Privacy Policy

1. Introduction and Overview

This Privacy Policy describes how Gaia Media, a trade name operated by Gaia Gov Media Ltd., a corporation organized under the laws of Canada with its registered office at 3132 Commodore Way, GABRIOLA, British Columbia, V0R 1X7, Canada, collects, uses, discloses, stores, and protects personal information obtained from visitors to our website at https://www.gaimedia.buzz, from prospective and current clients, and from individuals who interact with our business through any channel including electronic mail, telephone communications, in-person meetings, and service delivery engagements.

Gaia Media provides computer systems design and related services, integrated systems engineering, cybersecurity architecture, cloud infrastructure solutions, and technical consulting within the Professional, Scientific, and Technical Services sector. In the course of delivering these professional services, we may receive personal information from clients, website visitors, service providers, and business partners. This policy explains our practices with respect to all such personal information in comprehensive detail, addressing each category of data we handle, the purposes for which we use it, the circumstances under which we may disclose it, and the measures we employ to protect it.

By accessing our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any provision of this policy, you should discontinue use of our website and refrain from providing personal information to us. We reserve the right to modify this policy at any time, and any changes will be effective immediately upon posting the updated policy to this page. Your continued use of our website or services after any modification constitutes acceptance of the revised policy. We encourage you to review this policy periodically to stay informed about our data handling practices and any updates we may make.

2. Information We Collect

2.1 Information You Provide Voluntarily

When you contact Gaia Media through our website contact form, send us electronic mail, call our office, or engage with us in the course of a business relationship, we may collect the following categories of personal information directly from you:

• Contact and Identification Information: Your full name, business title, company or organization name, electronic mail address, telephone number, and physical or mailing address. This information enables us to identify you, communicate with you about your inquiries and projects, and maintain accurate client records.
• Professional and Business Information: Your role, responsibilities, technical requirements, project descriptions, infrastructure specifications, and other business-related information you choose to share when describing your project needs or when engaging our consulting or engineering services. This information is essential for us to understand your requirements and develop appropriate technical solutions.
• Communication Records: The content of messages you send through our website contact form, electronic mail correspondence, notes from telephone conversations, meeting summaries, and any documents, diagrams, or specifications you transmit to us as part of a client engagement or prospective engagement. These records allow us to maintain continuity across communications and ensure we accurately capture your requirements.
• Transactional and Engagement Information: Details related to the services we provide, including project scope documents, statements of work, service agreements, invoices, payment records, and communications related to project delivery, support requests, and ongoing managed operations. These records are necessary for the administration and delivery of our professional services.

2.2 Information Collected Automatically

When you visit our website at https://www.gaimedia.buzz, certain information is collected automatically through standard web server logging and analytics mechanisms. This includes: Internet Protocol (IP) address, browser type and version, operating system type and version, device type, screen resolution, referring and exit page URLs, date and time stamps, pages visited, time spent on each page, and the sequence of page navigation within our website. Aggregated and anonymized analytics data about how visitors interact with our website is collected in a form that does not permit identification of any individual visitor. This data helps us understand which content is most useful to our audience and identify opportunities for improvement. Server and security logs recording requests made to our server infrastructure, including the requesting IP address, requested resource, response status code, and timestamp, are maintained for security monitoring, performance optimization, and operational troubleshooting purposes.

2.3 Information We Do Not Collect

Gaia Media does not collect or process sensitive personal data categories including but not limited to government-issued identification numbers, financial account credentials, biometric data, health or medical information, information about children under the age of thirteen, or precise geolocation data. We do not use cookies, tracking pixels, browser fingerprinting, or any other client-side tracking technologies to monitor individual browsing behavior across sessions or across websites. We do not purchase, license, or otherwise acquire personal information from third-party data brokers or aggregators. Our data collection is limited to what is necessary to operate our website, respond to inquiries, and deliver our professional services.

3. How We Use Your Information

Gaia Media uses the personal information we collect exclusively for the following purposes, each of which is grounded in a legitimate business interest, contractual necessity, or your explicit consent:

3.1 Service Delivery and Client Engagement

We use your contact, professional, and business information to respond to inquiries, prepare proposals and statements of work, deliver the computer systems design, engineering, consulting, and managed operations services we have been engaged to provide, communicate project status and deliverables, provide technical support, and manage ongoing client relationships. This processing is necessary for the performance of our contractual obligations to our clients and for our legitimate interest in operating our professional services business effectively.

3.2 Business Operations and Administration

We use client and engagement information to manage billing, invoicing, and payment processing; to maintain internal records of engagements, correspondence, and deliverables; to manage our calendar of project milestones, deadlines, and resource allocation; and to fulfill our obligations under applicable tax, corporate, and regulatory requirements under Canadian federal and provincial law.

3.3 Website Operation and Improvement

We use aggregated and anonymized website analytics data to understand how visitors navigate our website, identify pages and content that are most and least useful to our audience, detect and resolve technical issues affecting website availability or performance, and inform improvements to our website content, structure, and user experience. This processing serves our legitimate interest in maintaining an effective online presence.

3.4 Security, Compliance, and Legal Obligations

We use server and security logs to monitor for and respond to security incidents, unauthorized access attempts, and other threats to the confidentiality, integrity, and availability of our systems and data. We may use and disclose personal information as necessary to comply with applicable laws, regulations, legal processes, or enforceable governmental requests; to enforce our contractual terms and conditions; and to protect the rights, property, and safety of Gaia Media, our clients, our personnel, and the public.

4. Disclosure of Personal Information

Gaia Media does not sell, rent, lease, trade, or otherwise commercialize personal information. We do not exchange personal information for monetary consideration or any other form of value. We disclose personal information only in the following limited circumstances and only to the extent necessary for the purpose described:

4.1 Service Providers and Subcontractors

We may engage third-party service providers to support our business operations, including but not limited to cloud infrastructure hosting, electronic mail services, payment processing, accounting and bookkeeping, legal and professional advisory services, and information technology support. These service providers are authorized to access and process personal information solely as necessary to perform their contracted functions and are bound by written agreements that require them to implement appropriate technical and organizational measures to protect the confidentiality and security of the information, to process it only in accordance with our documented instructions, and to delete or return it upon completion or termination of the service arrangement.

4.2 Legal and Regulatory Disclosure

We may disclose personal information if we determine in good faith that such disclosure is reasonably necessary to comply with a binding legal obligation, including a subpoena, court order, search warrant, or other lawful request by a governmental authority with competent jurisdiction; to enforce or apply our contractual terms and conditions; to investigate, prevent, or take action regarding suspected fraud, illegal activity, or violations of our policies; or to protect against imminent harm to the rights, property, or safety of Gaia Media, our clients, our personnel, or the public.

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, restructuring, sale of all or substantially all of our assets, or similar corporate transaction, personal information held by Gaia Media may be among the assets transferred to the successor or acquiring entity. In such circumstances, we will require the recipient to provide protections for personal information that are materially consistent with those described in this Privacy Policy, and we will notify affected individuals through prominent notice on our website and through direct communication where reasonably practicable.

4.4 With Your Consent

We may disclose personal information to third parties for purposes not described in this policy when we have obtained your prior explicit consent to such disclosure. You may withdraw your consent at any time by contacting us at info@gaimedia.buzz, though withdrawal will not affect the lawfulness of processing that occurred prior to the withdrawal.

5. Data Retention

Gaia Media retains personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, regulatory, accounting, tax, or reporting obligations, or to establish, exercise, or defend legal claims. Client engagement records, including project documentation, correspondence, deliverables, and related business records, are retained for a period of seven years following the completion or termination of the client engagement, consistent with standard business record-keeping practices and applicable statutes of limitation under Canadian law. Website server logs are retained for a rolling period of ninety days, after which they are automatically purged from our systems. Aggregated and anonymized analytics data that does not identify individual visitors may be retained indefinitely for historical analysis and trend reporting. Communication records from prospective clients and general inquiries that do not result in an active client engagement are retained for a period of eighteen months from the date of last correspondence, after which they are securely deleted. Upon expiration of the applicable retention period, personal information is securely deleted, destroyed, or anonymized in a manner that prevents reconstruction of the underlying personal data. We review our data retention practices annually.

