisdictions outside Canada. While the information is in another jurisdiction, it may be accessible to the courts, law enforcement, and national security authorities of that jurisdiction. We take reasonable steps to ensure our providers maintain appropriate safeguards for personal information.

7. Data retention

We retain personal information for as long as necessary to deliver our services and comply with legal obligations. Client data is deleted within 30 days of contract termination upon written request.

8. Your rights under PIPEDA and Quebec law

As a Canadian business we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA). If you are located in Quebec, you may also have additional rights under Quebec's Act respecting the protection of personal information in the private sector (“Law 25”). You have the right to:

  • Know what personal information we hold about you
  • Request correction of inaccurate information
  • Withdraw consent to the collection or use of your information (subject to legal or contractual restrictions)
  • File a complaint with the Office of the Privacy Commissioner of Canada (or, in Quebec, the Commission d'accès à l'information)

To exercise any of these rights, contact us at hello@altius.agency. We will respond to verified requests within 30 days, as required by law.

9. Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, disclosure, or loss. These include encryption in transit (TLS) and at rest, row-level database access controls that isolate each client's data, industry-standard hashing of account passwords, mandatory two-factor authentication for our team's administrative access, encryption of stored integration credentials, and least-privilege access controls.

No method of transmission or storage is completely secure. In the event of a breach of security safeguards involving personal information that creates a real risk of significant harm, we will notify affected individuals and the appropriate regulatory authorities as required by applicable law.

10. Children's privacy

Our website and services are directed to businesses and adults, not to children. We do not knowingly collect personal information from individuals under the age of majority. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Cookies

Our marketing website does not use tracking cookies or advertising pixels. Our client portal and owner console use strictly-necessary cookies to keep you securely signed in; these are not used for tracking or advertising. Standard server logs may be maintained by our hosting provider (Vercel) for operational purposes.

12. Changes to this policy

We may update this privacy policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of our website or services after changes constitutes acceptance of the updated policy.

13. Contact

For any privacy-related questions or requests, or to reach our Privacy Officer:

Altius
Greater Toronto Area, Ontario, Canada
hello@altius.agency
altius.agency

© 2026 Altius. All rights reserved.
Privacy PolicyTerms of Service