Project X
Privacy Policy
DRAFT — NOT PUBLISHED. Every[CONFIRM]must be resolved and the whole document reviewed by a Canadian lawyer before this goes on the site. Written against the verified data flows in00 - Data Flow Inventory.md; no practice is described here that was not found there.
Last updated: [CONFIRM — date of publication]
Who we are
Project X ([CONFIRM: full legal entity name]) is a customer-acquisition and marketing-systems consultancy based in Burnaby, British Columbia, Canada. This policy explains what personal information we collect through projectxagency.ca, why we collect it, and what we do with it.
This policy covers our website. If you are a client, the handling of data inside your own advertising and CRM accounts is governed by our service agreement with you, not by this policy.
Contact for privacy questions: [CONFIRM: privacy contact email — currently info@projectxagency.ca] [CONFIRM: mailing address for written privacy requests]
What we collect
Information you give us
When you submit our contact form, we collect:
- First and last name
- Email address
- Phone number
- Company name
- Your website address (optional)
- Your monthly advertising budget range
- What you are looking for help with
All of these except your website address are required to submit the form.
If you subscribe to our mailing list, we collect your email address and your explicit consent to receive it. [CONFIRM — remove this section if the newsletter is removed at rebuild, as currently planned.]
If you email us directly, we hold that correspondence.
Information collected automatically
Our website is built and hosted on Wix. Wix collects certain technical information on every site it hosts, which we do not control and cannot fully switch off. This includes your IP address, browser and device information, the pages you visit, and how you move through the site. Wix also sets cookies necessary to run the site.
We use Wix's built-in analytics to see aggregate traffic and form-submission figures.
We do not currently run Google Analytics, Google Ads tracking, Meta Pixel, or any other third-party advertising or analytics tool on this website. If that changes, we will update this policy and our Cookie Policy before the tools go live.
What we do not collect
- We do not take payments on this website.
- We do not run a chat widget.
- We do not sell your personal information. We do not trade or rent it.
- We do not knowingly collect information from children. Our services are offered to businesses.
Why we collect it
| What | Why |
|---|---|
| Name, email, phone, company | To respond to your enquiry and, if it goes further, to discuss working together |
| Website address | To look at your site before we speak, so the conversation is useful |
| Budget range and what you need help with | To understand whether we are a fit before we take up your time |
| Mailing list email | To send you the material you asked for |
| Technical and analytics data | To keep the site working and understand how it is used |
We rely on your consent — given when you choose to submit a form — and on the reasonable expectation that if you contact us about our services, we will reply.
Who we share it with
We share personal information only with service providers who need it to help us operate:
- Wix.com Ltd. — hosts our website, runs our forms, stores our contact records and sends our form notifications.
That is the complete current list. We do not share your information with advertisers, data brokers, or anyone else, except where we are legally required to.
If we later add analytics or advertising tools, they will be named here and in the Cookie Policy first.
Where your information goes — outside Canada
Your personal information is stored and processed outside Canada. [CONFIRM: the specific jurisdictions where Wix holds data — verify against Wix's current documentation rather than assuming.]
This means your information may be accessible to the courts, law enforcement and national security authorities of those countries under their laws. We remain accountable for your information while it is with our service providers, and we require them to protect it — but we cannot exempt it from the laws of the country it sits in.
If you would prefer not to have your information handled this way, please contact us instead of using the form and we will discuss alternatives.
How long we keep it
[CONFIRM — we have deliberately not invented a retention period. Decide the real one and state it here. A defensible starting point is: enquiry records that do not become clients are deleted after a fixed period; client records are kept for the length of the engagement plus the period required by Canadian tax and business-records law. Confirm both with your accountant and lawyer before publishing.]
You can ask us to delete your information at any time — see below.
How we protect it
Your information is held within the Wix platform and is accessible only to Project X and anyone we have given collaborator access to.
[CONFIRM — describe the safeguards that genuinely exist: whether two-factor authentication is enabled on the Wix account, who has access, and how access is removed. Do not claim encryption standards, certifications or audits that have not actually been implemented. It is better to say little and be accurate than to make a security claim you cannot support.]
No method of transmitting or storing information is completely secure, and we cannot guarantee absolute security.
Your rights
Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you can:
- Access the personal information we hold about you
- Correct it if it is wrong
- Withdraw consent to our use of it, subject to legal and contractual limits
- Ask us to delete it
- Unsubscribe from any marketing email, using the link in every message or by replying
To do any of these, contact us at [CONFIRM: privacy contact]. We will respond within 30 days, as PIPEDA requires. We may need to verify who you are first.
If you are not satisfied with how we handle your request, you can complain to the Office of the Privacy Commissioner of Canada — priv.gc.ca.
Cookies
See our Cookie Policy for what cookies this site sets and why.
Changes to this policy
If we change how we handle personal information — including adding any analytics or advertising tool — we will update this policy and change the date at the top before the change takes effect.
Contact
[CONFIRM: legal entity name] [CONFIRM: mailing address] Burnaby, British Columbia, Canada [CONFIRM: privacy contact email] 604-404-6166