Privacy Policy

Who we are

Hubfolio Digital Marketing Ltd. ("Hubfolio", "we", "us") is a digital marketing agency incorporated in Alberta, Canada, operating from Calgary and serving clients across Canada. We are the organisation responsible for the personal information described in this policy.

Questions, access requests and complaints can be directed to our Privacy Officer at info@hubfoliodigital.ca.

The law we operate under

We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA), Alberta’s Personal Information Protection Act (PIPA), and Canada’s Anti-Spam Legislation (CASL). Where a client is subject to additional obligations — for example under Quebec’s Law 25 or the EU GDPR — we will accommodate those obligations under the terms of our engagement with that client.

Information we collect

We collect only what we need for the purposes described below.

From website visitors

• Information you submit through our enquiry form: name, business name, email address, telephone number, service required, budget range, service area, website address, and the content of your message
• Technical information collected automatically: IP address (truncated where possible), browser and device type, referring page, pages viewed, and approximate city-level location
• Cookie and analytics identifiers, as described in our Cookies Policy

From clients

• Business contact details for the individuals we work with
• Billing information — business name, address, and payment references (we do not store full payment card numbers)
• Account credentials and access permissions you grant us to platforms such as Google, Meta and your website
• Business information you provide so we can perform the work: pricing, service lists, customer data where you choose to share it, and marketing history

On behalf of clients

When we operate advertising, analytics or website systems for a client, personal information about that client’s own customers may pass through those systems. In that context the client is the organisation responsible for the information and we act as a service provider under their direction, using it only to deliver the agreed services.

Why we collect it

• To respond to enquiries and prepare quotes
• To deliver the services set out in a signed quote or agreement
• To administer billing, accounting and tax records
• To maintain the security and integrity of systems we manage
• To send marketing communications where you have given express or implied consent under CASL
• To meet legal, regulatory and record-keeping obligations

Consent

We collect, use and disclose personal information with your consent, except where the law permits or requires otherwise. Providing your details through our enquiry form constitutes consent to be contacted about that enquiry.

Marketing emails are sent only where you have given express consent (for example by ticking the subscribe box) or where implied consent exists under CASL because of an existing business relationship. Every marketing message includes a working unsubscribe link and our contact details. You may withdraw consent at any time; withdrawal does not affect our ability to contact you about active work.

How we use and disclose it

We do not sell personal information, and we do not rent, trade or share enquiry details with third parties for their own marketing.

We disclose personal information only in these circumstances:

• To service providers who process information on our behalf — email, hosting, analytics, accounting, scheduling and payment processing — under contractual obligations to protect it
• To advertising and analytics platforms, where you or a client have instructed us to operate accounts on those platforms
• Where required by law, regulation, court order or a lawful request from a public authority
• To professional advisers where necessary and under a duty of confidentiality
• In connection with a sale or reorganisation of our business, where the recipient agrees to honour this policy

Service providers and cross-border storage

Some of the tools we rely on are operated by organisations located outside Canada, principally in the United States. Information stored or processed in another country may be accessible to the courts, law enforcement and national security authorities of that country under its laws.

Where we can select a Canadian region for data storage, we do. Where we cannot, we take reasonable steps to satisfy ourselves that the provider offers a comparable level of protection. A current list of the categories of provider we use is available on request.

Safeguards

• Access to client accounts is limited to the individuals who need it to perform the work
• Multi-factor authentication is used on every platform that supports it
• Credentials are stored in an encrypted password manager, never in email or spreadsheets
• Devices are encrypted and kept current with security updates
• Access is revoked promptly at the end of an engagement, on request

No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we take reasonable and appropriate measures given the sensitivity of the information involved.

Retention

We keep personal information only as long as it is needed for the purposes collected, or as required by law.

Your rights

Subject to limited legal exceptions, you have the right to:

• Ask what personal information we hold about you and how it has been used
• Receive a copy of that information in an accessible form
• Request correction of information that is inaccurate or incomplete
• Withdraw consent to marketing communications at any time
• Request deletion of information we are not required to retain
• Complain to us, and afterwards to the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner of Alberta

To exercise any of these rights, email info@hubfoliodigital.ca. We will respond within 30 days, or tell you if we need more time and why. There is no charge for a reasonable request.

Children

Our services are directed at businesses. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has provided us with information, contact us and we will delete it.

Breach notification

If a breach of security safeguards creates a real risk of significant harm, we will report it to the appropriate Privacy Commissioner and notify affected individuals as soon as feasible, and we will maintain records of breaches as required by law. Where the breach concerns information we process on behalf of a client, we will notify that client without undue delay so they can meet their own obligations.

Changes to this policy

We may update this policy from time to time. The version in effect is the one published on this page, and the date it was last updated appears at the top. Material changes affecting active clients will be communicated directly.

Contact

Privacy Officer, Hubfolio Digital Marketing Ltd.
Email: info@hubfoliodigital.ca
Calgary, Alberta, Canada