Last updated: July 31, 2026
This Privacy Policy explains how information submitted through the Supply Chain Analysis intake form (the “Intake Form”) is collected, used, disclosed, reviewed, published, retained, and protected.
The Intake Form is provided by Ruby Industries Inc. (operating as CityViz) (“CityViz”) for the municipality, economic development organization, regional partnership, or other organization identified on the website where the Intake Form appears (the “Client Organization”).
This policy applies only to the Intake Form and supplements the general CityViz Privacy Policy available on the applicable CityViz instance. If a Client Organization provides an additional collection notice, that notice should be read together with this policy.
The Client Organization determines the purposes of the supply-chain data collection, who may access the submitted information, and how approved business profiles will be used or published. The Client Organization is generally the organization responsible for the information or the data controller under applicable law.
CityViz provides and hosts the Intake Form, stores submissions, supports review and moderation, and processes information on behalf of the Client Organization. For these activities, CityViz generally acts as a service provider or data processor and follows the Client Organization’s documented instructions.
CityViz acts independently for limited operational purposes such as Platform security, fraud and abuse prevention, technical support, service monitoring, and compliance with legal obligations.
The exact fields may vary by Client Organization or form configuration. The Intake Form may collect the following categories of information.
Although this information is provided in a business context, it may still be personal information because it identifies an individual.
When the Intake Form is accessed or submitted, CityViz and its service providers may collect:
The Intake Form may use controls such as a hidden anti-spam field, IP-based rate limiting, or Google reCAPTCHA when enabled. The applicable service provider may process device and interaction information under its own terms and privacy policy.
The Client Organization and CityViz may use submitted information to:
The tool may generate rankings, matches, classifications, or opportunity indicators from business information. These outputs are informational and are not intended to make legal or similarly significant decisions about an individual.
Submitting the Intake Form does not guarantee that a business will be included in the Supply Chain Analysis tool or a public directory.
Submissions may be placed in a pending review queue. Authorized reviewers may:
Material changes to the meaning of a submission should not be made without a reasonable basis. A business representative may request access to or correction of information as described below.
After review and approval, some business-profile information may be displayed in the Supply Chain Analysis tool, a business directory, a map, a client website, reports, or data exports. Depending on the Client Organization’s configuration, publishable information may include:
Because the purpose of the Intake Form is to create and maintain supply-chain intelligence, approved business-profile information may be shared with authorized economic development staff, participating organizations, buyers, suppliers, program partners, authenticated Platform users, or the public, depending on the program and access settings.
A named representative’s personal contact information is not intended for unrestricted public display unless the Intake Form clearly states that it will be published and the individual provides the required consent.
Unless otherwise disclosed at collection, named contact information will be accessible only to:
The Client Organization may use the contact information to verify or update the business profile and to communicate about supply-chain, economic-development, procurement, or related program opportunities. Unrelated marketing requires a separate lawful basis or consent where required.
The Client Organization and CityViz may use and disclose statistics or analyses that do not reasonably identify an individual, such as counts of businesses by industry, commonly reported inputs, capacity ranges, or supply gaps.
By submitting the Intake Form, the submitter confirms that:
Where consent is required, it may be withdrawn for future processing, subject to legal, contractual, records-management, and operational restrictions. Withdrawal may prevent the Client Organization from maintaining or displaying the business profile or providing associated program services.
Submitting the Intake Form does not by itself constitute consent to receive unrelated commercial marketing messages.
The Intake Form may use essential cookies or local storage for session management, security, form navigation, and preservation of information while the form is being completed.
CityViz may use Google Analytics to understand how the Intake Form and related Platform features are used, evaluate completion and error patterns, and improve usability. Analytics may process device and browser information, online identifiers, usage events, and approximate location information.
Analytics is intended to measure use of the form, not the business or personal information entered into form fields. The website embedding the Intake Form may also use its own cookies, analytics, or privacy controls. Those practices are governed by the website operator’s privacy policy.
CityViz and the Client Organization do not sell or rent named representative personal information.
Information may be disclosed to:
Service providers may use information only to provide contracted services and must protect it using safeguards appropriate to the information.
CityViz seeks to host primary Platform data in Canada unless a client agreement or service configuration specifies otherwise. Some analytics, email, security, support, or anti-abuse providers may process information in other provinces or countries.
Information processed outside the jurisdiction where it was collected may be subject to the laws of that jurisdiction and may be accessible to courts, law enforcement, or national-security authorities in accordance with those laws.
CityViz and the Client Organization use contractual and other safeguards designed to protect information handled by service providers.
The Client Organization determines the program’s primary retention requirements. CityViz retains information on its behalf only for as long as reasonably necessary to provide the service, support moderation and data maintenance, meet security and audit needs, comply with law, and satisfy contractual obligations.
In general:
A request to remove personal information may not require deletion of non-personal business information that the Client Organization is otherwise authorized to retain or publish.
CityViz and the Client Organization use administrative, technical, and physical safeguards appropriate to the sensitivity and use of the information. Measures may include:
No system can guarantee absolute security. If a privacy or security incident occurs, CityViz and the Client Organization will investigate, mitigate harm, maintain required records, and provide notifications where required by law or contract.
Subject to applicable law, a named representative may request:
A business representative may also request correction or updating of the business profile. The Client Organization may require reasonable verification of identity, authority, or the accuracy of the requested change.
Because the Client Organization determines the purposes of the Intake Form, requests should normally be directed to the program contact shown in the Intake Form footer or on the website where the form is embedded. CityViz will assist the Client Organization where appropriate.
You may raise a privacy concern with the Client Organization or CityViz. You may also have the right to complain to the Office of the Privacy Commissioner of Canada or the applicable provincial or territorial privacy commissioner.
The Intake Form is intended for adult representatives of businesses and organizations. It is not directed to children, and children should not submit information through the form.
This policy may be updated to reflect changes to the Intake Form, program, service providers, legal requirements, or privacy practices. The updated policy will be posted with a revised “Last updated” date. Where required, the Client Organization or CityViz will provide additional notice or obtain consent before a material new use or disclosure of personal information.
For questions about the supply-chain program, a submission, or the Client Organization’s use of information, contact the program email address shown in the Intake Form footer or on the website where the form is embedded.
For questions about CityViz’s privacy or security practices, contact:
Privacy Coordinator
Ruby Industries Inc. (o/a CityViz)
Email: privacy@cityviz.ca