Zadesta Home | Header

Privacy Policy

Effective Date: 30 January 2026

1. Introduction

Zadesta Ltd (“Zadesta”, “we”, “our”, or “us”) is committed to protecting your privacy and handling your personal information responsibly.

This Privacy Policy explains how we collect, use, disclose, store, and protect your information when you visit our website, communicate with us, book a consultation, enrol in one of our programmes, or use any of our services.

This policy is intended to comply with applicable privacy legislation, including:

  • Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA)
  • Quebec’s Act respecting the protection of personal information in the private sector, as amended by Law 25
  • The UK General Data Protection Regulation (UK GDPR)
  • The EU General Data Protection Regulation (EU GDPR)
  • Applicable United States privacy laws, including the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), where applicable

By using our website, you acknowledge that you have read this Privacy Policy.

2. Who We Are

Zadesta is an international management consulting firm, based in Ottawa, Ontario, Canada, that helps organisations improve operations, strengthen processes, and achieve sustainable performance improvements.

Our website provides information about our services and allows prospective clients to contact us or schedule consultations.

We also offer Zadesta Career Crucible, a guided career programme for individual professionals. Where you engage with us as an individual rather than on behalf of an organisation, Section 4 of this policy applies to you in addition to the rest of this document.

We serve clients globally, including clients located in Quebec, elsewhere in Canada, the United Kingdom, the European Economic Area, and the United States.

3. Information We Collect

We collect information in three ways.

Information You Provide

You may voluntarily provide information when you:

  • submit a contact form
  • book a consultation
  • email us
  • request information
  • apply for or enrol in a programme
  • subscribe to future newsletters or updates (if offered)

This may include:

  • name
  • organisation
  • job title
  • email address
  • telephone number
  • messaging app number, such as WhatsApp, where you provide one
  • country or location
  • information you choose to include in your message

Please avoid sending confidential or sensitive business information through our website forms unless specifically requested.

Information Collected Automatically

When you visit our website, certain information may be collected automatically, including:

  • IP address
  • browser type
  • operating system
  • device information
  • pages viewed
  • referring website
  • visit duration
  • date and time of access
  • approximate geographic location derived from your IP address

Cookies and Similar Technologies

We use cookies and similar technologies to:

  • operate our website
  • improve website performance
  • understand visitor behaviour
  • remember user preferences
  • analyse website traffic
  • measure the performance of our advertising and show relevant advertising to people who have visited our website

This includes advertising technologies operated by third parties, such as the Meta pixel. These technologies may be used to build audiences for advertising on platforms including Facebook and Instagram.

Where required by law, we will request your consent before placing non-essential cookies, including analytics, performance, and advertising cookies. You may withdraw that consent at any time through our cookie settings, and you may also disable cookies through your browser settings, although doing so may affect certain website functionality.

4. Zadesta Career Crucible Participants

This section applies where you apply for or enrol in Zadesta Career Crucible. It sits alongside the rest of this policy rather than replacing it.

What we collect

When you submit a profile for review, we collect your name, email address, WhatsApp number, location, target roles, and the information you provide about your career situation and availability.

If you enrol, we also hold:

  • payment records, including the payment option you selected and your payment history
  • work you submit during the programme, such as CVs, applications, written responses, and project work
  • recordings of live sessions, workshops, and mock interviews, which include your image and voice
  • notes and feedback relating to your participation

Why we hold it

  • To assess your application and communicate with you about it, on the basis of steps taken at your request before entering a contract.
  • To deliver the programme, process payment, and provide post-job support, on the basis of performing our contract with you.
  • To record sessions for delivery, quality review, and facilitator training, on the basis of our legitimate interest in running and improving the programme.
  • To use your image, voice, work, or testimonial publicly, and to send you marketing, on the basis of your consent, which you may withdraw at any time.
  • To keep financial and tax records, on the basis of our legal obligations.

Session recordings

Live sessions are recorded as a condition of participation, and those recordings are used to deliver the programme and improve how we run it. They are not published or shared outside the cohort and the Zadesta team.

We will only use your image, voice, or submitted work in marketing or other public materials where you have given separate written consent. That consent is optional, is not a condition of enrolment, and you may withdraw it at any time by emailing info@zadesta.com.

Who we share it with

We share participant data with the service providers listed in Section 7, including Stripe as our payment processor, any third-party instalment provider you choose, WhatsApp where you have given us that number, and our scheduling and video conferencing tools.

How long we keep it

Applications that do not proceed are retained for up to 24 months. Participant records are retained for as long as necessary for legitimate business, tax, and legal purposes.

5. How We Use Your Information

We use personal information to:

  • respond to enquiries
  • schedule consultations
  • deliver requested services and programmes
  • process payments
  • improve our website
  • understand visitor trends
  • measure and improve the performance of our advertising
  • communicate with prospective clients and participants
  • comply with legal obligations
  • protect our legal rights
  • prevent fraud or misuse

We do not sell your personal information.

6. Legal Bases for Processing (GDPR)

Where GDPR applies, we process personal information under one or more of the following legal bases:

  • your consent
  • performance of a contract, or steps taken at your request before entering into a contract
  • our legitimate business interests
  • compliance with legal obligations
  • protection of legal rights

Where we rely on legitimate interests, those interests include operating and securing our website, understanding how visitors use our website, responding to enquiries, promoting our services to organisations, and preventing fraud or misuse. Where we rely on legitimate interests, you have the right to object to that processing, as described in Section 15.

We rely on your consent for advertising and analytics cookies, for marketing communications sent to you as an individual, and for any public use of your image, voice, or submitted work.

7. Information Sharing

We do not sell or rent personal information.

