Privacy Policy

1. Who We Are

Inbound Flux Inc. ("Inbound Flux", "we", "us", or "our") is an AI-powered digital marketing agency incorporated in Ontario, Canada, with its principal place of business in Ottawa, Ontario. We provide services including search engine optimization, paid media management, content strategy, social media management, marketing analytics, and conversion rate optimization.

This Privacy Policy applies to all personal information collected through our website at www.inboundflux.com and through any services we provide to clients.

Inbound Flux is the data controller for all personal information we collect. Our designated Privacy Officer can be reached at hello@inboundflux.com.

2. Information We Collect

Information you provide directly

When you fill out our contact form, inquire about our services, or communicate with us by email or phone, we may collect:

• Your first and last name
• Your work email address
• Your company or brand name
• Your phone number (if provided)
• Your approximate marketing budget range
• The service tier you are interested in
• Any additional information you choose to share in your message

Information collected automatically

When you visit our website, certain technical information may be collected automatically through your browser, including:

• Your IP address and approximate geographic location
• Browser type and version
• Operating system
• Pages visited and time spent on each page
• Referring website (how you arrived at our site)
• Date and time of your visit

This technical information is used solely for the purpose of understanding how our website is used and improving its performance. It is not linked to your personal identity unless you have also submitted a contact form.

Information we do not collect

We do not collect sensitive personal information such as financial account details, social insurance numbers, health information, or government-issued identification numbers through our website.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

• Responding to your inquiries — to reply to messages submitted through our contact form and answer questions about our services
• Delivering our services — to fulfil the terms of any service agreement entered into between you and Inbound Flux
• Service communications — to send you updates, reports, invoices, and other communications directly related to the services you have engaged us for
• Improving our website — to analyse how visitors use our website and make improvements to content and functionality
• Legal compliance — to meet our obligations under applicable Canadian law

We will not use your personal information for any purpose other than those listed above without first obtaining your explicit consent.

4. How We Store and Protect Your Information

We take the security of your personal information seriously. We implement appropriate technical and organizational measures to protect your information against unauthorized access, loss, destruction, or alteration, including:

• Secure HTTPS encryption on all data transmitted through our website
• Access controls that limit who within our team can access personal information
• Use of reputable, security-compliant third-party tools for email and data storage
• Regular review of our security practices as our business grows

Our website is hosted on Netlify, a US-based hosting provider, which means certain data may be stored on servers outside of Canada. Netlify maintains appropriate safeguards consistent with PIPEDA requirements for cross-border data transfers. You can review Netlify's privacy practices at netlify.com/privacy.

While we take all reasonable precautions to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Sharing Your Information

We do not sell, rent, or trade your personal information to any third party. Full stop.

We may share your information only in the following limited circumstances:

• Service providers: We may share information with trusted third-party service providers who assist us in operating our business (e.g. email platforms, analytics tools), provided those providers are contractually bound to keep your information confidential and use it only for the purpose we specify.
• Legal requirements: We may disclose your information if required to do so by law, court order, or government authority, or if we believe disclosure is necessary to protect the safety, rights, or property of Inbound Flux, our clients, or the public.
• Business transfers: In the unlikely event that Inbound Flux is acquired, merged with another company, or undergoes a similar corporate transaction, your information may be transferred as part of that transaction. We would notify you via email prior to any such transfer occurring.

6. Cookies and Tracking Technologies

Our website may use cookies and similar tracking technologies to enhance your browsing experience and gather analytics data about how the site is used. Cookies are small text files stored on your device.

Types of cookies we may use:

• Essential cookies: Necessary for the basic functionality of the website. These cannot be disabled.
• Analytics cookies: Used to understand how visitors interact with our website. This data is aggregated and anonymized wherever possible.

You can control and manage cookies through your browser settings. Disabling cookies may affect the functionality of certain features on our website. Most browsers allow you to refuse cookies or delete existing cookies through their settings menus.

We do not currently use advertising or targeting cookies on this website.

7. Third-Party Links

Our website may contain links to external websites, including our social media profiles on platforms such as Instagram. Once you leave our website by clicking such a link, we have no control over the privacy practices of those third-party sites. We encourage you to read the privacy policies of any website you visit. Inbound Flux is not responsible for the content or privacy practices of third-party websites.

8. Your Rights Under PIPEDA

As a Canadian resident, you have the following rights with respect to your personal information under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial legislation:

• Right of access: You have the right to request access to the personal information we hold about you, including how it has been used and to whom it has been disclosed.
• Right to correct: If you believe any personal information we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to withdraw consent: Where our processing of your personal information is based on your consent, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of any processing carried out prior to your withdrawal.
• Right to deletion: Subject to certain legal obligations, you may request that we delete the personal information we hold about you.
• Right to complain: If you believe your privacy rights have been violated, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.

To exercise any of these rights, please contact our Privacy Officer at hello@inboundflux.com. We will respond to all verified requests within 30 days, as required by PIPEDA.

9. Data Retention

We retain personal information only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law:

• Contact form submissions: Retained for up to 2 years from the date of submission, or for the duration of any subsequent client relationship, whichever is longer.
• Client data collected in the course of providing services: Retained for the duration of the service agreement and for a minimum of 7 years thereafter, as required for financial and legal record-keeping under Canadian law.
• Website analytics data: Retained in aggregated, anonymized form indefinitely for the purposes of improving our website.

When personal information is no longer required, we will securely delete or anonymize it.

10. Children's Privacy

Our website and services are directed exclusively at businesses and individuals who are 18 years of age or older. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have inadvertently collected personal information from a minor, we will take immediate steps to delete that information from our records. If you believe we have collected information from a minor, please contact us immediately at hello@inboundflux.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or the services we offer. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Continued use of our website following any update to this policy constitutes your acceptance of the revised terms. If you do not agree with any changes, please discontinue use of our website and contact us to discuss any concerns.

12. Contact Our Privacy Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the personal information we hold about you, please contact our Privacy Officer:

We are committed to resolving privacy concerns promptly and fairly. If you are not satisfied with our response, you have the right to contact the Office of the Privacy Commissioner of Canada at priv.gc.ca or by calling 1-800-282-1376.