Privacy Policy
Effective date: May 10, 2026
Controller: HR All-In Inc., operating as Workplaces (“Workplaces,” “we,” “us,” or “our”). Edmonton, Alberta, Canada.
Privacy Officer: Bruce Baker — 780-850-6957 — bruce@4workplaces.com
The Business Builders By Workplaces has policies and procedures dealing with the protection of privacy. Any questions can be directed to our Privacy Officer, Bruce Baker, 780-850-6957.
Protecting privacy is important to our organization and our employees play an important role in protecting personal information. Our employees are required to adhere to this policy and take all reasonable steps to ensure that personal information is protected from unauthorized access.
This Privacy Policy is written to comply with the Personal Information Protection and Electronic Documents Act (“PIPEDA”) and Alberta’s Personal Information Protection Act (“PIPA”). It covers (a) visitors to this marketing website at 4workplaces.com, and (b) coaches and clients who use our internal coaching operations platform, The Builder.
Part A — Marketing website (4workplaces.com)
Collection, Use and Disclosure of Personal Information
In order to provide our customers with services, we require certain personal information about our customers. We do not collect any personal information through our website beyond what you voluntarily submit.
We MAY collect the following information:
- Name
- Email address
- Phone number
- Credit card information (only in the limited context of arranging payment for services — see also Part B regarding The Builder)
In the unlikely event that this information is collected, it may be used for the following purposes:
- To add you to our mailing list, which also includes electronic mail to your email address.
- To inform you of proprietary events and features.
- To confirm your appointments and forward document consents as required.
- To ensure proper phone etiquette and clear communication to phone and in-house clients.
We only collect personal information directly from you unless we have your consent to collect personal information about you from some other source, or are required or permitted by law to collect your personal information without your consent.
Provision of your email address constitutes consent to our sending you any electronic communication which would otherwise be prohibited under federal legislation known as Canada’s Anti-Spam Law (CASL). If you “friend” us on social media such as Facebook or Twitter, your doing so is consent to our doing likewise with respect to you.
We only use your personal information for the purposes outlined above. If we need to use your personal information for any other purpose we will contact you and obtain your consent prior to that use.
We do not disclose your personal information to any third parties unless we have your consent to do so, or where Provincial or Federal privacy legislation requires or permits us to make such disclosures in limited circumstances (such as in emergency situations) or we are required to do so by other laws.
You have the right to withdraw your consent to our collection, use or disclosure of your personal information at any time. By providing us with the personal information we request (as outlined above), we can ensure proper handling of your incoming communications, more efficient use of your time with regard to booking and processing, and ensure the customer service experience. If you wish to withdraw your consent, or have any questions about withdrawing your consent, please feel free to contact our Privacy Officer.
Consent
In most cases you consent to us collecting and using your personal information for the purposes outlined above in the event that you provide us with your personal information through this website. However, there may be cases where we will want to get your explicit consent to disclose your personal information.
Storing Your Personal Information
We only keep your personal information for as long as is necessary for the purposes outlined above.
If you send us an email message or an electronic communication using social media such as Facebook or Twitter, which includes personal information, we may use that information to respond to your inquiry. Electronic communications are not necessarily secure against interception, so you should not send these if you are concerned about that possibility.
Accountability
Although we use our best efforts to protect your privacy, if you have any concerns please feel free to contact our Privacy Officer. We hope that the Officer will be able to resolve any problems that you have; however, if your concerns are not resolved, the Officer can provide you with information on making a formal request.
Information Collected
When entering information or filling out forms on our site, as appropriate, you may be asked to enter your name, email address, phone number or other details to help you with your experience. Contact forms on this site are powered by Formidable Forms; submissions are stored on our WordPress installation and used solely to respond to your inquiry.
We do keep track of user visits using standard web server traffic logs for our own internal statistics gathering processes. Our website’s operating system automatically records some general, non-personal information about your web visit, such as:
- The domain of the Internet Service Provider and the IP address of the computer used to access this site;
- The type of web browser and the operating system (such as Macintosh, Unix, or Windows) used to access this site;
- The date and time of the visit to this website; and
- The URLs of the various web pages visited on this site.
