What this site collects, and why.
Apart from the technical data in sections 04 and 05, the only personal information the site collects is what you send through its forms, and the record of a full-brief request.
The organisation responsible.
- The organisation
- Strature Geopolitical Prospects & Strategy Inc., a federal corporation based in Toronto, Ontario (“Strature”, “we”).
- Mailing address
- 375 University Avenue, Suite 3297, Toronto ON M5G 2J5, Canada
- The person responsible for personal information
- Milad Naeimi, Founder and Principal
- How to reach us
- Through the contact form: choose “A general inquiry” and say that your message is about privacy.
Only what you type into a form.
The site has a request form (for an advisory engagement, a briefing or presentation, a question about a brief, a question suggested for the series, the RBC demo, an Exposure pilot, or a general inquiry) and the GPS Signal subscription form, described below. When you send the request form, we receive:
- your name, work email, organisation and role;
- what you are requesting (the request type), and the page the form was sent from;
- your message, if you write one (it is optional);
- your consent: that the box was ticked, the wording you agreed to, and the time it was sent;
- on a request that requires it: your confirmation that you act for an organisation, for business purposes, and that it is not a foreign state or owned or controlled by one;
- for a request for a full brief: what is listed under Full-brief downloads below.
If you suggest a question for the series, your name is never printed in the brief.
Nothing is collected from a form you do not send. We do not ask for, and do not want, sensitive information such as financial or health details; please do not put it in a message.
To answer your request, and for nothing else.
- Purpose
- We use your details only to answer the request you sent; to arrange a brief you asked for; to supply a full brief you asked for and check, as the law requires, that we may supply it; and to confirm that we supply only organisations and not foreign states.
- Where it is stored
- In Strature’s own Microsoft Azure cloud storage, in the Canada Central region. The form service that receives and relays your request runs in Microsoft Azure’s East US 2 region, so the request passes through the United States on its way to storage. A copy of each request is emailed to the founder so that he can reply.
- Who sees it
- The founder. The copy of each request, and each order for approval, is emailed to the firm’s own mailbox, hosted by Microsoft 365, which the founder reads. Microsoft Azure stores and sends the records on our behalf as our cloud provider.
- Never sold or shared
- We do not sell your information, and we do not share it with anyone else.
- Advisory clients
- Material a client gives us during an advisory engagement is covered by the engagement letter, not by this policy. It is kept separately for each client and is never pooled, shared with another client or used in a published brief.
- How long it is kept
- Requests and order records: 24 months, then deleted. Full-brief requests: see Full-brief downloads.
Full-brief downloads.
- What we collect
- When you ask for a full brief, we keep: your name, organisation, role and work email; the country where your organisation is located; the brief and edition; the declarations you ticked and the terms you accepted (their wording, version and time); whether your request was held for review, and why; the Principal’s decision and its time, if your request was reviewed; and when the confirmation link and the download were used, and how often.
- Why
- To confirm your email address; to supply the brief under its terms; to keep a record that you accepted them; and to meet our legal obligations, which include not supplying sanctioned parties, foreign governments or the places where we do not supply the brief.
- How a request is decided
- We rely on the declarations you make on the form: that you request the brief for an organisation, that it is not a foreign state or controlled by one, that neither you nor it is on a sanctions or terrorist list, that it is not in or acting for a place where we do not supply the brief, and that what you give us is true. Our service does not check your name, organisation or email address against sanctions lists, and your details are not sent to any government or screening company. If you declare that your organisation is located in a place where we do not supply the brief, or if the brief is one our Principal reviews every time, he reviews the request before anything is decided; otherwise the link is sent automatically. No request is refused automatically. You may ask us what information was used and ask for a review of the decision (see section 06).
- How long we keep it
- A request that was not held for review and whose confirmation link is never used is deleted after 30 days. Other requests, and their decision and download records, are kept for 24 months, then deleted, unless we must keep a request longer because of a legal claim, or an inquiry by an authority, that concerns it.
- Where it is processed
- As for other requests: received by our form service in Microsoft Azure’s East US 2 region (United States), stored in Microsoft Azure in the Canada Central region, and emailed through Microsoft Azure Communication Services. A notice of each request held for review is emailed to the firm’s own mailbox, hosted by Microsoft 365, which the Principal reads. While your information is in the United States, or with these providers, it may be accessed by authorities there under their laws.
- Not sold or shared
- We do not sell it, and we share it with no one except these providers, and with an authority where the law requires us to.
The monthly email, if you subscribe.
- What we keep
- If you subscribe to GPS Signal, Strature’s free monthly email, on the GPS Signal page, we keep your email address; your name, if you give it; the consent wording you agreed to, its version and the time; the page you subscribed from; and the times you confirmed and, later, unsubscribed.
- What it is used for
- Only to send you GPS Signal. Nothing is sent until you confirm your address from the email we send you; an address that is never confirmed receives nothing more. An address that is not confirmed within 30 days is deleted. We do not track whether you open an issue or click its links.
- Unsubscribing
- Every email carries a one-click unsubscribe link. You can also unsubscribe through the contact form. After you unsubscribe, we keep your address, the consent record and the time you unsubscribed, only as the record that stops any further email and shows what you agreed to.
- Where it is stored and sent
- In the same Microsoft Azure cloud storage as requests, in the Canada Central region. Each issue is sent through Microsoft Azure Communication Services, as our cloud provider. It is not sold or shared with anyone else.
Two checks against abuse.
Only this site’s own pages. The form service accepts a submission only if the browser reports that it was sent from a page of this site. This check uses the web address the browser sends with the request; it stores nothing extra.
A limit on how often. The form service limits how many submissions can be sent from one source in a short time. To do that it uses the IP address the request arrives from. The address is held only in the form service’s working memory, is not written to storage, and is used for nothing else. Microsoft Azure, as our cloud provider, may keep its own technical logs of requests, which can include IP addresses, under Microsoft’s privacy statement.
To stop repeated requests, the form service also keeps, for two days, a one-way code made from your email address (not the address itself), with the identifiers of your recent requests.
No tracking. One outside service: fonts.
This site sets no tracking or analytics cookies and uses no analytics service. Under Quebec’s Law 25, any technology that can identify, locate or profile a visitor must be off by default; on this site there is none to turn on.
Fonts. The text typeface, Newsreader, is served from this site’s own host. Two others, IBM Plex Sans and IBM Plex Mono, are loaded from Google Fonts. When a page loads, your browser requests those fonts from Google’s servers, so your IP address reaches Google, as it does for any web request. Google’s handling of that request is governed by Google’s own privacy policy.
Access, correct, withdraw.
- Access
- You can ask to see the personal information we hold about you.
- Correct
- You can ask us to correct it if it is wrong or incomplete.
- Review
- If an automatic check affected your request, you can ask what information was used and ask for the decision to be reviewed by a person.
- Withdraw consent
- You can withdraw your consent to receive email at any time, by replying to any message, or through the contact form.
- How to ask
- Use the contact form. If you are not satisfied with our answer, you may contact the Office of the Privacy Commissioner of Canada, or, if you are in Quebec, the Commission d’accès à l’information.
Ontario and Canada.
This policy is governed by the laws of Ontario and the federal laws of Canada that apply there.
If what the site collects changes, this page will be updated before the change takes effect.
In effect from 2 October 2026. Drafted with the help of AI systems and not reviewed by a lawyer.