Privacy Notice

1. Information We Collect

We collect personal information that you give us directly, along with some technical data we gather automatically.

• Contact Data: Your name, business email address, phone number, and company name.
• Communication Preferences: Your choices about the marketing and operational messages you receive from us.
• Tool and Form Inputs: Information you enter into our tools, such as a website URL submitted to our AEO Readiness Checker, or details you provide when claiming a Growth Credit or requesting an audit.
• Recruitment Data: If you apply for a role through our Careers page, we collect your resume, cover letter, contact details, work history, and anything else you choose to share.
• Technical and Usage Data: When you visit the Site, we and our analytics tools may automatically collect your IP address, device and browser type, referring URLs, campaign parameters (UTM tags), pages you view, and time spent on the Site.

2. How We Collect Your Information

• Direct Interaction: You provide information when you fill out a contact or consultation form, access a gated resource like a guide, audit, or template, subscribe to our newsletter, use one of our tools, or apply for a job.
• Lead-Generation and Diagnostic Tools: We run tools on our Site, such as our AEO Readiness Checker, that let you engage with us, request information, or run a diagnostic check.
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to understand traffic and improve your experience. Section 8 covers this in detail, along with your choices.

3. How We Use Your Information

• To Provide Services: To deliver the resources, reports, consultations, or tool outputs you asked for.
• Marketing Communications: To send newsletters, promotional emails, educational content, and updates about our services, following the consent rules in Section 4. You can opt out at any time.
• Recruitment: To review your application, talk with you about opportunities, and manage our hiring process.
• To Improve Our Site: To learn how visitors use the Site and our tools so we can improve performance, usability, and accuracy.
• Customer Support: To respond to your questions, requests, and feedback.
• Legal and Security Purposes: To protect the Site, prevent fraud or abuse, and meet our legal and regulatory obligations.

4. Your Consent and Commercial Electronic Messages (CASL)

Email marketing is a core part of what we do, so we follow Canada's Anti-Spam Legislation (CASL) for every commercial electronic message (CEM) we send.

• Express Consent: When you opt in through a form, newsletter sign-up, or gated-content request, you give us express consent to send you marketing emails until you withdraw it.
• Implied Consent: In the limited cases CASL allows, we may contact you based on an existing business relationship, such as a recent inquiry or engagement, within the timeframes set out in the law.
• Identification: Every message we send clearly identifies Stratezik and includes valid contact information.
• Unsubscribe: Every marketing email includes a working unsubscribe link. You can withdraw consent at any time, and we will action your request within 10 business days at no cost to you.

Withdrawing marketing consent does not affect operational or transactional messages that are needed to provide a service you have requested.

5. Legal Basis for Processing (EEA/UK Visitors)

If you are in the European Economic Area (EEA) or the United Kingdom, our legal basis for processing your personal data depends on the situation:

• Consent: You have given clear consent for a specific purpose, such as subscribing to a marketing list.
• Legitimate Interests: Processing is necessary for our legitimate business interests, as long as those interests do not override your fundamental rights. This covers things like securing our Site, analyzing traffic, and B2B outreach.
• Contract or Legal Obligation: Processing is necessary to provide a service you requested or to meet a legal requirement.

6. Sharing and Disclosure of Your Information

We do not sell, rent, or trade your personal information. We share it only in these situations:

• Service Providers: We share data with trusted vendors who help us run the Site and our business. These include website hosting providers, analytics tools such as Google Analytics, email marketing and CRM platforms, advertising platforms, and form and lead-management tools. They are contractually required to protect your data and use it only on our instructions.
• Advertising Partners: We may share limited data with advertising platforms such as Meta, LinkedIn, and Google Ads to measure and improve our campaigns. Where this counts as “sharing” for cross-context behavioural advertising under CPRA, you can opt out as described in Section 11.
• Legal and Corporate: We may disclose information where the law requires it, where a valid legal process compels it, or in connection with a merger, acquisition, or sale of assets.

7. International Data Transfers

We operate in Canada, and information collected through the Site may be stored or processed in Canada, the United States, or other countries where our service providers keep facilities. Where required, we put appropriate safeguards in place, such as standard contractual clauses, to protect your data when it moves across borders.

8. Cookies and Tracking Technologies

We use a few categories of cookies and similar technologies:

• Essential Cookies: Needed for the Site to work. These cannot be switched off.
• Analytics Cookies: Help us understand how visitors use the Site, for example through Google Analytics.
• Advertising and Retargeting Cookies: Used by advertising platforms such as Meta, LinkedIn, and Google Ads to deliver and measure relevant ads.

For non-essential cookies, we ask for your consent through our cookie banner where the law requires it. You can accept, decline, or change your preferences at any time through the banner or your browser settings. Declining non-essential cookies will not block your access to the core content of the Site.

