Last updated: March 2026 · Version 1.0
This Privacy Policy describes how Heron Skill Systems Inc. ("SkillGrader", "we", "us", or "our"), operating at 301B-1551 Johnston St, Vancouver, BC, Canada, collects, uses, and shares information about you when you visit skillgrader.com (the "Site").
SkillGrader serves organizations across the United States, Canada, the EU, the UK, and worldwide. As a company with a global customer base, we are committed to respecting applicable privacy laws in the jurisdictions we serve, including the California Consumer Privacy Act (CCPA), Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), the General Data Protection Regulation (GDPR), the UK GDPR, and applicable provincial and state privacy laws. We are actively working to align our practices with these frameworks.
1. Information We Collect
Information you provide directly
- Demo requests and contact forms: Name, work email address, organization name, job title, industry, and any message you include.
- Account registration: If you become a SkillGrader customer, additional information is collected during account setup. This is governed by a separate Data Processing Agreement.
Information collected automatically
- Log data: IP address, browser type, pages visited, time and date of visit, referring URL. This data is collected by our hosting provider for security and operational purposes.
- Cookies and similar technologies: See Section 3 (Cookies) for full details.
2. How We Use Your Information
We use the information we collect to:
- Respond to demo requests and sales enquiries
- Provide and improve the Site
- Monitor and analyse usage patterns to improve design and content (only with your consent)
- Comply with legal obligations
- Protect against fraud and abuse
We will never sell your personal information to third parties.
3. Cookies
Cookies are small text files stored on your device. We use the following categories of cookies:
| Category | Purpose | Legal Basis | Consent Required |
|---|---|---|---|
| Strictly Necessary | Cookie consent preferences, session security, basic site functionality | Legitimate interest / Legal obligation | No — always active |
| Analytics | Understanding how visitors use the site (e.g. Google Analytics with IP anonymisation) | Consent | Yes |
| Marketing | Personalised content and advertising on other platforms | Consent | Yes |
When you first visit the Site, a cookie banner will appear. You can choose to accept all cookies, accept only necessary cookies, or manage your preferences by category. You can change your preferences at any time using the button at the bottom-left of any page.
Your consent is stored locally in your browser and expires after 12 months, at which point you will be asked again. Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal.
4. Legal Basis for Processing (EU/UK Visitors)
For visitors in the EU and UK, we intend to process personal data in accordance with GDPR principles. Our intended legal bases are:
- Consent (Art. 6(1)(a)): Analytics and marketing cookies; email marketing (where applicable)
- Contract (Art. 6(1)(b)): Processing necessary to respond to demo requests and provide the service
- Legitimate interests (Art. 6(1)(f)): Security, fraud prevention, and improving our Site
- Legal obligation (Art. 6(1)(c)): Compliance with applicable law
5. Data Sharing
We may share your information with:
- Service providers: Hosting, analytics, and CRM providers who process data on our behalf under appropriate data processing agreements
- Legal authorities: Where required by law, court order, or to protect our legal rights
We do not sell, rent, or trade your personal information.
6. International Transfers
SkillGrader is headquartered in Canada and serves customers globally, including in the United States, EU, UK, and beyond. Data may be transferred to and processed in the US, Canada, and other countries where our service providers operate. Where data is transferred from the EEA or UK to a country without an adequacy decision, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses. Canadian privacy law is recognized by the EU as providing adequate protection under PIPEDA.
7. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Rectify inaccurate personal data
- Erase your personal data ("right to be forgotten")
- Restrict or object to processing
- Data portability — receive your data in a structured, machine-readable format
- Withdraw consent at any time (for consent-based processing)
- Lodge a complaint with your supervisory authority
To exercise any of these rights, contact us at privacy@skillgrader.com. We will respond within 30 days.
8. Data Retention
We retain personal data only as long as necessary for the purpose it was collected, or as required by law. Demo request data is retained for up to 24 months. Cookie consent records are retained for 13 months.
9. Security
SkillGrader is SOC 2 compliant. Our security program is independently audited against the AICPA Trust Services Criteria, covering security, availability, and confidentiality. We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or disclosure. Our Site is served over HTTPS. Access to personal data is restricted to staff who need it to perform their duties. Copies of our SOC 2 report are available to customers and prospective customers upon request under NDA — contact privacy@skillgrader.com.
10. Children's Privacy
Our Site is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
11. Changes to This Policy
We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Material changes will be communicated via a notice on the Site.
12. Contact
For privacy-related enquiries or to exercise your rights:
- Email: privacy@skillgrader.com
- Post: Heron Skill Systems Inc., 301B-1551 Johnston St, Vancouver, BC V6H 3R9, Canada
For EU/UK matters, our Data Protection contact is reachable at the email above.