This tracking system does NOT record personal information about individuals. We may collect personal information from you when you fill out a form or enter information on our site.
Use of Information
We may use the information we collect from you when you visit the website or use certain other site features in the following ways:
- To personalize your experience and to allow us to deliver the type of content and product offerings in which you are most interested;
- To improve our website in order to better serve you;
- To allow us to better serve you in responding to your customer service requests;
- To ask for ratings and reviews of services or products.
We use non-personal information for statistical analysis, and to help us make our website more useful to our visitors, or for the purposes of advertising and marketing. A user’s information is not used or disclosed for purposes other than those set out herein.
Use of Cookies
We may also use “cookies” that identify you as a return visitor. Cookies are small files that a site or its service provider transfers to your computer’s hard drive through your web browser (if you allow) that enables the site’s or service provider’s systems to recognize your browser and capture and remember certain information. For instance, we use cookies to help us remember that you have visited in the past so that we can tailor information to suit your individual preferences. They are also used to help us understand your preferences based on previous or current site activity, which enables us to provide you with improved services. We also use cookies to help us compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future.
We may also use trusted third-party services that track this information on our behalf, including PixelYourSite (Facebook/Meta Pixel) and Google Analytics.
You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You do this through your browser settings. Since different browsers handle this differently, look at your browser’s Help Menu to learn the correct way to modify your cookies. If you turn cookies off, some of the features that make your site experience more efficient may not function properly.
Third Parties
We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information with the exception of website hosting partners and other parties who assist us in operating our website, conducting our business, or serving our users, so long as those parties agree to keep this information confidential. We may also release information when its release is appropriate to comply with the law, enforce our site policies, or protect our or others’ rights, property or safety.
Non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses. We have implemented the following:
- Google Ads and Facebook Remarketing
- Google Analytics Demographics and Interests Reporting
- AdRoll marketing automation
We, along with third-party vendors such as Google, use first-party cookies (such as the Google Analytics cookies) and third-party cookies (such as the DoubleClick cookie) or other third-party identifiers together to compile data regarding user interactions with ad impressions and other ad service functions as they relate to our website. Our website uses Google Ads and AdRoll remarketing services to advertise on third-party websites — including Google — to previous visitors to our website. This includes advertisements on the Google search results page, or a site in the Google Display Network. Third-party vendors, including Google, use cookies to serve advertisements based on a visitor’s past visit to our website. Any data logged will be used in accordance with our privacy policy, and Google’s, AdRoll’s, and Facebook’s privacy policy.
Opting Out
We respect your right to privacy and your decision to choose whether or not to share your information. You may opt out of Google’s use of cookies by visiting Google’s Ads Settings or the Network Advertising Initiative opt-out page. There are third-party opt-out tools available to help you such as the Digital Advertising Alliance, the Network Advertising Initiative, and the European Interactive Digital Advertising Alliance (Europe only).
External Links
This website may contain links to other sites. Please be aware that we, The Business Builders By Workplaces, are not responsible for the privacy practices of other such sites. We encourage our visitors to be aware when they leave our site and to read the privacy statements of each and every website that collects personally identifiable information. This privacy statement applies solely to information collected by this website.
Part B — The Builder (coaching operations platform)
The Builder is the internal coaching operations platform we use to deliver Workplaces engagements. It is not sold to the public and has no open sign-up. Access is granted only to Workplaces personnel and to clients invited individually into an active coaching engagement. This Part B describes how personal information is handled inside The Builder, in addition to the general practices described in Part A.
1. Who this part applies to
Workplaces coaches who use The Builder to manage engagements, and clients who are invited to a private portal in The Builder during the course of their coaching engagement.
2. Information we collect in The Builder
- Account information. Name, email address, and authentication identifiers, provided through our identity provider, Clerk.
- Engagement data. Notes, action items, deliverables, meeting transcripts, “Soul File” documents, and other content created or uploaded by a coach or client during the engagement.
- Invoice metadata from QuickBooks Online. When a coach connects their QuickBooks Online company, The Builder stores only the data needed to mirror invoice status inside the client portal: invoice ID, QuickBooks realm ID, customer ID, total amount, currency, due date, paid date, and the QuickBooks-hosted invoice URL. The Builder does not store payment card numbers, bank account numbers, or any cardholder data.
