Privacy Policy

This policy explains what personal information we collect through this website, why we collect it, and the choices you have. Tala Works is a private-sector organization based in Calgary, Alberta. We handle personal information in accordance with Alberta's Personal Information Protection Act (PIPA), and, where personal information crosses provincial or national borders, Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). This is a plain-language summary, not a guarantee or certification.

Who we are

This website is operated by Tala Works, a service business based in Calgary, Alberta, Canada ("Tala Works," "we," "us").

We are responsible for the personal information under our control.

Privacy Officer. We have designated a Privacy Officer accountable for our compliance with PIPA. You can reach the Privacy Officer with any question, access request, or complaint at privacy@talaworks.ca (or hello@talaworks.ca).

What this policy covers

This policy covers personal information collected through this website — for example, when you use our "Book a demo" form or email us.

It does not cover the personal information we handle when we operate an AI receptionist on behalf of a client business. When Tala Works answers calls for a client, we act as a service provider processing personal information on that client's behalf. That data (call audio, transcripts, caller details) is governed by a separate agreement and privacy notice between us, the client, and the client's own customers. The client remains the organization responsible for that information under PIPA.

What we collect

Information you send us

When you submit the "Book a demo" form or contact us by email, we receive the information you choose to provide. That typically means your name, business name, business type or industry, phone number, email address, your current booking tool, and any other details you add. We collect only what is reasonable to respond to your request and assess fit for our service.

Tools on this site that do not send us data

Some features on this site run entirely in your own web browser and do not transmit your input to us:

• The ROI Calculator processes the figures you enter locally in your browser; they are not collected or stored by us.
• Any "Find on Google Maps" or similar outbound link opens a search in a new tab. From that point, your use of that third-party service is governed by its own privacy policy, not ours.

Cookies and analytics

This site uses Google Analytics 4 to understand how people find and use our pages. It is the only analytics tool we run. We do not use advertising trackers, remarketing pixels, or ad personalization, and we do not sell your information or share it for advertising.

Google Analytics sets first-party cookies (named "_ga" and "_ga_" followed by a site identifier) that give your browser a random ID so repeat visits can be counted as one person rather than several. It records:

• the pages you view, when, and roughly how long you stay;
• how you arrived — the referring site, and the campaign tag on a QR code, counter card, or link (the "src" or "utm" values in the web address), so we can tell which of them actually bring people in;
• your device, browser, operating system, and approximate location such as city or region. Google derives that location from your IP address; Google states that IP addresses are not stored in Analytics, and we never see yours in our reports;
• a few specific actions: opening the demo page from a tagged link, tapping a "Call now" button, and successfully submitting the demo, guide, or visibility-check form. These record that something happened and which campaign it came from — the details you type into a form are emailed to us, not sent to Google.

Google acts as our service provider for this and processes the data on servers in the United States, which means it is subject to the conditions described under "Cross-border processing" below. We use it to measure our own marketing, not to identify you personally, and we do not combine it with the information you send us through a form.

If you would rather not be counted, you can block or delete cookies in your browser settings, browse in private mode, or install Google's Analytics Opt-out Browser Add-on. Nothing on this site stops working if you do — you can still read every page and submit any form.

Bot protection on our forms

Our forms use Cloudflare Turnstile to tell real visitors apart from automated abuse. It runs when you submit a form and passes a single-use token to us confirming the check; Cloudflare states that it does not use Turnstile to track people across sites or for advertising. This is a security measure — we cannot accept a submission without it.

Server and hosting logs

Like most websites, our hosting and content-delivery providers may automatically record limited technical information when you visit — such as your IP address, browser type, and the pages you request — for security and operational purposes.

Consent and why we use your information

By submitting a form or emailing us, you consent to our collecting and using that information for the purposes below. Under PIPA we collect, use, and disclose personal information only for purposes a reasonable person would consider appropriate, and only with your consent.

We use the information you send us only to:

• respond to your inquiry and provide the information, audit, or demo you asked for;
• assess whether our service is a fit and follow up about it;
• communicate with you about our services if you have asked us to;
• set up and provide services if you decide to become a client.

We do not sell your personal information, and we do not use it for unrelated marketing without your consent. You may withdraw your consent at any time, subject to legal and contractual limits, by emailing our Privacy Officer; we will explain the consequences of withdrawal if any.

Who we share it with

We share personal information only with service providers who help us operate — for example, the provider of the email service we use to receive and reply to your messages, our website hosting providers, Google (website analytics), and Cloudflare (bot protection on our forms). These providers act on our instructions.

Cross-border processing

Our own platform and business data are hosted in Canada (AWS Canada regions). When we operate an AI receptionist for a client, call audio and transcripts are processed by a US-based voice-technology provider on our behalf under a signed data-processing agreement. Website analytics and form bot-protection are handled by Google and Cloudflare respectively, which process that data in the United States. Personal information handled outside Canada is subject to the laws of that jurisdiction, and may be accessible to foreign courts, law enforcement, and government authorities. We use contractual and security safeguards with our providers and disclose this arrangement to clients before service begins. We do not represent that call-handling data is stored in Canada.

Where your information is stored

Our own platform and business records are hosted on Canadian infrastructure (AWS Canada). Call-handling data for the receptionist service is processed in the United States as described above.

How long we keep it

We keep the information you send us only as long as needed to respond to you and, if you become a client, for as long as our business relationship and applicable record-keeping obligations require. Inbound inquiries that do not become clients are deleted within 24 months. We delete or anonymize information when it is no longer needed.

Your rights under PIPA

Subject to the exceptions in the Act, you may:

• Access — ask what personal information we hold about you, how it has been used, and to whom it has been disclosed, and request a copy;
• Correction — ask us to correct information that is inaccurate or incomplete;
• Withdraw consent — withdraw your consent to our use of your information, subject to legal and contractual limits.

To make a request, email our Privacy Officer at privacy@talaworks.ca (or hello@talaworks.ca). We will respond within 45 days as required by PIPA (or sooner). We may need to verify your identity before acting on a request.

If you are not satisfied with our response, you may contact the Office of the Information and Privacy Commissioner (OIPC) of Alberta (oipc.ab.ca). Where PIPEDA applies to cross-border handling, you may also contact the Office of the Privacy Commissioner of Canada (priv.gc.ca).

How we protect it

We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Breaches

If a breach of security safeguards involving your personal information creates a real risk of significant harm, we will notify affected individuals and the Office of the Information and Privacy Commissioner (OIPC) of Alberta as required by PIPA, without unreasonable delay.

Children

This website and our services are intended for business owners and operators. They are not directed to children, and we do not knowingly collect personal information from children.

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top shows when it last changed. Material changes will be posted on this page.

Contact us

Questions, requests, or complaints about your personal information:
Privacy Officer — privacy@talaworks.ca (or hello@talaworks.ca)
Tala Works · Calgary, Alberta, Canada