Privacy Policy

Company: ePropel Digital Inc.

Jurisdiction: Alberta, Canada

Effective Date: April 7, 2026

Last Updated: April 28, 2026

Contact: contact@epropel.ca

Address: 500 4th Avenue SW, Suite 2500, Altius Centre, Calgary, Alberta T2P 2V6, Canada

ePropel Digital Inc. is committed to protecting the privacy of all individuals who visit our website or engage our services. This Privacy Policy explains how we collect, use, store, disclose, and protect personal information in compliance with applicable privacy laws across Canada, the United States, the European Union, and the United Kingdom.

1. Who We Are

ePropel Digital Inc. is an SEO and digital marketing consultancy incorporated in Alberta, Canada. For the purposes of EU and UK data protection law, ePropel Digital acts as a data controller in respect of personal data collected through our website and service engagements.
    • Company: ePropel Digital Inc.
    • Address: 500 4th Avenue SW, Suite 2500, Altius Centre, Calgary, Alberta T2P 2V6, Canada
    • Contact: [contact@epropel.ca](mailto:contact@epropel.ca)

1.1 Privacy Officer

In accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and the Alberta Personal Information Protection Act (PIPA), ePropel Digital Inc. has designated a Privacy Officer responsible for overseeing compliance with this Privacy Policy and applicable privacy legislation.

The Privacy Officer can be contacted at:

    • Email: [contact@epropel.ca](mailto:contact@epropel.ca)
    • Subject line: Privacy Officer Inquiry
    • Company: ePropel Digital Inc.
    • Address: 500 4th Avenue SW, Suite 2500, Altius Centre, Calgary, Alberta T2P 2V6, Canada

All privacy-related inquiries, complaints, access requests, and consent withdrawals will be handled by the Privacy Officer or an authorized delegate.

1.2 EU and UK Representatives

ePropel Digital Inc. does not currently target the European Union or United Kingdom as primary markets and has not appointed a representative under Article 27 of the GDPR or UK GDPR on the basis that our processing of EU and UK personal data is occasional and low-risk. Should this change, we will appoint a representative and update this policy accordingly. EU and UK residents may exercise their rights directly by contacting us at [contact@epropel.ca](mailto:contact@epropel.ca).

2. Age Requirements

Our website and services are intended for adults who have the legal capacity to enter into contracts in their jurisdiction. In most jurisdictions, this means the age of majority, which is typically 18 or 19. We do not knowingly collect personal information from children or individuals below the age of majority in their jurisdiction. If you believe we have inadvertently collected information from a minor, please contact us at [contact@epropel.ca](mailto:contact@epropel.ca) and we will take prompt steps to delete that information.

3. Information We Collect

3.1 Information You Provide Directly

We collect personal information you voluntarily provide when you:

    • Submit a contact or inquiry form on our website
    • Book a discovery call or consultation via Calendly
    • Interact with our website chat widget
    • Enter into a service agreement with us
    • Communicate with us by email, phone, SMS, or any other channel

This may include your name, email address, phone number, company name, website URL, job title, and any information you include in your correspondence with us. Phone numbers may be used for voice calls and, where you have provided explicit consent, SMS communications. See Section 12.1 for details on SMS communications.

3.2 Information Collected Automatically

When you visit our website, we and our third-party partners automatically collect certain technical and behavioral data, including:

    • IP address and approximate geographic location
    • Browser type, version, and language settings
    • Device type, operating system, and screen resolution
    • Pages visited, time spent on each page, and navigation paths
    • Referring website, search terms, or traffic source
    • Mouse movements, clicks, and scroll behavior (via Microsoft Clarity session recordings)
    • Interactions with forms, buttons, and other website elements

This data is collected via cookies, pixels, tags, and similar tracking technologies operated by us and our third-party advertising and analytics partners. Please see our Cookie Policy for full details.

3.3 Information from Third-Party Platforms

We may receive information about you from third-party advertising platforms including Google, Microsoft, Meta, LinkedIn, X, Reddit, Nextdoor, and Mantis when you interact with our advertisements. This may include click data, conversion events, and audience segment information used to measure and optimize our advertising campaigns.

3.4 Information Processed Through Our CRM

When you become a lead or client, your contact and engagement information is stored and managed in GoHighLevel, our CRM platform. GoHighLevel may collect and process data including email engagement, form submissions, call logs, SMS message logs, and pipeline activity on our behalf. GoHighLevel acts as a data processor under our instruction and is contractually bound to handle your data in accordance with applicable privacy laws.

