Trust and privacy

Privacy Policy

Effective August 17, 2026 · Notice version 2.1

1. Scope and accountability

This policy applies to the public Teravance Intelligence website and its secure contact process, operated from Alberta, Canada. Teravance Intelligence is responsible for personal information under its control and has designated a privacy owner to oversee compliance. Alberta’s Personal Information Protection Act (PIPA) generally governs our Alberta activities. The federal Personal Information Protection and Electronic Documents Act (PIPEDA) may also apply, including to personal information handled in interprovincial or international commercial activity.

Catalyst customer accounts, contracted services, personnel records, and information processed for a customer may be governed by separate notices, agreements, and instructions. This policy does not replace those terms.

2. Personal information we collect

Information you provide

If you submit the contact form, we collect the inquiry type, your name, business name, work email, optional phone number, team size, message, preferred contact method, and privacy and optional marketing choices. The form also records the current Alberta service area.

Service and security information

We create a submission reference and record timestamps, delivery and processing status, consent version and time, and limited technical or security events needed to operate the form, enforce rate limits, prevent cross-site requests, investigate abuse, and diagnose delivery failures. Network identifiers used for anti-abuse controls are minimized or transformed where practical. Google reCAPTCHA receives the information necessary to assess whether a form submission is made by a person, which may include network, browser, device, interaction, and cookie information under Google's applicable privacy terms. We do not intentionally place contact-form contents in analytics or retain complete HTTP request headers as part of an inquiry record.

3. Information the public website does not request

Do not submit passwords, payment-card or banking information, government identification, health information, customer records, credentials, or other confidential records through the public form. The public website does not currently provide online purchasing or public customer registration, access a device address book, collect social-media contacts, or use advertising profiles. If sensitive documents are later required, we will arrange an appropriate exchange method.

4. Why we collect, use, and disclose information

We limit collection, use, and disclosure to purposes a reasonable person would consider appropriate in the circumstances, including:

• reviewing, routing, and responding to an inquiry;
• discussing requested technology services, accessibility needs, security reports, privacy requests, partnerships, or Catalyst;
• providing occasional commercial updates only when there is valid consent or another lawful basis;
• preventing spam and misuse, maintaining availability, investigating incidents, and preserving a proportionate operational audit trail;
• administering a potential or existing business relationship; and
• meeting applicable legal, regulatory, accounting, insurance, and dispute-resolution requirements.

If we need personal information for a materially new purpose, we will identify that purpose and obtain any consent required by law before using it.

5. Consent and your choices

The form requires acknowledgement that we may use the submitted information to respond. Optional marketing consent is separate and is not required to make an inquiry. Consent may be express or implied where permitted, depending on the sensitivity of the information and the circumstances. You may withdraw consent for future use, subject to reasonable notice and any legal or contractual restriction. Withdrawal does not invalidate processing that was lawful before it took effect and may limit our ability to provide a requested service.

Commercial electronic messages are managed in accordance with Canada’s anti-spam requirements, including applicable consent, sender identification, and unsubscribe requirements. A response to your inquiry does not by itself enrol you in marketing.

6. Disclosure and service providers

Access is limited to designated personnel who need the information for sales, operations, administration, privacy, accessibility, or security work. We may transfer information to hosting, email-delivery, backup, security, human-verification, and other service providers that process it for the purposes described here. Google provides reCAPTCHA for automated-abuse prevention. We limit provider access where available, use contractual or other safeguards appropriate to the service, and remain accountable for information under our control as required by law.

We may disclose information without consent where applicable law permits or requires it—for example, to comply with lawful process, investigate fraud or a security incident, protect rights or safety, collect a debt, or establish, exercise, or defend a legal claim. We do not sell or rent contact-form information.

7. Processing outside Alberta or Canada

Some service providers may process or store personal information outside Alberta or Canada. In that case, the information may be subject to the laws and lawful-access powers of the jurisdiction where it is processed. We assess the service and sensitivity, restrict use to the identified purpose, and use contractual, technical, or organizational measures intended to provide appropriate protection. You may ask the privacy owner about our use of service providers and the safeguards relevant to your information.

8. Business transactions

Personal information may be used or disclosed in connection with a proposed financing, merger, reorganization, or sale of all or part of the business only as permitted by law. Where required, the parties must use the information solely to evaluate or complete the transaction, protect it with appropriate safeguards, and return or destroy it if the transaction does not proceed. If a transaction completes, the successor may use the information only for the purposes for which it was originally collected unless another lawful basis applies.

9. Retention and secure disposal

We retain personal information only as long as reasonably needed for the identified purposes and applicable legal or business requirements. Our baseline is to delete unqualified or abandoned inquiries after 90 days and delete or anonymize closed inquiries after 24 months. A longer period may apply to an active business relationship, consent record, security investigation, legal hold, claim, or statutory requirement. Protected backups expire on their normal rotation, so deletion from an immutable backup may occur when that backup expires. When information is no longer required, we securely destroy or anonymize it.

10. Safeguards

We use administrative, technical, and physical safeguards appropriate to the sensitivity and amount of information. Measures for the public form include HTTPS, server-side validation, one-time session controls, request and size limits, abuse detection, restricted access, consent evidence, protected backups, and limited audit events. Personnel and service providers receive access only where their role requires it. No Internet transmission or storage system can be guaranteed completely secure.

11. Privacy incidents

We assess suspected loss of, unauthorized access to, or unauthorized disclosure of personal information, take reasonable containment and recovery steps, and preserve appropriate incident records. We notify affected individuals and the Office of the Information and Privacy Commissioner of Alberta, the Office of the Privacy Commissioner of Canada, or another authority when applicable law requires notification.

12. Access, correction, and complaints

You may ask whether we hold personal information about you and request access to it, subject to lawful exceptions. You may also request correction of inaccurate or incomplete information, withdraw consent where applicable, or challenge our handling of your information. We may need enough information to verify your identity and locate the record. We will assist with the request, respond within the period required by applicable law, and explain any lawful refusal or extension.

Start with our privacy owner so we can address the concern. If it remains unresolved, you may have the right to complain to the Office of the Information and Privacy Commissioner of Alberta or, where PIPEDA applies, the Office of the Privacy Commissioner of Canada.

13. Children and minors

The website is intended for business users and is not directed to children or minors. We do not knowingly solicit personal information from a child through the public form. A parent or guardian who believes a minor has submitted personal information may ask the privacy owner to investigate and delete eligible information.

14. Cookies and browser-session storage

The public website does not use Teravance analytics, advertising, or personalization cookies. The secure contact form uses one temporary, strictly necessary cookie named ti_contact_session to bind a one-time form session to the browser, prevent cross-site requests, and reduce automated abuse. It is marked Secure, HttpOnly, and SameSite=Strict and expires after two hours. The form also loads Google reCAPTCHA as an essential anti-abuse service. Google may use or read cookies and receive related technical information when the verification widget loads.

The cookie-choice banner provides Accept All, Customize, and Reject All choices. Customize allows you to record separate preferences for preferences, analytics, and marketing categories, although none of those optional categories is currently active. The selection is stored only in the browser tab session, is not sent to Teravance, and is cleared when you leave the website, so the banner appears again when you return. Reject All rejects optional categories but cannot disable the essential contact-form security cookie while the form is available.

15. External links

This website may link to sites or services operated by others, including Catalyst. Their privacy practices and content are governed by their own notices. Review the applicable notice before providing personal information to another service.

16. Changes to this policy

We may update this policy as our practices, services, or legal obligations change. We will publish the updated effective date and notice version here. If a change materially affects how previously collected information is used, we will provide any further notice or obtain any consent required by law.

17. Contact the privacy owner

Use our secure contact form and choose Privacy request. Describe the request without including passwords, banking data, identification documents, or other confidential records. We will arrange a safer channel if identity documents or sensitive details are necessary.