Privacy Policy

Lighthill Consulting ("Lighthill", "we", "us") is a consulting practice based in Ontario, Canada. We help businesses with marketing, operations, and AI systems. This policy explains what information we handle, why, and the choices you have. It covers this website (lighthillconsulting.ca), our client services, and the software integrations we operate — including applications that connect to advertising platforms such as Meta and Google.

Questions, requests, or complaints: alec@lighthillconsulting.ca.

1. This website

This site is a static informational site. It sets no cookies, runs no analytics or advertising trackers, and contains no forms. If you email us, we receive what you choose to send and use it only to respond to you.

Our hosting provider (Vercel) generates standard server logs — IP address, user agent, pages requested — for security and reliability. We do not use these logs to identify or profile visitors.

2. Information we handle when providing services

In the course of client engagements we handle two kinds of information:

• Business contact information — names, work email addresses, and correspondence of the people we work with, used to deliver and administer engagements.
• Client advertising and analytics data — described in section 3.

3. Platform integrations (Meta, Google, and similar)

We operate internal software that connects to advertising and analytics platforms — including the Meta Marketing API, the Google Ads API, and Google Analytics — solely to provide services to clients who have authorized that access (for example, by granting our business partner access to their ad account).

What we access

• Advertising account structure and campaign settings (campaign names, statuses, budgets, targeting configurations);
• Aggregated performance metrics (spend, impressions, clicks, conversions);
• Audience definitions and, where a client directs it, customer lists the client already owns.

What we do with it

• Reporting, analysis, and campaign management for that client only;
• We never sell this data, never share one client's data with another, and never use platform data for purposes beyond the engagement it belongs to;
• We access the minimum data needed, using read-only credentials wherever possible.

How we protect it

• Credentials are stored in an encrypted secret manager (Google Cloud), never in plain text;
• Data is stored in access-controlled cloud infrastructure located in Canada where practical;
• Access is limited to the personnel working on the relevant engagement.

Retention

Platform data is retained only as long as needed to provide the engagement and meet legal obligations. When an engagement ends, we revoke our own access and delete or return client data on request.

4. Data deletion requests

You may request deletion of any personal or business data we hold at any time. Email alec@lighthillconsulting.ca with the subject "Data deletion request" and a description of the data concerned. We will confirm receipt and complete the deletion within 30 days, and tell you when it is done. This is also the deletion mechanism for any data obtained through Meta or Google platform integrations.

5. Your rights

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA). You may request access to personal information we hold about you, ask that it be corrected, or withdraw consent to its use. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.

6. Children

Our website and services are directed at businesses and are not intended for children. We do not knowingly collect information from anyone under 18.

7. Changes

If this policy changes, we will update this page and the date at the top. Material changes affecting active clients will be communicated directly.