- Usage logs. Standard application logs (timestamps, IP address, user agent, request paths) used for security and reliability.
3. How we use information in The Builder
- To deliver coaching services and operate the client portal.
- To create QuickBooks Online customers and invoices on a coach’s behalf, and to receive QuickBooks Online webhooks so the portal reflects the current invoice status.
- To authenticate users, secure the platform, prevent abuse, and meet legal obligations.
- To improve The Builder, using aggregated or de-identified information where possible.
4. AI features
Some Builder features call the Anthropic Claude API to summarize meeting transcripts and Soul File content. QuickBooks financial data is never sent to Anthropic. Anthropic processes the submitted text under its commercial API terms and does not use the content to train its models.
5. QuickBooks Online data flow
- Coaches authorize the QuickBooks Online connection through Intuit’s OAuth flow. Clients never see a QuickBooks authorization screen.
- OAuth refresh tokens are encrypted at rest and used only by server-side code to renew access tokens. Tokens are never exposed to the browser.
- The Builder writes Customer and Invoice records to QuickBooks Online on the coach’s behalf, and reads back the resulting invoice records (including paid or voided status). Beyond the limited invoice metadata listed in section 2 of this Part, QuickBooks financial data flows back to QuickBooks only and is not redistributed.
- A coach may disconnect QuickBooks at any time from the coach profile, which revokes the OAuth grant and stops further QuickBooks API calls. Mirrored invoice metadata is retained in accordance with section 8 of this Part.
6. Third-party service providers used by The Builder
We use the following providers, each under a contract that requires confidentiality and reasonable security:
- Neon — managed Postgres hosting (data at rest).
- Netlify — application hosting and edge delivery.
- Clerk — authentication and session management.
- Anthropic — AI features (transcript and Soul File summarization).
- Resend — transactional email delivery.
- Intuit (QuickBooks Online) — accounting and invoicing integration.
Some of these providers may store or process data outside Canada, including in the United States. Where that occurs, the data remains subject to the protections of this policy and the provider’s own contractual and security commitments.
7. Disclosure
We do not sell personal information. We disclose personal information only: (a) to the third-party service providers listed above, strictly to operate The Builder; (b) when required by law or to respond to lawful requests by public authorities; or (c) to protect the rights, property, or safety of Workplaces, its clients, or others.
8. Retention
Engagement records and associated invoice metadata are retained for the duration of the coaching engagement plus seven (7) years, consistent with Canada Revenue Agency record-keeping requirements for business records. Authentication logs and server logs are retained for a shorter period sufficient for security and troubleshooting. After the retention period, records are deleted or de-identified.
9. Security
- All traffic to The Builder is served over TLS.
- Data at rest in Neon is encrypted.
- Postgres Row-Level Security enforces per-engagement isolation, so users only see records scoped to their engagement.
- OAuth tokens are stored encrypted and used only server-side.
- Access to the production environment is restricted to authorized Workplaces personnel.
10. Your rights
Under PIPEDA and Alberta PIPA, you have the right to:
- request access to the personal information we hold about you;
- request correction of inaccurate or incomplete information;
- withdraw consent for certain uses, subject to legal or contractual limitations;
- request that we delete information that is no longer necessary, subject to the retention requirements in section 8 of this Part;
- complain to the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada.
Send any of these requests to bruce@4workplaces.com. We will respond within 30 days.
11. Children
The Builder is not directed to children and we do not knowingly collect information from anyone under the age of 18.
Changes to This Privacy Policy
This Privacy Policy is subject to change as we, The Business Builders By Workplaces, continue to modify and improve our practices and policies in order to serve the privacy interests of our users. The effective date above will reflect the most recent change. Material changes will be communicated to active users of The Builder.
Further Questions or Concerns
If there are any questions regarding this privacy policy, you may contact us using the information below.
The Business Builders By Workplaces (HR All-In Inc.)
Address: 10171 Saskatchewan Dr NW #213, Edmonton, AB T6E 6K3
Phone: 780-850-6957
Email: bruce@4workplaces.com
