Privacy Policy
Last updated: March 24, 2026
Deeploy Canada Inc. ("Deeploy," "we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you visit deeploy.ca, interact with our services, or communicate with us.
This policy applies to all visitors, clients, and prospective clients regardless of location, and is designed to comply with applicable privacy laws including PIPEDA (Canada), GDPR (European Union), CCPA/CPRA (California), and LGPD (Brazil).
1. Information We Collect
Information You Provide Directly
You may provide personal information when you:
- Fill out contact or lead forms
- Request proposals or services
- Subscribe to newsletters or updates
- Communicate with us by email, phone, or messaging platforms
- Participate in meetings, calls, or surveys
This information may include:
- Name, email address, and phone number
- Company name, job title, and website
- Industry, company size, and budget range
- Billing or business information
- Any other information you choose to share
Information Collected Automatically
When you visit our website, we may automatically collect — subject to your cookie consent preferences:
- IP address (anonymized where required)
- Browser type and version
- Device type and operating system
- Pages visited, time spent, and navigation paths
- Referring URLs and search terms
- Interaction data such as clicks and scroll behavior
This data is collected using cookies and similar tracking technologies only after you provide consent through our cookie banner, except for strictly necessary cookies required for the website to function.
2. How We Use Your Information
We use personal information to:
- Respond to inquiries and requests
- Provide, manage, and improve our services
- Prepare proposals and contracts
- Communicate about projects, updates, or relevant offers
- Improve our website, services, and user experience
- Analyze performance and usage trends (with consent)
- Deliver and measure advertising campaigns (with consent)
- Meet legal, regulatory, and contractual obligations
- Prevent fraud, abuse, or security issues
We do not sell, rent, or trade your personal information.
3. Legal Basis for Processing
Depending on your location and the nature of the processing, we rely on the following legal bases:
| Legal Basis | When It Applies |
|---|---|
| Consent | Analytics cookies, marketing cookies, newsletter subscriptions |
| Contractual necessity | Providing services you requested, processing proposals and contracts |
| Legitimate interest | Improving our services, website security, fraud prevention, business communications |
| Legal obligation | Tax, accounting, or regulatory compliance |
4. Cookies and Tracking Technologies
We use a consent-based cookie management system that categorizes cookies into four groups. No non-essential cookies are loaded until you provide consent through our cookie banner.
You can manage your preferences at any time by clicking in the footer.
Cookie Categories
| Category | Purpose | Consent Required |
|---|---|---|
| Necessary | Essential for website functionality (session cookies, consent preferences) | No — always active |
| Analytics | Help us understand how visitors use our site (Google Analytics, Google Tag Manager) | Yes |
| Marketing | Used to deliver relevant ads and measure campaign performance (Meta Pixel, LinkedIn, TikTok) | Yes |
| Functional | Enable enhanced features like heatmaps and session recording (Hotjar, Microsoft Clarity) | Yes |
Specific Cookies We Use
| Cookie | Provider | Purpose | Expiry |
|---|---|---|---|
| dcc_consent | Deeploy | Stores your cookie preferences | 180 days |
| _ga, _ga_* | Analytics — distinguishes users | 2 years | |
| _gid | Analytics — session tracking | 24 hours | |
| _fbp | Meta | Marketing — ad delivery and measurement | 90 days |
| li_fat_id | Marketing — ad attribution | 30 days | |
| _ttp | TikTok | Marketing — ad measurement | 13 months |
| _hjSessionUser_* | Hotjar | Functional — session recording | 1 year |
| _clsk, _clck | Microsoft | Functional — heatmaps | 1 day / 1 year |
Google Consent Mode v2
We implement Google Consent Mode v2, which adjusts the behavior of Google tags based on your consent choices. When you deny consent, Google tags operate in a privacy-preserving mode that does not store cookies or collect identifiable data.
5. Sharing and Disclosure of Information
We may share personal information with the following categories of third parties:
Service Providers & Technology Partners
| Provider | Purpose | Data Shared |
|---|---|---|
| Google (Analytics, Ads, Tag Manager) | Analytics & advertising | Anonymized usage data, conversion events |
| Meta (Facebook, Instagram) | Advertising | Conversion events, hashed identifiers |
| Advertising | Conversion events | |
| TikTok | Advertising | Conversion events |
| Hotjar / Microsoft Clarity | UX analysis | Anonymized session recordings |
| Hostinger | Website hosting | Server logs, IP addresses |
Other Disclosures
- Professional advisors — legal, accounting, or compliance partners as needed
- Authorities or regulators — when required by law, court order, or government request
- Business transfers — in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction
All third parties are contractually required to protect your information and use it only for authorized purposes.
