Privacy Policy

Envosue Inc., incorporated under the Canada Business Corporations Act, RSC 1985, c C-44, and operating under the trade name Pixel26 ("Pixel26", "we", "us", or "our"), with its principal place of business in Alberta, Canada, is committed to protecting the personal information of clients, prospective clients, and visitors to our website at pixel26.ca (the "Site").

This Privacy Policy describes how we collect, use, disclose, retain, and protect personal information in accordance with Alberta's Personal Information Protection Act, SA 2003, c P-6.5 ("PIPA"), the Personal Information Protection and Electronic Documents Act, SC 2000, c 5 ("PIPEDA"), where applicable, and Canada's Anti-Spam Legislation, SC 2010, c 23 ("CASL").

1 · Accountability

Pixel26 is responsible for all personal information in its possession or custody, including information transferred to third-party service providers for processing on our behalf. Our designated Privacy Officer is accountable for compliance with PIPA and may be reached through the contact form at pixel26.ca/contact.

2 · Personal Information We Collect

2.1 Information you provide directly

• Enquiry & contact data — name, email address, company or trading name, estimated budget range, service of interest, and project description submitted via our contact form.
• Client engagement data — billing contact details, payment information (processed by our payment processor; we do not store card numbers), and project materials you supply.
• Communications — emails, call notes, or meeting records arising in the course of a client relationship.

2.2 Information collected automatically

• Log & technical data — IP address, browser type and version, operating system, referring URL, pages visited, time and date of access, and session duration.
• Analytics data — aggregated, anonymised usage patterns collected through Google Analytics 4 (see Section 6).

We collect only the personal information that is reasonably required for the identified purposes below. We do not collect sensitive personal information (e.g., health data, Social Insurance Numbers, financial account credentials) through our Site.

3 · Purposes for Collection, Use, and Disclosure

We collect and use personal information for the following purposes, which we identify at or before the time of collection:

• Responding to enquiries submitted through our contact form or by email.
• Providing web design and development, SEO, and Google Ads management services under a client engagement.
• Managing client relationships, including project communications, progress updates, and billing.
• Processing payments and maintaining financial records in compliance with the Income Tax Act (Canada) and applicable Alberta legislation.
• Sending commercial electronic messages (newsletters, service announcements) where express or implied consent has been obtained in accordance with CASL. You may unsubscribe from marketing messages at any time by clicking the unsubscribe link in the message or contacting us.
• Improving our Site, services, and client experience through anonymised analytics.
• Complying with applicable legal obligations and responding to lawful requests from governmental authorities.

We will not use or disclose personal information for purposes other than those listed above without your consent, except where required or permitted by law.

4 · Consent

Your consent to the collection, use, and disclosure of personal information may be express (e.g., checking a consent box, signing an engagement agreement) or implied from the context in which you provide information (e.g., submitting a contact form). Where sensitive personal information is involved or the purpose is not obvious, we obtain express consent.

You may withdraw consent at any time by contacting our Privacy Officer in writing. Withdrawal of consent may mean we are unable to provide certain services. We will advise you of the implications before you withdraw.

5 · Disclosure to Third Parties

We do not sell, rent, or trade personal information. We may share personal information with third parties only in the following circumstances:

• Service providers — vendors and subcontractors who assist us in delivering services (e.g., web hosting, email platforms, payment processors, project management tools). These parties are contractually obligated to protect personal information and may only use it as directed by us.
• Google LLC — for analytics as described in Section 6.
• Legal and regulatory authorities — where required by applicable law, court order, subpoena, or regulatory requirement. We will notify you of such disclosure to the extent permitted by law.
• Business transfers — in connection with a merger, acquisition, restructuring, or sale of assets, provided the recipient provides equivalent privacy protections.

