Whira Inc.

Privacy Policy

Whira Inc. Effective Date: April 28, 2026 Last Updated: April 28, 2026

Introduction

Whira Inc. ("we," "us," or "our") is committed to protecting your privacy and handling your personal information with transparency, integrity, and care. This Privacy Policy explains what information we collect, why we collect it, how we use it, and what rights you have in relation to it.
Whira Inc. provides Fractional COO & Integrator, Fractional CFO, Process Optimization & Automation, and Business Systems Implementation services to founders and growing businesses worldwide — including clients in Canada, the United States, Australia, New Zealand, the United Kingdom, Sweden, and across Europe. Because we serve clients across multiple jurisdictions, this Privacy Policy is designed to meet the requirements of applicable privacy laws in each of those regions, including Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), the EU General Data Protection Regulation (GDPR), the UK GDPR, the Australian Privacy Act 1988, and the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) effective January 1, 2026.
This Privacy Policy applies to all personal information collected through our website at whiraconsulting.com, through our contact forms, and through our client engagement process. It does not apply to information collected through other means unless specifically stated.

Who We Are
What Information We Collect
Why We Collect Your Information
Legal Basis for Processing (GDPR & UK GDPR)
How We Use Your Information
How Long We Keep Your Information
Who We Share Your Information With
International Data Transfers
Cookies & Tracking Technologies
Your Privacy Rights
CCPA / CPRA — California Residents
PIPEDA — Canadian Residents
Australian Privacy Act — Australian Residents
Children's Privacy
Security
Links to External Sites
Privacy Policy Changes
Contact Us

1. Who We Are

Whira Inc. is an operational and financial advisory firm providing Fractional COO, Fractional CFO, Process Optimization & Automation, and Business Systems Implementation services to founders and growing businesses globally. Our website is whiraconsulting.com. For privacy-related enquiries, please contact us at contact@whiraconsulting.com.

2. What Information We Collect

We collect the following categories of personal information:
Information you provide directly:
Name and contact details (email address, phone number)
Business name, industry, and business size
Information you share in contact forms, discovery call requests, or email correspondence
Financial or operational information shared during a client engagement
Information collected automatically:
IP address and approximate location data
Browser type, device type, and operating system
Pages visited, time spent on pages, and referring URLs
Cookie identifiers and usage preferences
Information from third parties:
We may receive information about you from referral partners or third-party platforms if you engage with us through those channels
We do not collect sensitive personal information such as health data, government identification numbers, financial account credentials, or biometric data through our website.

3. Why We Collect Your Information

We collect your personal information for the following purposes:
To respond to enquiries and schedule discovery calls
To assess whether our services are a fit for your business
To deliver our Fractional COO, Fractional CFO, Process Optimization, and Business Systems services to clients
To send service-related communications and updates
To improve our website and understand how visitors engage with our content
To comply with legal obligations in applicable jurisdictions
To protect the rights, property, and safety of Whira Inc., our clients, and the public
We collect only the minimum information necessary for these purposes and do not collect data beyond what is reasonably required.

4. Legal Basis for Processing (GDPR & UK GDPR)

For visitors and clients in the European Union and the United Kingdom, we process your personal information on the following legal bases:
Contractual necessity — processing required to deliver our services to you or to take steps prior to entering a service agreement
Legitimate interests — processing necessary for our legitimate business interests, such as responding to enquiries, improving our website, and communicating with prospective clients, provided those interests are not overridden by your rights
Legal obligation — processing required to comply with applicable law
Consent — where we rely on your consent, such as for marketing communications or non-essential cookies, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal

5. How We Use Your Information

We use your personal information to:
Respond to your contact form submissions and enquiries within one business day
Schedule and conduct 30-minute discovery calls
Deliver operational and financial advisory services to clients
Send occasional service updates, relevant insights, or information about Whira Inc. services — you may opt out at any time
Analyse website traffic and improve the user experience
Comply with legal, regulatory, and contractual obligations
We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects without your explicit consent.
We do not sell your personal information to any third party. Ever.

6. How Long We Keep Your Information

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:
Contact form enquiries — retained for 24 months from the date of submission, or until you request deletion
Client engagement records — retained for 7 years from the end of an engagement to meet legal and contractual obligations
Website analytics data — retained for 26 months in aggregate, anonymised form
Email communications — retained for 24 months unless part of an active client relationship
Upon expiry of the applicable retention period, your personal information is securely deleted or anonymised.

7. Who We Share Your Information With

Whira Inc. does not sell, rent, or trade your personal information. We share your information only in the following circumstances:
Service providers and processors — third-party tools we use to operate our website and business (such as email platforms, scheduling tools, CRM systems, and website hosting providers) who are contractually bound to handle your data securely and only for the purposes we specify
Professional advisors — lawyers, accountants, and insurers where necessary for the operation of our business, under confidentiality obligations
Legal and regulatory requirements — where disclosure is required by applicable law, court order, or governmental authority
Business transfers — in the event of a merger, acquisition, or sale of business assets, your information may be transferred as part of that transaction, subject to equivalent privacy protections
We do not share your personal information with any third party for their own marketing purposes.