6. International Data Transfers
Deeploy is headquartered in Toronto, Canada with operations in the United States, Colombia, Honduras, Mexico, and Spain. Your information may be processed or stored in any of these jurisdictions, or in jurisdictions where our service providers operate (including the United States and the European Union).
Where required, we use appropriate safeguards for international transfers, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Data processing agreements with all third-party processors
- Reliance on adequacy decisions where applicable (e.g., Canada under GDPR)
7. Data Retention
We retain personal information only as long as necessary for the purposes described in this policy. Specific retention periods include:
- Contact form submissions: 2 years, or duration of client relationship plus 1 year
- Client project data: Duration of engagement plus 3 years (legal/tax requirements)
- Cookie consent records: 180 days (refreshed on return visits)
- Analytics data: 14 months (Google Analytics default)
- Email marketing data: Until you unsubscribe
When information is no longer required, it is securely deleted or anonymized.
8. Data Security
We use administrative, technical, and organizational safeguards to protect personal information, including:
- SSL/TLS encryption on all website connections
- Access controls limited to authorized personnel
- Secure hosting with regular backups
- Regular review of data handling practices
No system is completely secure. While we strive to protect your information, we cannot guarantee absolute security. If a data breach occurs that poses a risk to your rights, we will notify you and relevant authorities as required by law.
9. Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal information:
All Visitors
- Access your personal information we hold
- Request correction of inaccurate or incomplete information
- Request deletion of your information
- Withdraw consent at any time (without affecting prior processing)
- Object to or restrict certain processing activities
European Union Residents (GDPR)
- Right to data portability (receive your data in a structured, machine-readable format)
- Right to object to processing based on legitimate interests
- Right to lodge a complaint with your local data protection authority (e.g., find your DPA)
California Residents (CCPA/CPRA)
- Right to know what personal information we collect, use, and disclose
- Right to delete your personal information
- Right to opt out of the "sale" or "sharing" of personal information
- Right to non-discrimination for exercising your privacy rights
We do not sell or share your personal information as defined under CCPA/CPRA. We do not use sensitive personal information for purposes beyond what is necessary to provide our services.
Canadian Residents (PIPEDA)
- Right to access your personal information and understand how it is used
- Right to challenge the accuracy and completeness of your information
- Right to withdraw consent, subject to legal or contractual restrictions
- Right to file a complaint with the Office of the Privacy Commissioner of Canada
Brazilian Residents (LGPD)
- Right to confirmation of data processing and access to your data
- Right to correction, anonymization, blocking, or deletion of unnecessary data
- Right to data portability
- Right to information about third parties with whom data is shared
To exercise any of these rights, contact us at privacy@deeploy.co. We will respond within 30 days (or sooner if required by applicable law).
10. Do Not Sell or Share My Personal Information
Deeploy does not sell or share your personal information for monetary or other valuable consideration, as defined under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).
If you wish to confirm this or exercise any opt-out rights, contact us at privacy@deeploy.co.
11. Children's Privacy
Our website and services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take immediate steps to delete it. If you believe a child has provided us with personal information, please contact us.
12. Third-Party Links
Our website may contain links to third-party websites or platforms. We are not responsible for the privacy practices or content of those third parties. We encourage you to review their privacy policies before providing any personal information.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable laws. Updates will be posted on this page with a revised "Last updated" date. For material changes, we may provide additional notice via email or a banner on our website.
Continued use of our website after changes indicates acceptance of the updated policy.
14. Contact Information
If you have questions, concerns, or requests related to this Privacy Policy or your personal information, contact us at:
Deeploy Canada Inc.
Privacy Inquiries
Email: privacy@deeploy.co
General: info@deeploy.co
Phone: +1 (289) 337-1217
Website: deeploy.ca
If you are not satisfied with our response, you may contact the relevant data protection authority in your jurisdiction.