Legal
Privacy Policy
This policy explains what personal information getonto.org collects, why it is used, who it may be shared with, and the choices available to you depending on where you are located.
Last updated · 18 September 2026
1. Who we are
This website is operated by Getonto Inc. (“GetontoTM”, “we”, “us”), 1 Dundas Street W, Suite 2500, Toronto, ON M5B 2H1, Canada. GetontoTM provides consulting services in go-to-market strategy, growth, scale, digital transformation, technology and AI advisory.
For privacy questions or requests, contact legal@getonto.org. Where applicable law requires a designated representative in another jurisdiction, that information will be added here once appointed: [EU/UK REPRESENTATIVE, IF REQUIRED].
2. Scope of this policy
This policy applies to personal information processed through getonto.org. It does not replace the confidentiality and data-protection terms of a signed consulting engagement. Where a signed agreement governs client data handled during an engagement, that agreement applies to that data.
3. Information we collect
Information you provide directly
The website’s enquiry form asks for information you choose to share so a conversation can begin.
- Name and role
- Company name, company website and company size
- Email address
- The primary challenge you describe and any additional message
Information collected automatically
The website does not currently run analytics, advertising or behavioural tracking technologies. Hosting and security infrastructure may process technical request information as a necessary part of delivering and protecting the site.
- IP address and approximate network origin
- Browser type, device type and operating system
- Requested URL, referring URL, date and time of the request
- Server and error logs used for availability, diagnostics and security
Information you send by other means
If you call or message the phone number published on this site, or email one of our published addresses, we receive the contact details and content of that communication.
Information we do not collect here
The website does not offer accounts, logins, purchases, subscriptions, downloads behind a form, chatbots or AI assistants. It does not knowingly collect special categories of data, and no payment information is collected through this site.
4. How we use information
We do not sell personal information, and we do not share personal information for cross-context behavioural advertising.
- Responding to enquiries and arranging conversations
- Assessing whether a consulting engagement is a suitable fit
- Delivering, maintaining, securing and improving the website
- Sending business communications you have requested or agreed to receive
- Meeting legal, regulatory, accounting and record-keeping obligations
- Establishing, exercising or defending legal claims where necessary
5. Legal bases for processing
Where the GDPR, UK GDPR or a comparable framework applies, we rely on the following bases.
- Consent — for optional marketing communications, and for any non-essential technologies if they are introduced in future. Consent can be withdrawn at any time.
- Contract — to take steps at your request before entering an engagement, and to perform an agreed engagement.
- Legitimate interests — to operate and secure the website, understand and respond to business enquiries, and communicate with business contacts, balanced against your rights.
- Legal obligation — where retention or disclosure is required by applicable law.
Canada
Under PIPEDA and comparable provincial laws, we rely on your express or implied consent, as appropriate to the sensitivity of the information and the purpose, and limit use to purposes a reasonable person would consider appropriate.
7. International transfers
GetontoTM is based in Canada and works with clients across North America, Europe, the Middle East and Asia. Information may therefore be processed in a country other than your own, including Canada, where privacy laws may differ from those in your jurisdiction.
Where personal information is transferred from the EEA or the UK, we use an appropriate transfer mechanism where required, such as an adequacy decision or Standard Contractual Clauses with additional safeguards as necessary.
8. Retention
Enquiry information is kept only as long as needed to respond, evaluate a potential engagement and keep a reasonable business record—typically no longer than 24 months from the last contact, unless a longer period is required by law or by an active engagement.
Technical logs generated by hosting infrastructure are kept for short operational and security periods set by the infrastructure provider.
9. Security
We use reasonable technical and organisational measures appropriate to the nature of the information, including encryption in transit, access limited to people who need it, and providers selected for their security practices.
No website or transmission method can be guaranteed to be completely secure. We do not claim certification against any specific security standard.
10. Children’s privacy
This website is intended for business audiences and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided information, contact legal@getonto.org and it will be deleted.
11. Your rights
The rights available to you depend on where you live and which law applies. Not every right below applies to every person or every situation.
EEA and UK
- Access, correction, erasure, restriction, portability and objection
- The right to withdraw consent at any time
- The right to lodge a complaint with your supervisory authority, such as your national data protection authority or the UK Information Commissioner’s Office
Canada
- Access to, and correction of, personal information held about you
- Withdrawal of consent, subject to legal or contractual restrictions
- A complaint to the Office of the Privacy Commissioner of Canada or the relevant provincial authority
United States
- Where a state privacy law applies to us, rights may include access, correction, deletion, portability and the right to opt out of sale, sharing for cross-context behavioural advertising, or targeted advertising—none of which we currently carry out
- California residents may request the categories of personal information collected, the purposes of use and the categories of recipients, and may not be discriminated against for exercising a right
- Some states provide a right to appeal a refused request; an appeal can be sent to legal@getonto.org
Asia and other markets
- India — where the Digital Personal Data Protection Act, 2023 and its rules apply, rights may include access, correction, erasure, grievance redressal and nomination
- Singapore — where the PDPA applies, rights may include access, correction and withdrawal of consent
- Japan — where the APPI applies, rights may include disclosure, correction and cessation of use
- Other jurisdictions where GetontoTM actually operates or targets services
12. Marketing and electronic messages
GetontoTM sends commercial electronic messages only where permitted—based on your consent or an existing business relationship recognised by applicable law. Our messages identify GetontoTM, provide contact details and include a way to unsubscribe.
These practices are designed to align with Canada’s Anti-Spam Legislation, the US CAN-SPAM Act, GDPR and UK GDPR direct-marketing requirements and PECR, as applicable. To stop marketing messages, use the unsubscribe link or email legal@getonto.org. Necessary messages about an active enquiry or engagement may continue.
14. Automated decision-making and AI
This website does not use chatbots, AI assistants, automated lead scoring or automated decision-making that produces legal or similarly significant effects. The growth diagnostic on this site is a rule-based reflection tool that runs in the page and produces general guidance only; it is not a decision about you.
GetontoTM advises clients on AI and automation. Any use of AI within a client engagement is governed by that engagement, not by this website notice.
15. Changes to this policy
We update this policy when the website or our practices change. The date at the top of this page shows the last revision. Material changes will be highlighted on this page.
16. Contact
Privacy questions and requests: legal@getonto.org. General enquiries: hello@getonto.org. Postal: Getonto Inc., 1 Dundas Street W, Suite 2500, Toronto, ON M5B 2H1, Canada.
We may ask for information to verify your identity before acting on a request, and will respond within the timeframe required by the law that applies to you.
This policy describes the website as it is currently operated. Where a legal requirement depends on facts that cannot be determined from the website alone—such as processing volumes, establishment or contractual arrangements—GetontoTM recommends confirmation with qualified legal counsel.