Privacy Notice

1. Who we are

GrowthCraft Co Inc. (“GrowthCraft Co”, “we”, “us”) is a Québec City creative digital marketing agency with its principal place of business at 625 rue Jacques-Parizeau, Suite 1100, Québec City, QC G1R 2G5, Canada. Our Business Number is BN 863174259QC0001. This Privacy Notice explains how we handle personal information when you visit growthcraftco.pro, submit a growth brief, engage our programmes or communicate with our studio.

We are accountable for personal information under our control. Questions, access requests and complaints may be directed to [email protected] or by telephone at +1 (418) 555-7462 during Mon–Fri 09:00–17:00 ET. We design our marketing services for organisations; however, individuals who contact us still benefit from the protections described here.

2. Scope and Canadian privacy framework

This Notice is written primarily with reference to the Personal Information Protection and Electronic Documents Act (PIPEDA) for commercial activities and with awareness of Québec’s Act respecting the protection of personal information in the private sector as amended. Where Québec law imposes additional requirements on collection, consent, retention or incident notification, we align our practices accordingly.

GrowthCraft Co is not a public body news publisher, not a software-as-a-service product vendor whose terms replace this Notice, and not an IT outsourcing operator with separate data-centre SLAs as its primary business. Personal information processing described here supports our digital marketing agency operations: enquiries, client delivery, analytics for our own website and necessary administration.

3. Personal information we may collect

We may collect identity and contact details such as name, email address, telephone number, organisation name, job title and mailing address when you submit forms, sign statements of work or correspond with us. We may collect professional context such as campaign objectives, channel preferences, budget ranges and creative brand guidelines necessary to deliver programmes.

Technical data from website visits may include IP address, browser type, device class, referring URLs, pages viewed and approximate location derived from network information. Cookie and similar technology data are described further in our Cookie Notice. If you apply for a role or collaborate as a freelance creative, we may collect résumé details and portfolio links solely for evaluation.

We do not knowingly solicit personal information from children. Media account credentials for client platforms are typically held under client ownership; when temporary access is required, we treat those credentials as confidential business information subject to contractual controls.

4. Purposes of collection and use

We collect and use personal information to respond to growth briefs and general enquiries; to negotiate and perform marketing programmes and services; to invoice, collect payment and maintain accounting records; to send service communications about workshops, deliverables and reviews; to improve our website usability and programme materials; to detect spam, fraud and security incidents; and to meet legal, tax and regulatory obligations applicable in Canada and Québec.

We do not sell personal information. We do not use enquiry data to train unrelated public generative models. Optional marketing emails, if ever offered, would require separate identifiable consent and an unsubscribe path. Analytics on our website may help us understand which programmes attract interest; such processing is balanced against privacy expectations and cookie preference choices.

5. Consent

Where PIPEDA requires consent, we rely on meaningful consent appropriate to the sensitivity of the information and the reasonable expectations of individuals. Submitting the contact form with the PIPEDA consent checkbox checked constitutes express consent to process the submitted information to respond to that enquiry.

Continuing to browse our site after reviewing cookie options may involve consent to optional analytics cookies if you choose Accept all or customise preferences to enable analytics. You may withdraw consent for optional processing by contacting [email protected], subject to legal or contractual restrictions and reasonable notice. Withdrawing consent may limit our ability to provide certain optional features but will not generally affect necessary contractual performance already underway.

6. Limiting collection, use, disclosure and retention

We aim to collect only what is reasonably required for identified purposes. Staff access personal information on a need-to-know basis for client work or administration. We retain enquiry records for a period aligned with legitimate business and limitation-period needs, typically up to twenty-four months for unsuccessful leads unless a longer relationship or legal hold applies. Contractual and financial records follow statutory retention schedules for Canadian businesses.

When retention is no longer required, we securely destroy or anonymise personal information. Aggregated insights that no longer identify individuals may be kept to improve methodologies. Clients remain responsible for personal information inside their own advertising, CRM and analytics platforms; our role is limited to processing necessary to perform the agreed marketing services.

7. Disclosure to service providers

We may disclose personal information to service providers that host email, file storage, project management, accounting or website infrastructure. We prefer Canadian and North American infrastructure where practical and bind providers by contract to protect information and use it only for instructed purposes.

We may disclose information to professional advisers such as lawyers or accountants under confidentiality, or to authorities when required by law, court order or to protect vital interests and security. Cross-border transfers, if any, are assessed for comparable safeguards. If a provider stores data outside Canada, we evaluate contractual protections and inform clients where contractual notifications are required.

8. Safeguards

We apply administrative, technical and physical safeguards proportionate to the sensitivity of information: access controls, secure transmission where feasible, staff guidance on phishing and confidential handling, and facility access limitations at our Jacques-Parizeau suite. No method of transmission over the Internet is perfectly secure; we nonetheless work to reduce residual risk.

In the event of a privacy incident posing a real risk of significant harm, we will assess notification duties under applicable Canadian and Québec rules and communicate with affected individuals and regulators as required. Please report suspected incidents promptly to [email protected].

9. Accuracy and individual rights

We rely on individuals and client organisations to supply accurate information. You may request access to personal information we hold about you, subject to exceptions permitted by law, and request corrections of inaccurate data. Requests should be sent to [email protected] with enough detail for us to locate the records. We respond within timelines prescribed by applicable law.

You may also ask questions about our privacy practices, challenge our compliance and request information about service providers when appropriate. We document complaints and strive to resolve them. If you remain unsatisfied, you may contact the Office of the Privacy Commissioner of Canada or the Commission d’accès à l’information du Québec, as applicable to your circumstances.

10. Marketing analytics and client campaigns

When we manage paid media or analytics setups for clients, we process campaign data primarily as a service provider to the client organisation. Clients must ensure they have lawful bases and notices for their end customers. We advise on configuration but do not assume the client’s role as organisation responsible for consumer-facing privacy notices unless a contract states otherwise.

Campaign and growth outcomes depend on market dynamics, media spend, creative quality and platform algorithms. GrowthCraft Co delivers strategy, creative and performance management — results differ. No guaranteed rankings, revenue multiples, viral reach or ROI. Representative examples only. GrowthCraft Co is not a software product vendor, IT outsourcing firm, news publisher or generic web studio. Outcome disclaimers do not reduce our privacy obligations; they clarify marketing performance expectations.

11. Website content and third-party links

Our website may link to third-party platforms such as social networks or map tools. Those destinations have their own privacy practices. Embedding or outbound links do not imply we control those entities. Review third-party policies before providing them with personal information.

12. Changes to this Notice

We may update this Privacy Notice to reflect operational, legal or programme changes. The “Last updated” date at the top will change when revisions are published. Material changes affecting consent practices will be communicated through the site or direct notice where appropriate. Continued use of the site after updates constitutes awareness of the revised Notice for informational browsing; contractual relationships incorporate the version referenced in statements of work.

13. Contact for privacy matters

Privacy Officer contact: [email protected]. Postal address: GrowthCraft Co Inc., 625 rue Jacques-Parizeau, Suite 1100, Québec City, QC G1R 2G5, Canada. Telephone: +1 (418) 555-7462. Business Number: BN 863174259QC0001. Office hours: Monday to Friday, 09:00–17:00 Eastern Time.

Thank you for trusting GrowthCraft Co with your enquiry and partnership. Protecting personal information is part of how we earn the right to craft growth programmes for Canadian organisations.