Privacy Policy
Effective Date: May 25, 2026
1. Introduction and Company Information
This Privacy Policy explains how NorthPeak Performance Marketing (“NorthPeak Performance Marketing,” “we,” “us,” or “our”) collects, uses, discloses, stores, and protects personal information in the course of providing performance-marketing and related services.
We are committed to handling personal information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, substantially similar provincial privacy legislation.
Business Name: NorthPeak Performance Marketing
Address: NorthPeak Performance Marketing, 401 King Street West, Suite 2800, Toronto, ON M5V 3C6, Canada
Email: [email protected]
Phone: +1 (416) 782-6941
2. Data Collection and Processing
We collect personal information that is necessary to operate our business, deliver services, communicate with clients and prospects, and improve our marketing performance. The types of personal information we may collect include:
- Contact information: name, email address, phone number, company name, job title, mailing address, and other contact details.
- Account and business information: billing details, service preferences, project information, campaign requirements, and communications history.
- Website and device information: IP address, browser type, device identifiers, operating system, referring URLs, pages viewed, time spent on pages, and interaction data.
- Marketing and analytics data: ad engagement, conversion data, campaign performance metrics, cookie identifiers, and audience segmentation data.
- Communication data: information provided in emails, forms, calls, meetings, surveys, and support requests.
- Payment and transaction information: where applicable, billing and payment-related information necessary to process invoices and manage accounts.
We may collect personal information directly from you, automatically through our website and digital tools, and from third parties such as business partners, analytics providers, advertising platforms, and publicly available sources where permitted by law.
We process personal information by collecting, recording, organizing, storing, analyzing, using, disclosing, and, where necessary, deleting it.
3. Purpose of Data Processing
We use personal information for the following purposes:
- to provide, manage, and improve our performance-marketing services;
- to communicate with clients, prospects, vendors, and website visitors;
- to respond to inquiries, requests, and support matters;
- to create, manage, and optimize advertising campaigns and marketing strategies;
- to measure campaign effectiveness, website performance, and audience engagement;
- to personalize content, offers, and user experiences;
- to process payments, invoices, and related administrative functions;
- to maintain business records and fulfill contractual obligations;
- to detect, prevent, and investigate fraud, misuse, security incidents, or other unlawful activity;
- to comply with legal, regulatory, tax, accounting, and reporting obligations; and
- to enforce our agreements and protect our rights, property, and safety.
4. Legal Basis for Processing
Under Canadian privacy law, we generally collect, use, and disclose personal information only for purposes that a reasonable person would consider appropriate in the circumstances and, where required, with your knowledge and consent. Depending on the context, our processing may be based on one or more of the following grounds:
- Consent: where you have given us express or implied consent to process your personal information for specific purposes.
- Contractual necessity: where processing is necessary to enter into, perform, or manage a contract with you or your organization.
- Legitimate business purposes: where processing is necessary for reasonable business purposes, such as service delivery, fraud prevention, internal administration, and analytics, and where such purposes are appropriate in the circumstances.
- Legal or regulatory obligations: where processing is required to comply with applicable laws, lawful requests, or court orders.
Where consent is required, you may be asked to provide it at the time of collection or before certain uses of your personal information. In some cases, we may rely on implied consent where permitted by law and appropriate in the circumstances.
5. Data Sharing and Third Parties
We may disclose personal information to third parties in the following circumstances:
- Service providers: vendors that assist with hosting, analytics, customer relationship management, email delivery, payment processing, security, IT support, and other operational services.
- Advertising and analytics partners: platforms used to measure performance, manage campaigns, attribute conversions, and optimize marketing outcomes.
- Professional advisors: legal, accounting, tax, insurance, and other professional advisors as needed.
- Business transfers: in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar transaction.
- Legal and compliance purposes: where required or permitted by law, regulation, subpoena, court order, or governmental request.
- With your direction or consent: where you ask us to share information or otherwise authorize the disclosure.
We require third parties that process personal information on our behalf to protect it through appropriate contractual, technical, and organizational safeguards. However, third parties may have their own privacy practices, and we encourage you to review their policies where applicable.
6. Data Transfer to Third Countries
Because we use service providers and platforms that may operate outside Canada, your personal information may be transferred to, stored in, or accessed from jurisdictions outside your province or outside Canada, including the United States and other countries.
When personal information is transferred outside Canada, it may be subject to the laws of the jurisdiction in which it is processed and may be accessible to courts, law enforcement, or regulatory authorities in those jurisdictions. We take reasonable steps to ensure that any such transfers are protected by contractual safeguards and security measures appropriate to the sensitivity of the information.
7. Storage Duration
We retain personal information only as long as necessary to fulfill the purposes for which it was collected, to comply with legal, accounting, or reporting obligations, to resolve disputes, and to enforce agreements.
The retention period depends on the nature of the information and the purpose for which it was collected. When personal information is no longer required, we will securely delete, destroy, or anonymize it in accordance with our retention practices and applicable law.
8. User Rights
Subject to applicable law, you may have the following rights regarding your personal information:
- Access: to request confirmation of whether we hold personal information about you and to obtain a copy of that information.
- Rectification: to request correction of inaccurate, incomplete, or outdated personal information.
- Erasure: to request deletion of personal information, subject to legal and contractual retention requirements.
- Restriction: to request that we limit the processing of your personal information in certain circumstances.
- Data portability: to request a copy of certain personal information in a structured, commonly used format, where applicable by law.
- Objection: to object to certain processing activities, including direct marketing where applicable.
To exercise any of these rights, please contact us using the details provided below. We may need to verify your identity before responding to your request. We will respond within the time required by applicable law or, if no specific period is prescribed, within a reasonable time.
9. Withdrawal of Consent
Where we rely on your consent to process personal information, you may withdraw that consent at any time, subject to legal or contractual restrictions and reasonable notice.
Withdrawing consent may affect our ability to provide certain services or features. It will not affect the lawfulness of processing carried out before your withdrawal. To withdraw consent, contact us using the information below or use any available unsubscribe or preference-management tools.
10. Right to Complain
If you have concerns about our privacy practices, we encourage you to contact us first so we can address your concern promptly.
You may also have the right to file a complaint with the Office of the Privacy Commissioner of Canada or, where applicable, with the privacy commissioner or regulator in your province. We will cooperate with any lawful investigation and take appropriate steps to resolve privacy complaints.
11. Data Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification. These measures may include access controls, encryption where appropriate, secure storage, staff confidentiality obligations, and monitoring of systems for security events.
However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect personal information, we cannot guarantee absolute security.
12. Contact Information
If you have questions, requests, or concerns regarding this Privacy Policy or our handling of personal information, please contact:
NorthPeak Performance Marketing
401 King Street West, Suite 2800
Toronto, ON M5V 3C6
Canada
Email: [email protected]
Phone: +1 (416) 782-6941
13. Changes to Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or business operations. When we make material changes, we will take reasonable steps to notify you, such as by posting the updated policy on our website or by other appropriate means.
The “Effective Date” at the top of this policy indicates when it was last revised. Your continued use of our services or website after any changes become effective constitutes your acknowledgment of the updated Privacy Policy, to the extent permitted by law.