9. Data Security

We use reasonable technical, administrative, and physical safeguards to protect your personal information from unauthorized access, disclosure, alteration, or destruction. No method of transmitting or storing data online is completely secure, so we cannot guarantee absolute security.

10. Data Breach Notification

If we have a security incident involving personal information that creates a real risk of significant harm, we will notify the affected individuals and the relevant authorities as the law requires. In Canada this means the Office of the Privacy Commissioner of Canada under PIPEDA, and the Commission d'accès à l'information du Québec where Law 25 applies. We keep records of breaches as required.

11. Your Privacy Rights and Choices

Depending on where you live, including Canada under PIPEDA and Quebec's Law 25, the EU or UK under GDPR, or U.S. states under CCPA/CPRA, you may have some or all of these rights:

• Access and Correction: Ask for a copy of the personal information we hold about you, and ask us to correct anything that is wrong.
• Withdraw Consent: Withdraw your consent to our collection, use, or disclosure of your personal information at any time, subject to legal or contractual limits.
• Erasure (“Right to be Forgotten”): Ask us to delete your personal information from our active databases.
• Data Portability: Ask for a copy of certain information in a structured, commonly used format.
• Opt Out of Marketing: Unsubscribe from marketing emails using the link in any message.
• Opt Out of Sale or Sharing (CPRA): California residents can opt out of any sale or sharing of personal information for cross-context behavioural advertising.

To use any of these rights, contact us with the details in Section 14. We will respond within the timeframes the law requires, and we may need to verify your identity first.

12. Quebec Residents (Law 25)

If you live in Quebec, Law 25 gives you extra protections:

• Stratezik is responsible for the personal information in its possession or control.
• We collect, use, and disclose your personal information only with valid consent or as the law otherwise permits, and only for the purposes we identify when we collect it.
• You have the rights of access, correction, withdrawal of consent, portability, and de-indexing, and the right to be told about automated decision-making, which is covered in Section 13.
• We will report confidentiality incidents to the Commission d'accès à l'information and to affected individuals where the incident presents a risk of serious injury.

13. Automated Decision-Making and AI

We use analytics, and we may use automated tools to support marketing, lead scoring, and Site optimization. If we ever make a decision about you based only on automated processing of your personal information, and you are entitled under applicable law such as Quebec's Law 25 or the GDPR, you can ask us for information about that processing and ask to have it reviewed by a person. Contact us using the details in Section 14.

14. How to Contact Us

If you have questions about this Notice or how we handle your information, or you want to make a privacy request or complaint, please reach us at:

If you are not satisfied with how we handle your request, you can contact the Office of the Privacy Commissioner of Canada. Quebec residents can also contact the Commission d'accès à l'information du Québec.

15. Retention of Data

We keep personal information only as long as we need it for the purposes set out in this Notice, or as long as the law requires for accounting, reporting, or other obligations. As a general guide, we keep marketing contact data until you unsubscribe or ask us to delete it, and we keep recruitment data for a reasonable period after a hiring decision unless you ask us to remove it sooner. When we no longer need information, we securely delete or anonymize it.

16. Children's Privacy

Our Site and services are meant for businesses and professionals, not children. We do not knowingly collect personal information from anyone under the age of majority. If you think a child has given us personal information, please contact us so we can delete it.

17. Paid Reports — Payments, Refunds & Credits

Some of our tools produce paid reports — currently the AEO Checker page and full-site audits, and the Google Business Profile (GBP) Growth Roadmap. These are custom digital services generated on demand at the time of purchase, using data and AI analysis available at that moment, and delivered to you on-screen and/or by email.

When you pay for a report, you tick a box confirming you have read and agree to the terms in this section. We record that consent (and its timestamp) with your order.

• Successful delivery is a final sale. Because each report is generated specifically for you and made available immediately, a purchase is non-refundable once the report has been successfully generated and delivered to you.
• If generation fails on our side. In the rare case that we take payment but cannot deliver your report due to a technical failure, we detect it automatically. We will, at our discretion: (a) retry and deliver it, (b) prepare and deliver it manually, or (c) if it still cannot be delivered, provide a free re-run credit or a full refund of that purchase.
• How to reach us. If you paid and did not receive your report, email dave@stratezik.com within 30 days with your payment confirmation. We monitor failed deliveries automatically, but contacting us ensures we resolve yours quickly.
• No refunds for change of mind or results. Reports are informational and reflect the data and AI analysis available at generation time. Scores, findings, and recommendations are not guarantees of rankings, traffic, revenue, or other outcomes, and are not grounds for a refund once delivered.
• Payment processing. Payments are handled by Stripe. We do not receive or store your full card details. Stripe processes your payment information under its own terms and privacy policy.

Nothing in this section limits any non-waivable rights you may have under applicable consumer protection law.

18. Changes to This Notice

We may update this Privacy Notice from time to time to reflect changes in our practices or the law. We will post the new version here and update the “Last Updated” date at the top. Where the law requires it, we will let you know about material changes.