North Peak Digital Inc.

Privacy Policy

North Peak Digital Inc. ("we", "us", "our") respects your privacy and is committed to protecting personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website and use our services. Our practices align with Canadian privacy laws, including PIPEDA (Personal Information Protection and Electronic Documents Act), and with international regulations such as the EU General Data Protection Regulation (GDPR) and the UK GDPR for visitors in those regions. This service is available to users located in Canada.

Legal entity and contact: North Peak Digital Inc., 151 Yonge Street, Toronto, ON M5C 2W7, Canada. Email: [email protected]. You can also reach us through the Contact page. For quick access to cookie choices, use the button below.

1. Cookie Categories

Cookies and similar technologies help our site function, measure performance, and support advertising. We divide cookies into three categories. You can manage preferences through the cookie banner or the "Manage cookie preferences" controls available on this page and in the footer.

1) Essential Cookies

Purpose: core site functionality, security, session management. These are necessary to provide the website and cannot be switched off. Examples: session_id, csrf_token, cookie_consent_status. Consent required: NO — activated automatically. Retention: session duration or up to 12 months for preference storage.

2) Analytics Cookies

Purpose: measuring traffic, user behavior, and site performance to improve content. Tools: Google Analytics 4. Examples: _ga, _ga_XXXXXXX, _gid, _gat. Consent required: YES — activated only after you accept. Retention: up to 14 months.

3) Marketing / Advertising Cookies

Purpose: remarketing, personalized ad delivery, and conversion tracking. Consent required: YES — activated only after you accept. Retention: up to 540 days (Google Ads default).

2. Marketing Cookies — Required Disclosures

The following statements explain how advertising-related technologies operate on our site:

  • "Third-party vendors, including Google, use cookies to serve ads based on a user's previous visits to this website and other sites on the internet."
  • "We may work with advertising partners such as Google and Meta to deliver advertisements tailored to your interests across various websites and platforms."
  • "We may use remarketing services to advertise to previous visitors of our website. After visiting our site, you may see our ads on other websites, apps, or platforms you visit."
  • "Advertisements may appear across Google services including YouTube, Gmail, and the Google Display Network."
  • "We use the following tracking technologies on this website: - Cookies (first-party and third-party) - Tracking pixels (Google Ads tag / gtag.js, Meta Pixel) - Device identifiers (browser fingerprint, IP address) - Conversion event tags"
  • "We use conversion tracking to understand which advertisements lead to actions on our website — such as form submissions, calls, or purchases. This allows us to measure campaign effectiveness and allocate budget appropriately. Conversion data may be shared with Google Ads and Meta."
  • "Advertising and analytics technologies active on this site: - Google Ads (gtag.js / Google Tag Manager) - Google Analytics 4 - Google Remarketing Tag - Meta Pixel (Facebook / Instagram)"
  • "You may opt out of personalized advertising at any time: - Google Ads Settings: https://adssettings.google.com - Your Online Choices (EU): https://www.youronlinechoices.eu - Network Advertising Initiative: https://optout.networkadvertising.org - Digital Advertising Alliance: https://optout.aboutads.info Opting out does not remove ads entirely — you will continue to see non-personalized advertisements."
  • "Manage cookie preferences" is available in our footer and on this page to accept or reject analytics and marketing cookies at any time.

4. Data Sharing with Advertising Partners

We share certain data with advertising partners for campaign delivery and measurement. Recipients and the data categories shared include:

  • Google LLC: cookie identifiers, conversion events, anonymized behavioral data, remarketing lists. Governed by Google's Privacy Policy: https://policies.google.com/privacy
  • Meta Platforms, Inc.: pixel events, conversion data, custom audiences. Governed by Meta's Data Policy: https://www.facebook.com/privacy/policy

We do not sell personal data. All transfers to Google and Meta operate under Standard Contractual Clauses where applicable. Data is processed for ad targeting and campaign measurement only — not resold to unaffiliated third parties. Google and Meta may use this data across their own platforms in accordance with their respective policies. We encourage users to review those policies directly.

5. Lead Forms and Contact Requests

When you submit a contact form, request a quote, or register interest in our services, we collect the information you provide. This typically includes: full name, email address, phone number, and your message. Legal basis: consent (GDPR Art. 6.1.a) and, where a service relationship exists, performance of a contract (GDPR Art. 6.1.b). Retention: form submission data is retained for up to 2 years from the date of submission, unless a longer period is required by applicable law. You may request deletion of your data at any time by contacting us at [email protected]. A link to this Privacy Policy appears adjacent to every submission button on this site. Submitting a form constitutes acknowledgment of this policy.

6. Google Services and Advertising

This website uses the following Google services:

  • Google Analytics 4: collects anonymized usage data, device info, and behavioral signals. IP anonymization is enabled. Data retention is set to 14 months. Users may opt out via the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout
  • Google Ads Conversion Tracking: records when a user completes a defined action (form submission, call, purchase) after clicking one of our ads. This data is used solely for measuring ad campaign performance.
  • Google Remarketing: allows us to show ads to previous visitors across Google's network. Remarketing lists are not created from sensitive data categories (health, finance, religion, sexual orientation).
  • Google Tag Manager: deploys tracking tags on our behalf. No personal data is collected by GTM itself; it acts as a container for the tags listed above.

Google's advertising products are governed by: https://policies.google.com/technologies/ads

7. Meta Advertising Services

This website uses the Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram. The pixel may record: page views and time on site; specific conversion events (form submissions, purchases); and custom audience membership for retargeting purposes. We do not use the Meta Pixel to collect sensitive personal data, nor to target users based on health status, financial situation, religion, political views, sexual orientation, or any other special-category attribute prohibited under Meta's advertising policies. Meta acts as an independent data controller for data collected via its Pixel and processed within its own platform. Refer to Meta's Data Policy: https://www.facebook.com/privacy/policy. To manage your ad preferences on Meta platforms, visit: https://www.facebook.com/adpreferences/

8. Prohibited Content Self-Declaration

This website does not promote, sell, or facilitate access to prohibited product or service categories including but not limited to: weapons, controlled substances, counterfeit goods, gambling services (unlicensed), adult content, or services that make misleading health or financial claims. All advertising conducted through Google Ads and Meta Ads complies with the respective platform policies in full.

9. Landing Page Integrity Statement

The content of this website accurately represents the products and services advertised. No bait-and-switch practices are employed. The experience delivered to users arriving from paid advertisements is identical to the experience for all other visitors. Cloaking, automatic redirects, and content variation by traffic source are not used on this website.

10. Children's Privacy

This website is not directed at individuals under the age of 16. We do not knowingly collect personal data from minors. If we discover that data has been collected from a person under 16 without verifiable parental consent, we will delete it promptly. Contact us at [email protected] if you believe we have received data from a minor.

11. International Data Transfers

Personal data collected through this website may be transferred to and processed in countries outside the European Economic Area, including the United States, where Google LLC and Meta Platforms, Inc. are based. These transfers are conducted under Standard Contractual Clauses (SCCs) approved by the European Commission, which provide appropriate safeguards for personal data. A copy of the applicable SCCs can be requested by contacting us directly at [email protected].

12. Your Rights (GDPR Articles 15–22)

If you are located in the EEA or UK, you have the following rights: Access (Art. 15) to request a copy of data we hold about you; Rectification (Art. 16) to correct inaccurate or incomplete data; Erasure (Art. 17) to request deletion ("right to be forgotten"); Restriction (Art. 18) to limit how we process your data; Portability (Art. 20) to receive your data in a structured, machine-readable format; Objection (Art. 21) to processing based on legitimate interest; Withdraw consent (Art. 7.3) at any time without penalty. To exercise any right, email [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority: EU users: https://edpb.europa.eu; UK users: https://ico.org.uk.

For Canadian residents, you may request access to and correction of personal information held by us under PIPEDA. We will make reasonable efforts to assist, subject to legal and operational constraints, and will inform you of any reasons if a request cannot be fulfilled in full.

13. What Data We Collect

We collect only the information necessary to operate our site, respond to requests, improve our services, and deliver advertising where permitted by your consent.

  • Full name
  • Email address
  • Phone number
  • IP address
  • Browser type and version
  • Device type and operating system
  • Cookies and tracking identifiers
  • Usage data (pages visited, time on site, click paths)
  • Form submission content
  • Conversion events (form submits, calls, purchases)

15. Retention Periods

  • Contact form submissions: 2 years
  • Analytics data (GA4): 14 months
  • Marketing cookies (Google Ads): up to 540 days
  • Email communications: duration of relationship + 1 year
  • Server logs: 90 days
  • Cookie consent records: 3 years (audit requirement)

When retention periods expire, we securely delete or anonymize data unless a longer retention period is required by law or necessary to resolve disputes or enforce agreements.

16. Policy Metadata

Last Updated: January 15, 2026

Effective Date: January 15, 2026

Changes to this Privacy Policy will be notified via a homepage banner a minimum of 14 days before taking effect. We encourage you to review this page periodically for updates.

Managing Your Preferences

You can control analytics and marketing cookies at any time through the cookie banner or the preferences panel. Use the "Manage cookie preferences" button in the footer or at the top of this page to review your current choices. Opting out of personalized advertising will not remove ads entirely; it will limit ads to non-personalized formats.

Security and Storage

We use administrative, technical, and physical safeguards to protect personal information. These measures include encrypted transport (HTTPS), access controls, and regular review of service providers. While we take reasonable steps to protect your data, no method of transmission or storage can be guaranteed to be completely secure. If we detect a breach that creates a real risk of significant harm, we will take steps consistent with PIPEDA and applicable breach notification laws.

Contact Us

For questions about this policy, to exercise your rights, or to request access or deletion, contact: North Peak Digital Inc., 151 Yonge Street, Toronto, ON M5C 2W7, Canada. Email: [email protected]. We aim to respond within 30 days.