We may share information with trusted service providers who assist us in operating our business, including providers of:

  • website hosting
  • website security
  • analytics and advertising
  • customer relationship management (CRM)
  • email services
  • online scheduling
  • video conferencing
  • payment processing, including Stripe and any third-party instalment provider you choose
  • messaging services, including WhatsApp
  • cloud storage
  • business communications

These providers process information only on our behalf and under appropriate contractual safeguards.

8. International Data Transfers

Because Zadesta serves clients internationally, your information may be processed in, or accessed from, countries other than your own, including countries outside Canada, the United Kingdom, and the European Economic Area.

Where required, we implement appropriate safeguards for these transfers, which may include standard contractual clauses, the UK International Data Transfer Agreement or Addendum, transfers to jurisdictions recognised as providing an adequate level of protection, and other legally recognised transfer mechanisms.

Before transferring personal information relating to individuals in Quebec outside the province, we carry out the assessments required under Quebec law and apply appropriate protections.

9. Data Retention

We retain personal information only for as long as necessary to:

  • provide requested services
  • fulfil contractual obligations
  • comply with legal requirements
  • resolve disputes
  • enforce agreements
  • maintain appropriate business records

Retention periods for Zadesta Career Crucible participants are set out in Section 4.

When information is no longer required, it is securely deleted or anonymised.

10. Security

We use reasonable administrative, technical, and organisational safeguards to protect personal information against:

  • unauthorised access
  • accidental disclosure
  • alteration
  • misuse
  • destruction

While we strive to protect your information, no method of internet transmission or electronic storage is completely secure. We therefore cannot guarantee absolute security.

11. Your Privacy Rights

Depending on where you live, you may have the right to:

  • access your personal information
  • correct inaccurate information
  • request deletion
  • withdraw consent
  • restrict processing
  • object to processing
  • receive a copy of your information in a portable format
  • lodge a complaint with your local privacy regulator

We will respond to requests in accordance with applicable law.

12. California Privacy Rights

If you are a California resident, you may have rights including:

  • the right to know what personal information we collect
  • the right to request deletion
  • the right to correct inaccurate information
  • the right to limit certain uses of sensitive personal information where applicable
  • the right to opt out of the sale or sharing of personal information
  • the right not to be discriminated against for exercising your privacy rights

Zadesta does not sell personal information. We do use advertising technologies, including the Meta pixel, which may involve sharing personal information for cross-context behavioural advertising as that term is defined under California law. You may opt out through our cookie settings, and we honour recognised opt-out preference signals, such as the Global Privacy Control, where required.

California residents may also contact the California Privacy Protection Agency or the California Attorney General’s Office regarding their privacy rights.

13. Canadian Privacy Rights (PIPEDA)

Individuals in Canada may request access to or correction of their personal information in accordance with PIPEDA or applicable provincial privacy legislation.

Zadesta has designated a Privacy Officer who is accountable for our compliance with Canadian privacy law. You can contact our Privacy Officer using the details in Section 20.

If you are not satisfied with how we have handled your personal information, you may file a complaint with the Office of the Privacy Commissioner of Canada.

14. Quebec Privacy Rights (Law 25)

If you are located in Quebec, you have rights under the Act respecting the protection of personal information in the private sector, including the right to:

  • access your personal information
  • request correction of inaccurate, incomplete, or ambiguous information
  • withdraw your consent to the use or disclosure of your personal information
  • request that we cease disseminating your personal information, or that a hyperlink giving access to it be de-indexed, where the conditions set out in law are met
  • receive the computerised personal information you have provided to us in a structured, commonly used technological format (data portability)
  • be informed if your personal information is used to render a decision based exclusively on automated processing, and to submit observations about that decision

Our Privacy Officer is responsible for handling requests and complaints relating to personal information. If you are not satisfied with our response, you may file a complaint with the Commission d’accès à l’information du Québec.

15. UK and European Privacy Rights

Individuals located in the United Kingdom or European Economic Area may exercise their rights under the UK GDPR or EU GDPR, including the rights of access, rectification, erasure, restriction of processing, objection to processing, and data portability, where applicable.

If you are in the United Kingdom, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO). If you are in the European Economic Area, you may lodge a complaint with the data protection authority in your country.

16. Third-Party Websites

Our website may contain links to third-party websites.

We are not responsible for the privacy practices or content of those websites. We encourage you to review their privacy policies before providing personal information.

17. Children’s Privacy

Our website and services are intended for adults. Zadesta Career Crucible is open only to adult professionals, and our consulting services are directed at organisations.

We do not knowingly collect personal information from children under the age of 16.

If we become aware that such information has been collected inadvertently, we will delete it promptly.

18. Marketing Communications

If you choose to receive marketing communications from us, you may unsubscribe at any time by following the unsubscribe instructions included in our emails or by contacting us directly.

Communications necessary to deliver a programme you have enrolled in, such as session reminders, schedule changes, and payment matters, are not marketing communications and continue for as long as you are enrolled.

19. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our services, technology, or legal obligations.

The revised version will be posted on this page with an updated Effective Date.

20. Privacy Officer

Zadesta has appointed a Privacy Officer who is responsible for overseeing our handling of personal information and for responding to privacy questions, access and correction requests, and complaints.

Privacy Officer: Ade Adesina

Email: ade.adesina@zadesta.com

21. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us.

Zadesta Ltd Ottawa, Ontario, Canada

Website: https://zadesta.com

Email: info@zadesta.com

Contact Page: https://zadesta.com/contact

For privacy-specific requests, you may contact our Privacy Officer, Ade Adesina, at ade.adesina@zadesta.com

We will make reasonable efforts to respond promptly and in accordance with applicable privacy laws.