6. Data Security

Gaia Media implements and maintains administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These safeguards include:

• Encryption of data in transit using Transport Layer Security (TLS) protocols for all communications between your browser and our web servers, and between our internal systems and those of our service providers.
• Encryption of data at rest for all storage systems that contain personal information, using industry-standard encryption algorithms and key management practices.
• Network security controls including firewalls, intrusion detection and prevention systems, network segmentation, and regular vulnerability scanning of all externally accessible systems and services.
• Access controls based on the principle of least privilege, with role-based access to personal information limited to personnel and service providers who require such access to perform their specific job functions or contracted services.
• Multi-factor authentication for administrative access to systems that store or process personal information.
• Regular security awareness training for all personnel who handle personal information, covering data protection principles, threat recognition, and incident reporting procedures.
• Documented incident response procedures that define roles, responsibilities, escalation paths, and notification protocols in the event of a suspected or confirmed data breach.

In the event of a data breach affecting personal information under our control, we will notify affected individuals and the Office of the Privacy Commissioner of Canada in accordance with the requirements of the Personal Information Protection and Electronic Documents Act (PIPEDA) and any applicable provincial legislation within the timeframes prescribed by law.

7. International Data Transfers

Gaia Media is headquartered in Canada, and the personal information we collect is stored and processed on servers located in Canada. When we transfer personal information across national borders, we implement appropriate safeguards to ensure that the information receives a level of protection that is materially consistent with the protections described in this Privacy Policy and with applicable Canadian federal and provincial privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA). These safeguards may include contractual clauses with service providers that impose data protection obligations equivalent to those applicable in Canada, technical measures such as encryption, and organizational measures such as access controls and audit mechanisms. We do not transfer personal information to jurisdictions that do not provide an adequate level of protection without first implementing supplementary measures.

8. Your Rights and Choices

Depending on your jurisdiction of residence, you may have certain rights with respect to the personal information we hold about you. These rights may include:

• Right of Access: You may request confirmation of whether we hold personal information about you and, if so, obtain a copy of that information along with details about how it is used and to whom it has been disclosed.
• Right of Rectification: You may request that we correct or update any personal information we hold about you that is inaccurate, incomplete, or out of date.
• Right of Erasure: You may request that we delete personal information we hold about you, subject to any legal obligations or legitimate business interests that require us to retain the information.
• Right to Withdraw Consent: Where our processing is based on your consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out prior to the withdrawal.
• Right to Object: You may object to processing where we rely on legitimate interests, and we will cease unless we demonstrate compelling legitimate grounds that override your interests.
• Right to Restrict Processing: In certain circumstances, you may request restriction while we verify accuracy or assess an objection.
• Right to Data Portability: Where processing is by automated means and based on consent or contract, you may request your information in a structured, commonly used, machine-readable format.

To exercise any of these rights, contact us at info@gaimedia.buzz. We will respond within thirty calendar days and may need to verify your identity. We will not discriminate against any individual for exercising their privacy rights.

9. Children's Privacy

Our website and services are directed at business professionals and organizations. We do not knowingly collect, solicit, or maintain personal information from individuals under the age of thirteen, and we do not direct any content, marketing, or services toward children. If we become aware that a child under thirteen has provided personal information to us without verifiable parental consent, we will take prompt steps to delete such information from our records and terminate any associated accounts. If you believe that a child under thirteen may have provided personal information to us, please contact us immediately at info@gaimedia.buzz so that we can investigate and take appropriate remedial action.

10. Third-Party Websites and Services

Our website may include links to third-party websites, platforms, or services that are not owned, operated, or controlled by Gaia Media. This Privacy Policy applies exclusively to information collected by Gaia Media through our website and in the course of our business operations. We are not responsible for the privacy practices, data collection policies, content, or security of any third-party website or service. We encourage you to review the privacy policies of any third-party website or service before providing personal information to them. The inclusion of a link to a third-party site does not constitute our endorsement of that site, its content, or its privacy practices.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or operational requirements. When we make material changes, we will post the updated policy on this page with a revised Effective Date and, where reasonably practicable, provide prominent notice on our website. We encourage you to review this policy periodically. If we intend to use personal information in a manner materially different from that described in the policy under which it was originally collected, we will provide notice and, where required by applicable law, obtain your consent before doing so.

12. Contact Information and Complaints

If you are not satisfied with our response to your privacy concern, you may have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada at https://www.priv.gc.ca or with the applicable provincial privacy commissioner. For residents of British Columbia, additional recourse may be available through the Office of the Information and Privacy Commissioner for British Columbia at https://www.oipc.bc.ca. We take all privacy complaints seriously and will work diligently to address any concerns you may have about our personal information handling practices.