4. How We Use Your Information

We use personal information for the following purposes:
    • To respond to inquiries and provide requested information about our services
    • To fulfill contractual obligations under service agreements
    • To manage client relationships and communicate about projects and deliverables
    • To send appointment reminders, follow-ups, and service-related SMS messages where consent has been provided
    • To process payments through Stripe and Plooto
    • To send marketing and promotional communications where you have consented or we have a legitimate interest
    • To deliver and optimize targeted advertising across Google, Microsoft, Meta, LinkedIn, X, Reddit, Nextdoor, and Mantis
    • To analyze website traffic and user behavior through Google Analytics 4 and Microsoft Clarity
    • To record and transcribe business calls and meetings via Zoom and Calendly
    • To manage internal operations using GSuite, Asana, Slack, Zapier, and related tools
    • To comply with applicable legal and regulatory obligations
    • To protect our legal rights, prevent fraud, and ensure website security

5. Legal Basis for Processing (EU and UK)

For individuals in the European Union and United Kingdom, we process personal data under the following legal bases as defined by the GDPR and UK GDPR:
    • Contract: Processing necessary to perform or prepare a service agreement with you
    • Legitimate Interests: Analytics, fraud prevention, business communications, and improving our services, where not overridden by your rights
    • Consent: Marketing communications, SMS communications, non-essential cookies, session recording via Microsoft Clarity, and advertising pixels
    • Legal Obligation: Compliance with applicable laws, regulations, and tax requirements
You have the right to withdraw consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal. To withdraw consent, contact [contact@epropel.ca](mailto:contact@epropel.ca).

6. Your Privacy Rights

6.1 Canadian Residents (PIPEDA, Provincial Privacy Laws, and Quebec Law 25)

Under Canadian federal and provincial privacy law — including the Personal Information Protection and Electronic Documents Act (PIPEDA), Alberta’s Personal Information Protection Act (PIPA), British Columbia’s PIPA, and Quebec’s Law 25 — you have the right to:

    • Request access to the personal information we hold about you
    • Request correction of inaccurate or incomplete personal information
    • Withdraw consent to the collection, use, or disclosure of your personal information, subject to legal or contractual restrictions
    • File a complaint with the Office of the Privacy Commissioner of Canada ([priv.gc.ca](http://priv.gc.ca)), the Office of the Information and Privacy Commissioner of Alberta ([oipc.ab.ca](http://oipc.ab.ca)), or your provincial privacy regulator

6.2 United States Residents (State Privacy Laws)

If you are a resident of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, New Hampshire, Nebraska, Rhode Island, or another US state with a comprehensive consumer privacy law, you have the following rights:

    • Right to know what personal information we collect, use, disclose, and share
    • Right to access and receive a copy of your personal information
    • Right to delete your personal information, subject to certain exceptions
    • Right to correct inaccurate personal information
    • Right to opt out of the sale or sharing of personal information for cross-context behavioral advertising and targeted advertising
    • Right to limit use and disclosure of sensitive personal information
    • Right to non-discrimination for exercising your privacy rights
    • Right to appeal a denial of your privacy request (where applicable under your state’s law)

6.2.1 Categories of Personal Information We Share

For targeted advertising and analytics purposes, we share the following categories of personal information with third-party platforms:

    • Identifiers (IP address, cookie IDs, device identifiers)
    • Internet or other electronic network activity (pages viewed, interactions, referral source, search terms)
    • Geolocation data (approximate, derived from IP address)
    • Inferences drawn from the above (audience segments based on behavior)

We share these categories with the third-party advertising and analytics platforms listed in Section 7.3 and Section 7.4 of this Privacy Policy.

6.2.2 Sale and Sharing of Personal Information

ePropel Digital does not sell personal information for monetary consideration. However, our use of third-party advertising and analytics platforms involves the disclosure of personal information that may constitute “sharing” under California law (CCPA/CPRA), or “sale” or “targeted advertising” under similar state privacy laws including those of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and other states.

In the preceding 12 months, ePropel Digital has shared the categories of personal information described in Section 6.2.1 with the third parties listed in Sections 7.3 and 7.4 for cross-context behavioral advertising and analytics purposes. We do not knowingly sell or share the personal information of consumers under the age of 16. We do not sell or share phone numbers collected for SMS communications.

