Legal

Privacy policy

Effective date: [Effective date]

We collect as little personal information as we can, use it only to answer you and do our work, and never sell it. This policy explains what we collect, why, who helps us process it, and how you can access, correct or delete it.

1. Who we are

ambitni agency is operated by [Legal entity name], a business registered in [Province], Canada (“ambitni”, “we”, “us”). We are responsible for the personal information described in this policy.

Our privacy officer is [Name of privacy officer]. You can reach them at [email@ambitniagency.com].

2. What we collect

We only collect information you choose to give us, plus anonymous statistics about how the site is used:

Project brief form — your name, email address, company or brand, the services you are interested in, budget range, timeline and anything you write in your message.
Newsletter — your email address (and name, if you give it), the date and way you subscribed, and whether you open or click our emails.
Booking a call — your name, email address, the date and time you choose, your time zone and any notes you add.
Emails and messages you send us directly, and the information you share during a call or project.
Website analytics — anonymous, aggregated data such as pages visited, referring website, country, device and browser type. We use Plausible Analytics, which does not use cookies and does not collect personal information or track you across websites.

We do not knowingly collect sensitive information (such as health or financial details), and we ask you not to include it in forms.

3. Why we use it

To reply to your enquiry, prepare a proposal and schedule calls.
To deliver and invoice the work you hire us for.
To send our newsletter — only if you have given express consent.
To understand, in aggregate, how the site is used so we can improve it.
To meet our legal, tax and accounting obligations.

We do not sell, rent or trade personal information, and we do not use it for advertising profiles.

5. Service providers and where data is processed

We use a small number of trusted providers to run the site. They process information on our behalf, only for the purposes above, under their own security and privacy commitments:

Vercel — website hosting and delivery (servers in the United States and other regions).
Resend — delivers the messages you send through our forms to our inbox (United States).
MailerLite — manages our newsletter list and sends newsletters (European Union and United States).
Cal.com — call scheduling, confirmations and reminders (United States and/or European Union).
Plausible Analytics — cookieless, privacy-friendly website statistics (European Union).

This means your information may be stored or processed outside Canada (and outside Québec) and may be accessible to authorities in those countries under their laws. We choose providers that offer protection comparable to Canadian standards.

6. Cookies

Our own site does not use advertising or tracking cookies, and our analytics are cookieless. If you use the booking calendar, Cal.com may set cookies that are strictly necessary for scheduling to work.

7. How long we keep it

Enquiries and bookings that do not lead to a project — up to [24 months] after our last contact.
Client records — for the length of the project and as long as required for tax and accounting purposes (generally six years in Canada).
Newsletter subscribers — until you unsubscribe; we then keep only what is needed to respect your choice.
Analytics — anonymous and aggregated, kept by Plausible according to its own policy.

When information is no longer needed, we delete it or make it anonymous.

8. How we protect it

We use reasonable safeguards for information of this kind: encrypted connections (HTTPS), reputable providers, strong passwords and two-factor authentication on our accounts, and access limited to the people who need it. No method of transmission or storage is completely secure, but we take care and will notify you and the authorities of any breach that creates a real risk of significant harm, as the law requires.

9. Your rights

You have the right to:

ask whether we hold personal information about you and get a copy of it;
ask us to correct information that is inaccurate or incomplete;
withdraw your consent, unsubscribe from our newsletter, or ask us to delete your information (unless we must keep it by law);
ask how your information has been used and with whom it has been shared.

To make a request, write to [email@ambitniagency.com]. We will reply within 30 days. We may need to confirm your identity first.

If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, in Québec, the Commission d’accès à l’information du Québec (cai.gouv.qc.ca).

10. Changes to this policy

We may update this policy as our services or the law change. The effective date at the top always shows the latest version. If a change is significant, we will say so on the site or by email.

11. Contact

Questions about privacy? Write to our privacy officer, [Name of privacy officer], at [email@ambitniagency.com], or by mail at [Mailing address].