Privacy Policy
Company: ePropel Digital Inc.
Jurisdiction: Alberta, Canada
Effective Date: April 7, 2026
Last Updated: April 7, 2026
Contact: contact@epropel.com
ePropel Digital Inc. is committed to protecting the privacy of all individuals who visit our website or engage our services. This Privacy Policy explains how we collect, use, store, disclose, and protect personal information in compliance with applicable privacy laws across Canada, the United States, the European Union, and the United Kingdom.
1. Who We Are
ePropel Digital Inc. is an SEO and digital marketing consultancy incorporated in Alberta, Canada. For the purposes of EU and UK data protection law, ePropel Digital acts as a data controller in respect of personal data collected through our website and service engagements.
- Company: ePropel Digital Inc.
- Address: Alberta, Canada
- Contact: contact@epropel.com
2. Age Requirements
Our website and services are intended for individuals who are at least 21 years of age, or the minimum legal age required in their jurisdiction, whichever is lower. If the minimum legal age in your jurisdiction is higher than 21, that higher age applies.
We do not knowingly collect personal information from individuals who do not meet the applicable minimum age requirement. If you believe we have inadvertently collected information from an underage individual, please contact us immediately at contact@epropel.com and we will take prompt steps to delete that information.
3. Information We Collect
3.1 Information You Provide Directly
We collect personal information you voluntarily provide when you:
- Submit a contact or inquiry form on our website
- Book a discovery call or consultation via Calendly
- Enter into a service agreement with us
- Communicate with us by email, phone, or any other channel
This may include your name, email address, phone number, company name, website URL, job title, and any information you include in your correspondence with us.
3.2 Information Collected Automatically
When you visit our website, we and our third-party partners automatically collect certain technical and behavioral data, including:
- IP address and approximate geographic location
- Browser type, version, and language settings
- Device type, operating system, and screen resolution
- Pages visited, time spent on each page, and navigation paths
- Referring website, search terms, or traffic source
- Mouse movements, clicks, and scroll behavior (via Microsoft Clarity session recordings)
- Interactions with forms, buttons, and other website elements
This data is collected via cookies, pixels, tags, and similar tracking technologies operated by us and our third-party advertising and analytics partners. Please see our Cookie Policy for full details.
3.3 Information from Third-Party Platforms
We may receive information about you from third-party advertising platforms including Google, Microsoft, Meta, LinkedIn, X, Reddit, Nextdoor, and Mantis when you interact with our advertisements. This may include click data, conversion events, and audience segment information used to measure and optimize our advertising campaigns.
3.4 Information Processed Through Our CRM
When you become a lead or client, your contact and engagement information is stored and managed in GoHighLevel, our CRM platform. GoHighLevel may collect and process data including email engagement, form submissions, call logs, and pipeline activity on our behalf. GoHighLevel acts as a data processor under our instruction and is contractually bound to handle your data in accordance with applicable privacy laws.
4. How We Use Your Information
We use personal information for the following purposes:
- To respond to inquiries and provide requested information about our services
- To fulfill contractual obligations under service agreements
- To manage client relationships and communicate about projects and deliverables
- To process payments through Stripe and Plooto
- To send marketing and promotional communications where you have consented or we have a legitimate interest
- To deliver and optimize targeted advertising across Google, Microsoft, Meta, LinkedIn, X, Reddit, Nextdoor, and Mantis
- To analyze website traffic and user behavior through Google Analytics 4 and Microsoft Clarity
- To record and transcribe business calls and meetings via Zoom and Calendly
- To manage internal operations using GSuite, Asana, Slack, Zapier, and related tools
- To comply with applicable legal and regulatory obligations
- To protect our legal rights, prevent fraud, and ensure website security
5. Legal Basis for Processing (EU and UK)
For individuals in the European Union and United Kingdom, we process personal data under the following legal bases as defined by the GDPR and UK GDPR:
- Contract: Processing necessary to perform or prepare a service agreement with you
- Legitimate Interests: Analytics, fraud prevention, business communications, and improving our services, where not overridden by your rights
- Consent: Marketing communications, non-essential cookies, session recording via Microsoft Clarity, and advertising pixels
- Legal Obligation: Compliance with applicable laws, regulations, and tax requirements
You have the right to withdraw consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal. To withdraw consent, contact contact@epropel.com.