6.2.3 How to Exercise Your Rights

You may exercise your privacy rights through any of the following methods:

    • Use the cookie preference toggles available in our Cookie Policy
    • Click the “Do Not Sell or Share My Personal Information” link in our website footer
    • Enable the Global Privacy Control (GPC) signal in your browser, which we honor automatically
    • Email [contact@epropel.ca](mailto:contact@epropel.ca) with the subject line “Do Not Sell or Share My Personal Information” or “Privacy Request”

We will respond to verifiable requests within the timeframes required by your state’s law (typically 45 days, with possible extension). We will not discriminate against you for exercising any of these rights.

6.3 EU Residents (GDPR)

Under the General Data Protection Regulation, you have the right to:

    • Access your personal data and receive a copy
    • Rectify inaccurate or incomplete personal data
    • Request erasure of your personal data (‘right to be forgotten’), where applicable
    • Restrict or object to processing of your personal data
    • Data portability — receive your data in a structured, commonly used format
    • Withdraw consent at any time where processing is based on consent
    • Lodge a complaint with your local supervisory authority

6.4 UK Residents (UK GDPR)

UK residents have equivalent rights under the UK GDPR and the Data Protection Act 2018. You have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at [ico.org.uk](http://ico.org.uk). ePropel Digital is committed to working with you to resolve any privacy concerns before escalation to the ICO.

7. Third-Party Tools and Data Processors

ePropel Digital uses the following categories of third-party tools that may process personal data on our behalf or in connection with our services. All third-party processors are selected for their compliance with applicable privacy standards.

7.1 CRM and Sales

    • GoHighLevel (LeadConnector): CRM, pipeline management, email automation, SMS messaging, and lead tracking. Stores contact and engagement data for leads and clients. SMS messages are delivered via LeadConnector’s underlying telecom infrastructure (Twilio).

7.2 Payment Processing

    • Stripe: Online payment processing for client invoices. Stripe processes payment data under its own privacy policy and PCI DSS compliance standards.
    • Plooto: Payment processing and accounts receivable. Plooto processes banking and payment data under its own privacy policy.

ePropel Digital does not store, access, or retain payment card or full banking credentials.

7.3 Analytics and Behavior Tracking

    • Google Analytics 4: Website traffic analysis, user behavior, and conversion tracking.
    • Microsoft Clarity: Session recording, heatmaps, and behavioral analytics. Clarity records mouse movements, clicks, and scroll behavior. This data is used to improve website usability and performance.

7.4 Advertising Platforms

    • Google Ads and Google Tag Manager
    • Microsoft Advertising (Bing Ads) and Microsoft UET
    • Meta (Facebook and Instagram Ads)
    • LinkedIn Ads (LinkedIn Insight Tag)
    • X Ads (X Pixel)
    • Reddit Ads
    • Nextdoor Ads
    • Mantis Ad Network (specialized advertising network for regulated industries)

These platforms receive data via tracking pixels and tags placed on our website. Data shared includes page views, conversion events, and audience signals used to measure and optimize our advertising campaigns.

7.5 Communications and Productivity

    • Google Workspace (GSuite): Email, documents, and calendar
    • Zoom: Video calls and meetings
    • Calendly: Appointment scheduling and booking
    • Slack: Internal team communications
    • Quo: Business calls and communications
    • Twilio (via LeadConnector / GoHighLevel): SMS and voice telecommunications infrastructure used to deliver appointment reminders, missed-call responses, and other transactional messages
    • Asana: Project management
    • Zapier: Workflow automation connecting our tools
    • ContentStudio: Social media scheduling and publishing

Where internal productivity or workflow tools incidentally capture client-related information on employee devices, we treat that information under the same confidentiality and security standards as all other client data.

7.6 Hosting and Infrastructure

    • Kinsta: WordPress hosting provider
    • GoDaddy: Domain registration and management
    • Google Workspace: Business email and document hosting

7.7 Artificial Intelligence Tools

ePropel Digital uses AI-powered tools and platforms from time to time to assist with content creation, research, analysis, and service delivery. Where AI tools are used, we take reasonable steps to ensure that personal data is not unnecessarily shared with these platforms. Clients with specific restrictions on AI tool usage in their engagement must notify us in writing prior to commencement of work.

