Privacy Policy

1. Who We Are

Kesis & Sisters Inc. ("Kesis & Sisters", "we", "us", "our") is a Canadian corporation providing oncology decision-support technology and strategic advisory services. Our website is located at kesis.ca.

We are subject to the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. Questions about this policy or our privacy practices can be directed to our Privacy Officer at info@kesis.ca.

2. What Personal Information We Collect

We collect personal information only when you voluntarily submit it to us via our contact form. The information collected includes:

• Full name
• Email address
• Organization (optional)
• Role (e.g., clinician, researcher, patient/caregiver, partner)
• Subject of your inquiry
• Message content

We do not use cookies, tracking pixels, or persistent browser storage. Our website analytics are provided by Cloudflare Web Analytics, which is cookieless and does not collect personally identifiable information.

3. Why We Collect This Information

We collect this information for the sole purpose of responding to your inquiry. Specifically, we use it to:

• Understand the nature of your question or request
• Respond to you by email
• Route your inquiry to the appropriate person at Kesis & Sisters

We do not use your contact form information for marketing, advertising, or any purpose beyond responding to the inquiry for which it was submitted.

4. Legal Basis and Consent

By submitting the contact form, you consent to the collection and use of your personal information as described in this policy. You may withdraw consent at any time by contacting us at info@kesis.ca, though withdrawal of consent may limit our ability to respond to your inquiry.

5. How We Store and Protect Your Information

Contact form submissions are transmitted via TLS-encrypted HTTPS to our email delivery provider, Resend (resend.com), and delivered to our internal email inbox. Resend processes data in accordance with SOC 2 Type II standards.

Emails received through the contact form are stored in our secure business email environment. We retain contact correspondence for as long as is reasonably necessary to address your inquiry and maintain appropriate business records, typically no longer than three (3) years unless a longer period is required by law or ongoing business necessity.

We take reasonable technical and organizational measures to protect personal information against unauthorized access, disclosure, or loss.

6. Disclosure to Third Parties

We do not sell, rent, or trade your personal information. We share information only with service providers who assist us in operating our website and delivering our services, specifically:

• Resend (resend.com) — email delivery infrastructure used to route contact form submissions to our inbox. Resend receives the information you submit in order to deliver it to us and does not use it for any other purpose.
• Cloudflare, Inc. — provides DNS, CDN, and web security services for kesis.ca. Cloudflare may process connection metadata (IP address, request headers) as part of normal network operations, governed by Cloudflare's Privacy Policy.

We may disclose personal information if required to do so by law or in response to a valid legal process.

7. Your Rights Under PIPEDA

Under PIPEDA, you have the right to:

• Know what personal information we hold about you
• Request access to your personal information
• Request correction of inaccurate personal information
• Withdraw consent to our collection or use of your personal information
• File a complaint with the Office of the Privacy Commissioner of Canada

To exercise any of these rights, contact our Privacy Officer at info@kesis.ca. We will respond to access requests within 30 days as required by PIPEDA.

8. International Data Transfers

Our email delivery provider (Resend) may process and store data on servers located outside Canada, including in the United States. By submitting the contact form, you acknowledge that your information may be transferred to and processed in other jurisdictions whose privacy laws may differ from those of Canada.

9. Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently received information from a minor, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page indicates when the policy was last revised. Continued use of our website following any changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact:

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at 1-800-282-1376.