6. Your Privacy Rights
6.1 Canadian Residents (PIPEDA and PIPA Alberta)
Under Canadian federal and Alberta provincial privacy law, you have the right to:
- Request access to the personal information we hold about you
- Request correction of inaccurate or incomplete personal information
- Withdraw consent to the collection, use, or disclosure of your personal information, subject to legal or contractual restrictions
- File a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca) or the Office of the Information and Privacy Commissioner of Alberta (oipc.ab.ca)
6.2 California Residents (CCPA and CPRA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act and California Privacy Rights Act:
- Right to know what personal information we collect, use, disclose, and share
- Right to delete your personal information, subject to certain exceptions
- Right to correct inaccurate personal information
- Right to opt out of the sale or sharing of personal information for cross-context behavioral advertising
- Right to limit use of sensitive personal information
- Right to non-discrimination for exercising your privacy rights
ePropel Digital does not sell personal information for monetary consideration. However, sharing data with advertising platforms such as Meta, Google, and others for targeted advertising may constitute ‘sharing’ under CCPA. You may opt out via our cookie consent banner or by contacting contact@epropel.com with the subject line ‘Do Not Sell or Share My Personal Information’.
6.3 EU Residents (GDPR)
Under the General Data Protection Regulation, you have the right to:
- Access your personal data and receive a copy
- Rectify inaccurate or incomplete personal data
- Request erasure of your personal data (‘right to be forgotten’), where applicable
- Restrict or object to processing of your personal data
- Data portability — receive your data in a structured, commonly used format
- Withdraw consent at any time where processing is based on consent
- Lodge a complaint with your local supervisory authority
6.4 UK Residents (UK GDPR)
UK residents have equivalent rights under the UK GDPR and the Data Protection Act 2018. You have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk. ePropel Digital is committed to working with you to resolve any privacy concerns before escalation to the ICO.
7. Third-Party Tools and Data Processors
ePropel Digital uses the following categories of third-party tools that may process personal data on our behalf or in connection with our services. All third-party processors are selected for their compliance with applicable privacy standards.
7.1 CRM and Sales
- GoHighLevel: CRM, pipeline management, email automation, and lead tracking. Stores contact and engagement data for leads and clients.
7.2 Payment Processing
- Stripe: Online payment processing for client invoices. Stripe processes payment data under its own privacy policy and PCI DSS compliance standards.
- Plooto: Payment processing and accounts receivable. Plooto processes banking and payment data under its own privacy policy.
ePropel Digital does not store, access, or retain payment card or full banking credentials.
7.3 Analytics and Behavior Tracking
- Google Analytics 4: Website traffic analysis, user behavior, and conversion tracking.
- Microsoft Clarity: Session recording, heatmaps, and behavioral analytics. Clarity records mouse movements, clicks, and scroll behavior. This data is used to improve website usability and performance.
7.4 Advertising Platforms
- Google Ads and Google Tag Manager
- Microsoft Advertising (Bing Ads) and Microsoft UET
- Meta (Facebook and Instagram Ads)
- LinkedIn Ads (LinkedIn Insight Tag)
- X Ads (X Pixel)
- Reddit Ads
- Nextdoor Ads
- Mantis Ad Network (cannabis-compliant advertising network)
These platforms receive data via tracking pixels and tags placed on our website. Data shared includes page views, conversion events, and audience signals used to measure and optimize our advertising campaigns.