6 · Google Analytics & Cookies

6.1 Google Analytics 4

We use Google Analytics 4 ("GA4") to understand how visitors interact with our Site. GA4 collects anonymised data (including a truncated IP address) about pages visited, session duration, and traffic sources. This data is processed by Google LLC, headquartered in the United States. Google acts as a data processor on our behalf and is subject to Google's Privacy Policy (policies.google.com/privacy). You may opt out of GA4 tracking by installing the Google Analytics Opt-Out Browser Add-on.

6.2 Cookies

Our Site uses the following categories of cookies:

• Strictly necessary cookies — essential for the Site to function. These cannot be disabled without affecting core functionality.
• Analytics cookies — Google Analytics 4 cookies (_ga, _ga_*) used to measure and improve Site performance. These are optional.

Most web browsers allow you to manage cookies through browser settings. Disabling analytics cookies will not affect your ability to use our Site but will limit our ability to understand and improve it.

7 · Retention

We retain personal information only as long as necessary to fulfil the identified purposes or as required by law:

• Contact enquiries — retained for up to 24 months from the date of last contact, after which they are securely deleted.
• Client engagement records — retained for a minimum of 7 years from the close of the engagement, in compliance with the Income Tax Act (Canada) and applicable Alberta tax requirements.
• Analytics data — retained by Google Analytics in accordance with our configured data retention setting (default: 14 months).

When personal information is no longer required, we destroy, erase, or de-identify it in a secure manner.

8 · Security Safeguards

We implement reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the personal information held, including:

• Encrypted data transmission via HTTPS (TLS) across all Site connections.
• Access controls limiting access to personal information to authorised personnel on a need-to-know basis.
• Regular review of security practices and vendor agreements.

No method of transmission over the internet or electronic storage is entirely secure. While we strive to use commercially reasonable means to protect personal information, we cannot guarantee absolute security. In the event of a privacy breach that creates a real risk of significant harm to an individual, we will notify affected individuals and the Office of the Information and Privacy Commissioner of Alberta ("OIPC") as required under PIPA.

9 · Your Rights Under PIPA

Under Alberta's PIPA, you have the following rights with respect to your personal information:

• Right of access — You may request access to personal information we hold about you. We will respond within 45 days of receiving a written request (or notify you if an extension is required).
• Right of correction — If personal information we hold is inaccurate or incomplete, you may request that we correct it.
• Right to withdraw consent — You may withdraw consent to collection, use, or disclosure at any time, subject to legal or contractual restrictions.

To exercise any of these rights, please submit a written request to our Privacy Officer via the contact form at pixel26.ca/contact. We may require verification of your identity before processing a request. There is no fee for an access request unless the request is manifestly unfounded or excessive.

10 · Transfers Outside Canada

Some of our service providers, including Google LLC, process personal information outside Canada, including in the United States. When personal information is transferred outside Alberta or Canada, it may be subject to the laws of that jurisdiction, including lawful access by foreign governmental authorities. We take reasonable steps to ensure that service providers outside Canada protect personal information in a manner consistent with PIPA.

By submitting personal information through our Site or engaging our services, you acknowledge that your information may be transferred to and processed in jurisdictions with privacy laws that differ from those in Canada.

11 · Children's Privacy

Our Site and services are directed to businesses and individuals aged 18 and over. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have inadvertently collected personal information from a minor, we will promptly delete that information. If you believe a minor has submitted personal information to us, please contact our Privacy Officer immediately.

12 · Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. The "Effective date" at the top of this page indicates when the current version was last revised. Material changes will be communicated by a prominent notice on our Site. Your continued use of our Site or services after the effective date of any revised Policy constitutes your acceptance of the changes.

13 · Contact & Complaints

For questions, concerns, or requests relating to this Privacy Policy or your personal information, please contact our Privacy Officer:

If you are not satisfied with our response, you may file a complaint with the Office of the Information and Privacy Commissioner of Alberta (OIPC) at oipc.ab.ca. Complaints must generally be filed within two years of the act or omission in question.