8. International Data Transfers

Because Whira Inc. operates globally and serves clients across Canada, the United States, Australia, New Zealand, the United Kingdom, Sweden, and Europe, your personal information may be transferred to and processed in countries other than your own. Where such transfers occur, we ensure appropriate safeguards are in place, including:
Standard Contractual Clauses (SCCs) approved by the European Commission for transfers from the EU
UK International Data Transfer Agreements (IDTAs) for transfers from the United Kingdom
Compliance with PIPEDA cross-border transfer requirements for Canadian residents
Australian Privacy Principle 8 compliance for transfers involving Australian residents
By using our website or engaging our services, you acknowledge that your information may be processed in jurisdictions outside your country of residence.

9. Cookies & Tracking Technologies

Whira Inc. uses cookies and similar technologies to operate and improve our website. A cookie is a small text file stored on your device when you visit our website.
We use the following categories of cookies:
Strictly necessary cookies — essential for the website to function. These cannot be disabled.
Analytics cookies — help us understand how visitors use our website. We use this data in aggregate to improve our content and user experience.
Preference cookies — remember your settings and preferences across visits.
Marketing cookies — used to deliver relevant content. These are only placed with your active consent.
Your cookie choices: Under GDPR, UK GDPR, and CCPA/CPRA, you have the right to accept or decline non-essential cookies. When you first visit our website, you will be presented with a cookie consent banner where you can make your selection. You may change your cookie preferences at any time through our cookie settings tool.
We honour Global Privacy Control (GPC) signals as a valid opt-out of data sharing where required under applicable law, including California law effective January 1, 2026.
Closing a cookie banner, clicking outside it, or navigating away does not constitute consent. Active, affirmative selection is required for non-essential cookies.

10. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:
Right to access — request a copy of the personal information we hold about you
Right to rectification — request correction of inaccurate or incomplete information
Right to erasure — request deletion of your personal information, subject to legal retention requirements
Right to restrict processing — request that we limit how we use your information
Right to data portability — request your information in a structured, machine-readable format
Right to object — object to processing based on legitimate interests or for direct marketing
Right to withdraw consent — where processing is based on consent, withdraw it at any time
Right not to be subject to automated decision-making — request human review of any automated decisions that significantly affect you
To exercise any of these rights, please contact us at contact@whiraconsulting.com. We will respond within 30 days. We may need to verify your identity before processing your request.

11. CCPA / CPRA — California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), including rights effective January 1, 2026:
The right to know what personal information we collect, use, share, or sell
The right to delete your personal information
The right to correct inaccurate personal information
The right to opt out of the sale or sharing of your personal information — Whira Inc. does not sell or share personal information
The right to limit use of sensitive personal information
The right to non-discrimination for exercising your privacy rights
The right to receive confirmation of opt-out requests — if you submit an opt-out request, we will provide visible confirmation that it has been processed
To exercise your California privacy rights, contact us at contact@whiraconsulting.com. We will respond within 45 days. Requests may be extended by a further 45 days where reasonably necessary with notice.

12. PIPEDA — Canadian Residents

Whira Inc. is based in Canada and complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. Under PIPEDA, you have the right to access the personal information we hold about you and to request correction of any inaccurate information. We collect, use, and disclose your personal information only with your knowledge and consent, except where permitted or required by law. For PIPEDA-related enquiries or complaints, contact us at contact@whiraconsulting.com. If your concern is not resolved, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.

13. Australian Privacy Act — Australian Residents

For clients and visitors in Australia, Whira Inc. handles personal information in accordance with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs). You have the right to access the personal information we hold about you and to request correction of inaccurate information. We will not use or disclose your personal information for purposes other than those described in this policy without your consent, except as required by law. For Australian privacy enquiries, contact us at contact@whiraconsulting.com. If your concern is not resolved, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.

14. Children's Privacy

Whira Inc.'s website and services are intended for business owners, founders, and professional clients. We do not knowingly collect personal information from individuals under the age of 16. Under the CPRA effective 2026, personal information of consumers under 16 is treated as sensitive personal information and subject to heightened protections. If you believe a minor has submitted personal information through our website, please contact us immediately at contact@whiraconsulting.com and we will promptly delete that information from our records.

15. Security

We implement commercially reasonable technical and organisational measures to protect your personal information against unauthorised access, use, alteration, disclosure, or destruction. These measures include encrypted data transmission, access controls, and regular security reviews. However, no method of internet transmission or electronic storage is completely secure. We cannot guarantee absolute security and encourage you to contact us if you have concerns about the security of your information.
In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law.

16. Links to External Sites

Our website may contain links to third-party websites not operated by Whira Inc. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policy of every website you visit. The inclusion of a link does not imply endorsement by Whira Inc.

17. Privacy Policy Changes

Whira Inc. may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email. Your continued use of our website after any change constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

18. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal information, please contact us:
Whira Inc. Email: contact@whiraconsulting.com Website: whiraconsulting.com
We aim to respond to all privacy-related enquiries within 5 business days and to all formal rights requests within 30 days.

This Privacy Policy was last reviewed and updated on April 28, 2026.