7.5 Communications and Productivity
- Google Workspace (GSuite): Email, documents, and calendar
- Zoom: Video calls and meetings
- Calendly: Appointment scheduling and booking
- Slack: Internal team communications
- Quo: Business calls and communications
- Asana: Project management
- Zapier: Workflow automation connecting our tools
- ContentStudio: Social media scheduling and publishing
- Screenshot Monitor: Team productivity monitoring
7.6 Hosting and Infrastructure
- Kinsta: WordPress hosting provider
- GoDaddy: Domain registration and management
- Google Workspace: Business email and document hosting
7.7 Artificial Intelligence Tools
ePropel Digital may use AI-powered tools and platforms including but not limited to OpenAI, Anthropic Claude, Google Gemini, and similar services to assist with content creation, research, analysis, and service delivery. Where AI tools are used, we take reasonable steps to ensure that personal data is not unnecessarily shared with AI platforms. Clients with specific restrictions on AI tool usage in their engagement must notify us in writing.
7.8 Trust and Review Platforms
- Trustpilot: Client review collection and display. Trustpilot may set cookies when its widget is loaded on our website.
- Better Business Bureau (BBB): Trust badge display. The BBB badge widget may set cookies when loaded.
- ZoomInfo: Company-level website visitor identification. ZoomInfo may identify the company or organization associated with a website visit based on IP address. This data is used for B2B marketing purposes.
8. Data Retention
We retain personal information only as long as necessary for the purposes outlined in this policy or as required by law:
- Client records and service data: 7 years after end of engagement (for accounting and legal compliance)
- Lead and prospect data: 2 years from last meaningful contact
- Website analytics data: As configured per platform (Google Analytics default: 26 months)
- Microsoft Clarity session recordings: 30 days by default
- Marketing contact lists: Until you unsubscribe or request deletion
- Call and meeting recordings: As required for service delivery, typically up to 1 year
9. International Data Transfers
ePropel Digital is based in Canada. We use service providers and team members located in other countries including the United States, the Philippines, and the European Economic Area. Personal data may be transferred to and processed in these jurisdictions.
For EU and UK data subjects, transfers outside the EEA and UK are conducted using appropriate safeguards including Standard Contractual Clauses (SCCs) or equivalent transfer mechanisms as required by the GDPR and UK GDPR. By using our website or services, you acknowledge that your data may be transferred internationally in accordance with this policy.
10. Security
ePropel Digital implements appropriate technical and organizational measures to protect personal information against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:
- SSL/TLS encryption on all website communications
- Role-based access controls for internal systems
- Secure website hosting via Kinsta
- Regular security reviews and access audits
- Staff awareness of data protection responsibilities
No method of electronic transmission or storage is completely secure. While we are committed to protecting your information, we cannot guarantee absolute security. In the event of a data breach that creates a real risk of significant harm, we will notify affected individuals and applicable regulators as required by law.
11. Cookies and Tracking Technologies
We use cookies, pixels, tags, and session recording technologies on our website. Please refer to our Cookie Policy for full details on the categories of cookies we use, the specific tools and platforms involved, your consent options, and how to manage your preferences.
12. Marketing Communications
We may send marketing emails and communications to prospects and clients where we have a legitimate interest or have obtained your consent. Every marketing communication includes a clear and easy unsubscribe option. You may also opt out at any time by emailing contact@epropel.com with the subject line ‘Unsubscribe’.
13. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, tools, or legal requirements. Changes will be posted on this page with an updated effective date. For material changes that significantly affect how we handle your personal information, we will take reasonable steps to notify affected individuals prior to the changes taking effect.
14. How to Exercise Your Rights
To exercise any of your privacy rights, make a data access request, request deletion, withdraw consent, or raise a concern, please contact us:
- Email: contact@epropel.com
- Subject line: Privacy Request
- Company: ePropel Digital Inc.
- Province: Alberta, Canada
We will acknowledge all requests within 5 business days and respond in full within 30 days. For EU and UK requests, we will respond within one calendar month as required by GDPR and UK GDPR. If we require additional time, we will notify you within the initial response period.