Privacy Policy

Last updated 31 October 2026

Zaash Labs ("we", "us") publishes healthcare market intelligence reports from Toronto, Ontario, Canada. This policy explains what personal information we collect through zaashlabs.co, why we collect it, who processes it for us and the choices you have. We handle personal information in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL), and we honour the rights of visitors from the European Economic Area and the United Kingdom under the GDPR.

1. What we collect

We collect only what you choose to give us and a small amount of technical data:

• Request form: your name, work email, company (optional for free summaries), role, the report you chose, your payment preference for full reports, any message you write, and whether you opted in to future summaries.
• Referral tag: if you arrived from a link that carries a campaign tag (for example from LinkedIn), we record that tag with your request so we know which channels are useful.
• Purchases: card payments are handled entirely by Stripe. We receive your name, email, the product bought and the payment status. We never see or store your full card number.
• Website analytics: Cloudflare Web Analytics measures page views in aggregate without cookies and without tracking you across sites.

We do not knowingly collect sensitive personal information, and our site is intended for business users.

2. How we use it

• To send you the executive summary or report you requested, and to answer your questions.
• To process orders, issue invoices and keep the records the law requires.
• To send you new executive summaries, only if you ticked the opt-in box.
• To understand which reports and channels are useful, in aggregate, so we can improve coverage.

We do not sell, rent or trade your personal information, and we do not use it for advertising profiles.

3. Who processes it for us

We use a small number of service providers who process data on our behalf under their own security and privacy commitments:

Provider	Purpose
Web3Forms	Securely delivers form submissions to our inbox
Stripe	Card payments and receipts
Cloudflare	Website hosting, security and cookie-free analytics
Google (Gmail and Drive)	Business email and secure storage of order records

Some providers store data outside Canada, including in the United States. Where that happens, your information may be accessible to authorities in that country under its laws. We may also disclose information if the law requires it.

4. Emails and consent

Requesting a free summary does not sign you up to anything. We send you new executive summaries only if you tick the unticked opt-in box on the form. Every such email includes a way to unsubscribe, and you can also write to hello@zaashlabs.co at any time. Service messages about a request or order you made are sent regardless, because they are part of providing the service.

5. How long we keep it

• Request and enquiry records: up to 24 months after your last contact with us.
• Order, invoice and payment records: as long as Canadian tax law requires, currently up to seven years.
• Opt-in records: until you unsubscribe, plus the period needed to show that consent was given.

6. Your rights

You can ask us to show you the personal information we hold about you, correct it, delete it where we are not required to keep it, or stop using it for emails. Visitors from the EEA and UK can also object to or restrict processing and ask for a copy in a portable format. We respond within 30 days. If you are not satisfied, you can contact the Office of the Privacy Commissioner of Canada or your local data protection authority.

7. Security

All pages and forms are served over encrypted HTTPS connections, access to our records is restricted to people who need it, and payments are handled by Stripe, a PCI DSS Level 1 certified provider.

8. Contact

Privacy questions and requests: hello@zaashlabs.co. Zaash Labs, Toronto, Ontario, Canada.

We may update this policy as our services change. The date at the top shows the latest version.