7.8 Trust and Review Platforms

    • Trustpilot: Client review collection and display. Trustpilot may set cookies when its widget is loaded on our website.
    • Better Business Bureau (BBB): Trust badge display. The BBB badge widget may set cookies when loaded.
    • ZoomInfo: Company-level website visitor identification. ZoomInfo may identify the company or organization associated with a website visit based on IP address. This data is used for B2B marketing purposes.

8. Data Retention

We retain personal information only as long as necessary for the purposes outlined in this policy or as required by law:
    • Client records and service data: 7 years after end of engagement (for accounting and legal compliance)
    • Lead and prospect data: 2 years from last meaningful contact
    • Website analytics data: As configured per platform (Google Analytics default: 26 months)
    • Microsoft Clarity session recordings: 30 days by default
    • Marketing contact lists: Until you unsubscribe or request deletion
    • SMS opt-in records and message logs: Retained for the duration of the customer relationship plus 4 years for compliance with telecommunications regulations
    • Call and meeting recordings: As required for service delivery, typically up to 1 year

9. International Data Transfers

ePropel Digital is based in Canada. We use service providers and team members located in other countries including the United States, the Philippines, and the European Economic Area. Personal data may be transferred to and processed in these jurisdictions. For EU and UK data subjects, transfers outside the EEA and UK are conducted using appropriate safeguards including Standard Contractual Clauses (SCCs) or equivalent transfer mechanisms as required by the GDPR and UK GDPR. By using our website or services, you acknowledge that your data may be transferred internationally in accordance with this policy.

10. Security

ePropel Digital implements appropriate technical and organizational measures to protect personal information against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:
    • SSL/TLS encryption on all website communications
    • Role-based access controls for internal systems
    • Secure website hosting via Kinsta
    • Regular security reviews and access audits
    • Staff awareness of data protection responsibilities
No method of electronic transmission or storage is completely secure. While we are committed to protecting your information, we cannot guarantee absolute security. In the event of a data breach that creates a real risk of significant harm, we will notify affected individuals and applicable regulators as required by law.

11. Cookies and Tracking Technologies

We use cookies, pixels, tags, and session recording technologies on our website. Please refer to our Cookie Policy for full details on the categories of cookies we use, the specific tools and platforms involved, your consent options, and how to manage your preferences. You may manage your consent preferences directly on the Cookie Policy page at any time.

12. Marketing Communications

We may send marketing emails and communications to prospects and clients where we have a legitimate interest or have obtained your consent. Every marketing communication includes a clear and easy unsubscribe option. You may also opt out at any time by emailing [contact@epropel.ca](mailto:contact@epropel.ca) with the subject line ‘Unsubscribe’.

12.1 SMS / Text Message Communications

ePropel Digital Inc. may send SMS (text message) communications to individuals who have provided explicit, opt-in consent through one of the following channels:

    • The chat widget on https://epropeldigital.com/
    • The contact form on our website (Fluent Forms)
    • The Calendly appointment booking page

SMS messages are limited to transactional and customer-care purposes, including:

    • Appointment reminders and confirmations
    • Follow-up communications related to scheduled meetings
    • Responses to missed calls
    • Service-related updates

We do not send promotional or marketing SMS without separate, explicit consent.

Phone numbers collected for SMS purposes are stored in our CRM (GoHighLevel) and processed via our SMS service provider (LeadConnector / Twilio). We do not sell, rent, lease, or share phone numbers with unaffiliated third parties for marketing purposes.

You may opt out of SMS communications at any time by replying STOP to any message, or by emailing [contact@epropel.ca](mailto:contact@epropel.ca) with the subject line “SMS Opt-Out”. Standard message and data rates may apply. Message frequency varies based on appointment activity and engagement.

13. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, tools, or legal requirements. Changes will be posted on this page with an updated effective date. For material changes that significantly affect how we handle your personal information, we will take reasonable steps to notify affected individuals prior to the changes taking effect.

14. How to Exercise Your Rights

To exercise any of your privacy rights, make a data access request, request deletion, withdraw consent, or raise a concern, please contact us:
    • Email: [contact@epropel.ca](mailto:contact@epropel.ca)
    • Subject line: Privacy Request
    • Company: ePropel Digital Inc.
    • Address: 500 4th Avenue SW, Suite 2500, Altius Centre, Calgary, Alberta T2P 2V6, Canada
We will acknowledge all requests promptly and respond in full within 30 days of receipt (Canada and United States) or within one calendar month (EU and UK, as required by GDPR and UK GDPR). If your request is complex or requires additional time, we will notify you within the initial response period and explain the reason for any extension.