Privacy Policy

Summary

Evear runs a single-page website with one form on it. If you do not fill in that form, we do not collect anything that identifies you. We set no cookies and we run no advertising or cross-site tracking. We do not sell, rent or share your information with anyone for marketing.

Who we are

Evear — Hearing Healthcare Solutions ("Evear", "we", "us") is a consulting practice based in Mississauga, Ontario, Canada, working with private hearing healthcare practices. Evear is the organisation responsible for the personal information described in this policy.

Questions, requests or complaints about privacy can be sent to sl@evear.ca, which reaches us directly.

What this policy covers

This policy covers www.evear.ca only. Our software platform — OViz — is a separate service with its own privacy terms, and any patient information handled inside it is governed by those terms and by the agreement between Evear and the clinic concerned. Nothing in this policy applies to patient data held by a clinic.

What we collect, and why

1. Information you give us in the website forms

When you request a Clinic Audit, we collect:

• Your name
• Your clinic or practice name
• Your work email address
• Your phone number, if you choose to provide it (optional)
• The number of locations you operate and your stated priority
• Anything you write in the free-text notes field (optional)
• Your consent to be contacted, and the date it was given

We use this only to respond to your enquiry, arrange and prepare for the audit call, and follow up about that conversation. We do not add you to a marketing list on the strength of this form.

When you submit the Clinic Scorecard email step, we collect:

• Your name and work email address
• Your consent to be contacted, and the date it was given
• Your scorecard answers, domain scores, overall score and identified weakest area

We use this only to send you the scorecard breakdown you asked for and to follow up about that submission. Scorecard submissions are stored on the same Cloudflare infrastructure and in the same enquiry record system as Clinic Audit requests, so your form history stays together.

2. Technical information collected automatically

Our host, Cloudflare, processes standard request data — IP address, browser type, requested page, timestamp — to serve the site, apply rate limits and block abuse. We also apply a short-lived, automated rate limit to the form endpoint, which briefly retains a one-way hashed form of the requesting IP address purely to count requests. It is not used to identify anyone and expires within minutes.

3. Aggregate website analytics

We may use Cloudflare Web Analytics, which is privacy-first and cookieless: it records aggregate page views and referrers without setting cookies, without fingerprinting your device, and without tracking you across other websites.

Cookies

This website sets no cookies and uses no local storage for tracking. There is therefore no cookie banner and nothing for you to opt out of.

Consent, and withdrawing it

We rely on your consent, given by ticking the box on the form before submitting it. You can withdraw that consent at any time by emailing sl@evear.ca. We will stop contacting you and delete your enquiry, unless we are required to retain something to comply with law.

Who else processes your information

We keep the list of service providers deliberately short. Each of these processes information on our instructions only:

Provider	What it does	Where it is processed
Cloudflare	Hosts the website, serves it from its global network, applies security and rate limiting, and stores submitted enquiries	Global network, including servers in Canada and the United States
Resend	Delivers the notification email containing your enquiry to us	United States
Sentry	Reports technical errors so faults can be fixed. Configured to send error messages only, not form contents	United States

Because some of these providers operate outside Canada, your information may be stored or processed in another country — most often the United States — and may be accessible to the courts, law enforcement or national security authorities of that country. We use established providers that offer contractual protections for information transferred internationally.

How long we keep it

We keep enquiry information for up to 24 months from your last contact with us, so that we have context if you come back to us, and then delete it. If you become a client, engagement records are kept for as long as we need them for that relationship and for the period required by Canadian tax and business-records law. Automated request logs are short-lived and expire on our providers' own schedules.

How it is protected

• The whole site is served over HTTPS with HSTS enabled, so traffic is encrypted in transit.
• Enquiries are stored on Cloudflare infrastructure, encrypted at rest.
• The form is protected by spam filtering and rate limiting.
• Access to enquiry data is limited to the people at Evear who need it to respond to you.

No system is perfectly secure, and we cannot guarantee absolute security — but we do not collect more than we need, which is the most effective protection available.

What we never do

• We do not sell, rent or trade your information.
• We do not share it with advertisers or data brokers.
• We do not use it to build advertising profiles or track you across the web.
• We do not ask for, and you should never send us, patient health information through this form.

Your rights

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial law, you may:

• Ask what personal information we hold about you and request a copy
• Ask us to correct anything inaccurate or incomplete
• Withdraw your consent and ask us to delete your information
• Ask how your information has been used and who it has been disclosed to

Email sl@evear.ca and we will respond within 30 days at the latest. There is no charge. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada.

Links to other websites

This site links to oviz.ca, and may link to other third-party sites. Once you follow a link you are on someone else's website, governed by their privacy practices rather than this policy.

Children

This website is aimed at clinic owners and operators. It is not directed at children, and we do not knowingly collect information from anyone under 18.

Changes to this policy

If we change how we handle personal information, we will update this page and change the date below. Material changes affecting people who have already contacted us will be communicated by email where we hold an address for that purpose.