01 — Controller
AP Agency is a digital marketing and web development agency operating at 10330 Yonge St, Richmond Hill, ON L4C 5N1, Canada. We are the data controller responsible for personal information collected through apagency.ca and its subdomains. This policy governs our data practices in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
02 — What We Collect
We collect information only when necessary for a legitimate business purpose:
We do not collect sensitive personal data (health, financial, biometric, or government-issued identification) through this website.
03 — Purpose & Legal Basis
| Purpose | Legal Basis |
|---|---|
| Responding to inquiries and booking consultations | Consent / Contract performance |
| Measuring advertising performance via Meta Pixel | Legitimate interest (opt-out available) |
| Website security and uptime monitoring | Legitimate interest |
| Sending marketing communications (if opted in) | Express consent (CASL-compliant) |
| Complying with legal obligations | Legal obligation |
04 — Third Parties
We do not sell, rent, or trade your personal information. Data is shared only with the following service providers:
05 — Cookies
Strictly Necessary: Session and security cookies required for the site to function. Cannot be disabled.
Analytics & Advertising (Meta Pixel): Sets cookies (_fbp, _fbc) to track conversions from Facebook Ads and build retargeting audiences. Opt out via your browser's cookie settings or Meta's Ad Preferences.
06 — Retention
| Data Type | Retention Period |
|---|---|
| Contact form submissions & email correspondence | 3 years from last interaction |
| Server and access logs | 90 days |
| Meta Pixel event data | Governed by Meta (up to 180 days) |
| Marketing opt-in records | Duration of consent plus 3 years (CASL) |
07 — Security
All data transmitted to and from this website is encrypted via TLS (HTTPS). Access to stored personal information is restricted to authorized personnel on a need-to-know basis. In the event of a data breach, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required under PIPEDA's mandatory breach reporting provisions.
08 — Your Rights
To exercise any of these rights, contact us at info@apagency.ca. We will respond within 30 days.
09 — Minors
This website is not directed at individuals under 18. We do not knowingly collect personal information from minors. If you believe we have done so inadvertently, contact us immediately at info@apagency.ca and we will promptly delete it.
10 — Updates
We may update this policy to reflect changes in our practices or applicable law. Material changes will be indicated by an updated effective date. Continued use of this website following any update constitutes acceptance of the revised policy.
Privacy Officer