Privacy Policy

1. Information We Collect

We collect personal information that you voluntarily provide to us, including:

• Contact forms: name, email address, phone number, business type, and your message.
• Booking widget: name, email address, and your preferred meeting date and time.
• Marketing consent: whether you opted in to receive marketing communications, the exact consent text you agreed to, and the timestamp of your consent.
• Interaction tracking: when you click on contact links (email or phone) on our site, we may record the source of that interaction to understand how visitors engage with our content.

We do not collect sensitive personal information such as financial data, health information, or government-issued identifiers through our website.

2. How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and provide requested services.
• Schedule and confirm meetings or consultations you request.
• Send marketing communications only if you have given express consent, in compliance with CASL.
• Improve our website, services, and user experience based on aggregated usage patterns.
• Manage our business operations, including lead tracking and follow-up.

3. Legal Basis for Processing

We process your personal information based on:

• Consent: When you submit a form, book a meeting, or opt in to marketing, you provide express consent for us to process that data for the stated purpose.
• Legitimate interest: We have a legitimate business interest in understanding how visitors interact with our site to improve our services.
• Contractual necessity: When you engage us for services, processing your information is necessary to fulfil that agreement.

4. Cookies & Analytics

Our website does not currently use third-party analytics cookies or advertising trackers. We do not use Google Analytics, Facebook Pixel, or similar tracking technologies. If this changes in the future, we will update this policy and obtain consent where required.

Our hosting and backend infrastructure may use essential cookies or local storage for functional purposes (e.g., session management for administrative access). These are strictly necessary and do not track your personal browsing activity.

5. Third-Party Services

We use the following third-party services to operate our website and business:

• Supabase: Our backend infrastructure provider, used to securely store form submissions, leads, blog content, and project data. Supabase processes data in accordance with its own privacy policy.
• Vercel: Our website hosting provider. Vercel may collect standard server logs (IP address, browser type, access timestamps). See Vercel's privacy policy.

Our website contains links to third-party platforms, including Instagram and Facebook. These links are outbound only — we do not embed third-party tracking scripts from these platforms. Once you leave our site, their respective privacy policies govern.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, or as required by law. Specifically:

• Lead data: Retained for up to 24 months after your last interaction, unless you request deletion sooner.
• Marketing consent records: Retained for as long as required to demonstrate CASL compliance (typically 3 years after consent is withdrawn or expires).

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request that we delete your personal information, subject to legal retention obligations.
• Withdraw consent: You may withdraw your marketing consent at any time by contacting us or using any unsubscribe mechanism we provide.
• Complaint: You have the right to file a complaint with the Office of the Privacy Commissioner of Canada or your local data protection authority.

To exercise any of these rights, please contact us using the details below.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encrypted data transmission (HTTPS), role-based access controls, and secure cloud infrastructure. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact: