Privacy

Privacy Policy

Effective date: 13 July 2026. This Policy describes how CampaignSpark Inc. (“CampaignSpark”, “we”, “us”) collects, uses, discloses and safeguards personal information in Canada.

1. Who we are

CampaignSpark Inc. is a digital marketing agency with its principal studio at 100 Ouellette Avenue, Suite 1100, Windsor, ON N9A 6T3, Canada. Our Business Number is 851947263ON0001. We provide performance marketing services including search engine optimisation, paid media management, conversion rate optimisation, analytics instrumentation support, content growth systems and related consulting. We are not a software-as-a-service vendor, artificial intelligence product company, information technology managed services provider, or general web development studio, although we may collaborate with such providers when clients authorise us to do so.

For privacy questions or requests, contact us at [email protected] or +1 (226) 555-8173. Please include enough detail for us to verify your identity and locate relevant records. We aim to respond within a reasonable time consistent with Canadian privacy expectations and any applicable statutory timelines.

2. Scope of this Policy

This Policy applies to personal information we collect through campaignspark.pro, related landing pages we operate, email and telephone communications, in-person or virtual meetings, client onboarding materials, advertising platform accounts we manage on a client’s behalf, and events or workshops we host. It does not govern third-party websites linked from our pages, advertising platforms owned by third parties (such as Google or Meta), or tools exclusively controlled by a client’s own organisation. Those parties publish their own privacy notices.

Where we process personal information solely as a service provider to a business client under a services agreement, the client remains responsible for ensuring it has a lawful basis to provide that information to us. Our contractual schedules may set additional processing instructions that complement this Policy.

3. Personal information we collect

The categories of personal information we may collect include identifiers and contact details such as name, job title, employer, business email address, telephone number and mailing address; commercial information such as programme interests, budget ranges discussed, contract history and invoice contacts; communication content such as messages submitted through forms, email correspondence and meeting notes; technical data such as IP address, browser type, device characteristics, referring URLs and approximate location derived from IP; cookie and similar technology data as described in our Cookie Policy; and, for clients, advertising account identifiers, conversion event configurations and performance reports that may incidentally include end-customer personal information supplied by the client’s systems.

We do not knowingly seek sensitive personal information unrelated to business communications. Please do not submit government identification numbers, health information or other highly sensitive data through our public website forms. If a services engagement requires limited access to customer personal information inside analytics or CRM tools, access is restricted to personnel who need it and governed by confidentiality obligations.

4. How we collect information

We collect information directly from you when you complete a contact or briefing form, consent to PIPEDA-related processing on that form, email or call us, attend a workshop, or become a client. We collect information automatically when you browse our website through server logs and, if you opt in, analytics or marketing cookies. We may also receive information from professional referrals, publicly available business directories, and advertising platforms when you interact with our ads, subject to those platforms’ settings and your choices.

Our website forms include a honeypot field intended to reduce automated spam. Fields that humans should leave blank are not used to profile individuals. Mandatory consent checkboxes for PIPEDA-related form submissions are not pre-checked; you must actively indicate consent before submitting an enquiry.

5. Purposes of use

We use personal information to respond to enquiries and book performance briefings; to prepare proposals and statements of work; to deliver marketing services and report on campaign performance; to operate, secure and improve our website; to send service-related notices; where permitted, to send occasional marketing communications about programmes or events with an easy unsubscribe path; to detect fraud, spam and abuse; to maintain business records and meet legal, accounting and insurance requirements; and to establish, exercise or defend legal claims.

We do not sell personal information. We do not use website form submissions to train public artificial intelligence models. If we ever introduce optional AI-assisted internal tools for drafting or analysis, we will assess privacy risk and avoid feeding confidential client data into tools that lack appropriate contractual protections.

6. Consent

We rely on consent, contractual necessity and legitimate business purposes consistent with PIPEDA’s fair information principles. Consent may be express — for example, ticking the consent box on our contact form — or implied where it is reasonable in the circumstances, such as using a business email address you provide to complete an engagement discussion you initiated. You may withdraw consent for optional marketing communications at any time. Withdrawal of consent may limit our ability to provide certain services if the information is required to perform them; we will explain any consequences when you make such a request.

7. Disclosure to service providers and partners

We may share personal information with hosting and email infrastructure providers, professional advisors (legal, accounting), payment processors when invoices are settled electronically, and subcontractors who assist with specialised creative, analytics or media tasks under confidentiality terms. Advertising platforms receive data according to the tags and integrations a client authorises. We may disclose information if required by law, court order or governmental request, or if necessary to protect the rights, property or safety of CampaignSpark, our clients or the public.

Some providers may process data in Canada or other jurisdictions with comparable or different privacy laws. When information is transferred outside Canada, we take reasonable contractual and organisational steps appropriate to the sensitivity of the data and the nature of the transfer.

8. Retention

We retain personal information only as long as needed for the purposes described above, including limitation periods for contracts and statutory record-keeping. Enquiry records that do not convert to clients are typically reviewed periodically and deleted or anonymised when no longer required. Client files are retained according to the services agreement and archival needs. Website logs and cookie data follow the periods described in the Cookie Policy or tool-specific settings.

9. Security

We implement administrative, technical and physical safeguards reasonably appropriate to the sensitivity of the information, including access controls, encrypted transport for form submissions over HTTPS, staff confidentiality expectations and vendor due diligence proportionate to risk. No method of transmission or storage is perfectly secure. If we become aware of a breach that poses a real risk of significant harm, we will assess notification duties under applicable Canadian law and inform affected individuals and regulators as required.

10. Access, correction and complaints

Subject to legal exceptions, you may request access to personal information we hold about you and request corrections to inaccurate data. Write to [email protected] with “Privacy request” in the subject line. We may need to verify your identity. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or, where applicable, the Information and Privacy Commissioner of Ontario.

11. Children’s privacy

Our website and services are directed to businesses and professionals. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact us and we will take appropriate steps to delete it.

12. Third-party links and platforms

Our site may link to third-party resources. We are not responsible for their privacy practices. When we manage advertising or analytics accounts for clients, platform-level privacy settings and data processing terms of those platforms also apply. Clients remain responsible for their own privacy notices to end customers and for configuring consent mechanisms on their digital properties.

13. Automated decision-making

We do not make decisions that produce legal or similarly significant effects about individuals solely through automated processing of personal information collected on this website. Campaign optimisation decisions for advertising are commercial and typically concern aggregated performance rather than profiling of identifiable individuals for eligibility determinations.

14. Changes to this Policy

We may update this Policy to reflect operational, legal or technological changes. The effective date at the top of this page will be revised when material changes occur. Continued use of the website after an update constitutes notice of the revised Policy for website visitors. Material changes affecting client processing may also be communicated through contractual channels.

15. Contact

CampaignSpark Inc., 100 Ouellette Avenue, Suite 1100, Windsor, ON N9A 6T3, Canada. Email: [email protected]. Phone: +1 (226) 555-8173. Business Number: 851947263ON0001. This Privacy Policy was last reviewed on 13 July 2026.

If you have questions about how performance marketing measurement interacts with privacy, we are happy to discuss privacy-aware tracking approaches during a briefing. Responsible growth includes respecting the people behind every click, lead and customer relationship — and documenting that respect clearly.