Your information.
Handled thoughtfully.

Privacy notice · Updated October 17, 2026

This notice explains how Toronto Consulting Group (TCG) uses information submitted through this website. For privacy questions, access, correction, or deletion requests, contact ethan@tcg.to.

What we collect

Email signup forms collect your email address and the consent you provide. Project enquiries collect your name, email, project context, goals, and requested scope. They also collect any optional organisation, role, location, phone, contact preference, website, audience, existing resources, constraints, decision process, budget, timing, and deadline details you share. We also record submission dates and campaign source parameters included in the page address.

How we use it

We use project details to review your enquiry, correspond with you, and prepare a proposed engagement where appropriate. Requesting a quote does not automatically subscribe you to promotional email. If you separately choose to subscribe and confirm your email, we use your address to send emails from Toronto Consulting Group, including promotional messages.

Email preferences

Marketing emails include an unsubscribe link. You can also ask to be removed by emailing ethan@tcg.to. We keep a limited record of consent and unsubscribes to respect your preferences. Requests made while the email service is being set up are not automatically added to a promotional mailing list.

Service providers and storage

The website uses OpenAI Sites and Cloudflare infrastructure to host the application and store submitted records. When email delivery is activated, Brevo processes email addresses and relevant subscription information to provide confirmations, list management, and campaigns. These providers may process data outside Canada. TCG does not sell your personal information.

Security and retention

Access to the management workspace is restricted to the TCG owner. The website uses encrypted connections, server-side access checks, and measures to reduce form abuse. A temporary, hashed network identifier expires after up to two hours to limit repeated submissions and is removed during subsequent form activity. No system can guarantee absolute security. We retain enquiry and subscription records as needed for the stated purposes, subject to deletion requests and any recordkeeping obligations.

Cookies and analytics

This website does not add advertising pixels or third-party marketing analytics. The hosting platform may use essential authentication cookies for private site access and the owner workspace. When campaigns are enabled in Brevo, email delivery and engagement reporting may be available under Brevo’s settings. Links may contain campaign source parameters.

Your choices

You may choose not to provide optional information, unsubscribe from marketing, or request access, correction, or deletion by contacting TCG. We may retain minimal suppression records to avoid contacting you again after an unsubscribe request. Please avoid submitting sensitive personal or confidential business documents through the enquiry form.