Privacy Policy

Effective Date: January 15, 2026

1. What this policy covers

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our website, contact us, engage our services, or otherwise interact with us (collectively, the “Services”).

We operate from Canada and work with clients in Canada, the United States, and Europe. We aim to comply with applicable privacy laws, including Canada’s PIPEDA, Canada’s Anti-Spam Legislation (CASL), and where applicable the EU/UK GDPR and U.S. state privacy laws (such as California’s).

2. What we collect

3. How we use your information

We use personal information for purposes such as:

• Providing and improving our Services, including delivering contracted work
• Responding to inquiries and communicating with you
• Managing proposals, onboarding, accounts, and payments
• Operating, maintaining, and securing our website and systems
• Analytics to understand website performance and improve user experience
• Sending service updates and, where permitted, marketing communications (you can opt out at any time)
• Complying with legal, regulatory, and professional obligations

4. Legal bases and consent (Canada, EU/UK, U.S.)

In Canada, we collect, use, and disclose personal information with consent (express or implied), unless otherwise permitted or required by law. We follow CASL for commercial electronic messages. If you provide your contact information, you can withdraw consent for marketing at any time.

Where the EU/UK GDPR applies, we rely on one or more legal bases such as: performance of a contract, legitimate interests (e.g., operating and securing our business), consent (e.g., optional marketing), and legal obligations.

5. When we share information

We may share personal information in limited circumstances, including:

• Service providers: vendors who support our operations (e.g., hosting, analytics, email, scheduling, document storage, invoicing, payment processing) and who are required to protect information and use it only to provide services to us.
• Legal and safety: where required by law, court order, or to protect rights, safety, and security (for example, to prevent fraud or respond to lawful requests).
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets (with appropriate safeguards).

We do not sell your personal information in the ordinary sense of “selling data for money.” If a law defines “sale” or “sharing” more broadly (e.g., for advertising), we aim to provide appropriate choices where required.

6. Cookies, pixels, and analytics

We use cookies and similar technologies to operate our website, remember preferences, understand website traffic, and improve performance. You can control cookies through your browser settings. Declining cookies may affect some website functionality.

Google Analytics

We may use Google Analytics to understand how visitors use our site. Google may process data according to its own policies. You can opt out by using browser controls, blocking analytics cookies, or using Google’s opt-out tools where available.

7. International transfers

Because we are Canada-based and may use service providers in other countries, your information may be processed or stored outside your province, state, or country. Those jurisdictions may have different privacy laws. We take reasonable steps to ensure appropriate safeguards are in place when transferring information.

8. Retention

We retain personal information only as long as necessary for the purposes described in this Policy, including to deliver services, meet legal/accounting requirements, resolve disputes, and enforce agreements. We then delete, anonymize, or securely destroy it where appropriate.

9. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

10. Your choices and rights

• Access and correction: You may request access to your personal information and ask us to correct inaccuracies, subject to legal exceptions.
• Marketing opt-out: You can unsubscribe from marketing emails at any time (for example, using the link in the email).
• EU/UK rights (where applicable): You may have rights to object, restrict processing, request deletion, and data portability, and to withdraw consent.
• U.S. state rights (where applicable): You may have rights to know, delete, correct, and opt out of certain data uses.

To make a request, contact us using the details in Section 13. We may need to verify your identity before fulfilling a request.

11. Children’s privacy

Our Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will take appropriate steps.

12. Links to other sites

Our website may link to third-party websites. We are not responsible for their privacy practices. We encourage you to review the privacy policies of any site you visit.

13. Contact us (Privacy Officer)

14. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the Effective Date above.