1. Global Data Processing
BURAK Consulting and Advisory Services ("BURAK," "we," "our") is committed to protecting your personal data in accordance with applicable privacy laws, including GDPR (EU/EEA), PIPEDA/Law 25 (Canada), CCPA/CPRA (California, USA), and PDPA (UAE/DIFC).
This Privacy Policy describes how we collect, use, share, and protect personal data from visitors to our website and individuals who engage with our consulting services. Our data controller is BURAK Consulting and Advisory Services, headquartered in Toronto, Canada.
2. Information We Collect
A. Information You Provide
- Contact details: name, email address, phone number, job title, and company name
- Inquiry and message content submitted through our contact forms
- Service preferences and marketing consent flags
- Professional background provided during consulting engagements
B. Information Collected Automatically
- IP address and browser/device information
- Pages visited, time spent on pages, and navigation paths
- Referring website URLs and search queries
- Cookie identifiers and analytics session data (subject to your consent)
C. Information from Third Parties
- LinkedIn profile information (where you engage with our social presence)
- Business contact data from publicly available professional sources
- Referral information from our partners or event organizers
3. How We Use Your Information
We process your personal data for the following purposes and on the legal bases set out below:
| Purpose | Legal Basis (GDPR) | PIPEDA / Canada | CCPA / California |
|---|---|---|---|
| Respond to inquiries and deliver services | Contract / Legitimate Interest | Consent / Contract | Business Purpose |
| Send relevant thought leadership and updates | Consent | Consent | Opt-In Consent |
| Analyze website usage and improve our services | Consent (Analytics cookies) | Consent | Business Purpose |
| Comply with legal obligations | Legal Obligation | Legal Obligation | Legal Obligation |
| Fraud prevention and security | Legitimate Interest | Legitimate Interest | Business Purpose |
4. AI & Data Ethics
BURAK may use AI tools to process or analyze de-identified or anonymized data to improve service quality. We do not use personal data to train third-party AI models without explicit consent. Our AI practices comply with applicable AI governance frameworks including the EU AI Act, Canada's Directive on Automated Decision-Making, and ISO/IEC 42001.
We are committed to responsible AI: no automated decisions with legal or similarly significant effects are made based solely on automated processing without human review.
5. Disclosure of Your Information
We do not sell your personal data. We may share information with:
- Service providers (email platforms, CRM, cloud hosting) acting as data processors under binding agreements
- Professional advisors (lawyers, accountants) subject to confidentiality obligations
- Regulatory authorities when required by law or legal process
- Successor entities in the event of a merger, acquisition, or business transfer
6. International Transfers
BURAK operates across Canada, the USA, UAE, and India. Personal data may be transferred between these jurisdictions. For transfers from the EEA or UK, we use Standard Contractual Clauses (SCCs) or equivalent transfer mechanisms. For transfers from Canada, we ensure comparable protection as required under PIPEDA.
7. Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including encryption, access controls, regular security audits, and employee training. We retain personal data only as long as necessary for the purposes outlined in this policy or as required by law.
8. Your Privacy Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion ("right to be forgotten") where applicable
- Object to or restrict processing
- Data portability in a structured, machine-readable format
- Withdraw consent at any time (without affecting prior lawful processing)
- Lodge a complaint with your local supervisory authority
To exercise any of these rights, contact us at info@burak-consulting.com with your request. We will respond within 30 days (or as required by applicable law).
9. Cookies
Our website uses cookies and similar tracking technologies. We use:
- Necessary cookies: Essential for site functionality and security — always active
- Analytics cookies: Help us understand how visitors interact with our site (requires consent)
- Marketing cookies: Used to deliver relevant content and advertisements (requires consent)
You can manage your cookie preferences at any time by clicking "Manage preferences" in the cookie banner. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.
10. Contact
For any privacy-related inquiries or to exercise your rights:
- Email: info@burak-consulting.com
- Phone: +1-647-875-8784
- Mail: BURAK Consulting and Advisory Services, Toronto, Ontario, Canada