Privacy Policy

Last updated: October 6, 2026

1. Who we are

This Privacy Policy explains how Oction Agency, operating as Oction Agency ("Oction", "we", "us"), collects, uses, discloses and protects personal information. It applies to octionagency.com, our landing pages, forms, ads and the services we provide.

We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), applicable provincial privacy laws, and Canada's Anti-Spam Legislation (CASL) for commercial messages.

Our privacy contact is our privacy officer, reachable at info@octionagency.com.

2. What we collect

Information you give us

• Contact details: your name, email address and phone number.
• Business details: the type of business you run, your website goal and your timeline, as answered in our form.
• Booking details: the time you select and anything you tell us when you book or attend a call.
• Project materials: anything you send us to build your website, such as logos, photos, copy, product details, and account access where you choose to grant it.
• Billing details: the information needed to process payment. Card numbers are handled by our payment processor and are never stored by us.

Information collected automatically

• IP address, browser type, device type, referring page and pages viewed.
• Campaign tracking parameters (utm_source, utm_medium, utm_campaign, utm_content) and click identifiers passed by ad platforms.
• Basic usage data from analytics and advertising tools.

3. Why we collect it

We use personal information only for the purposes below:

• To respond to your enquiry and schedule, hold and follow up on your consultation call.
• To quote, build, deliver, host, support and maintain the website or marketing services you requested.
• To process payments, issue invoices and keep required financial records.
• To send you information about the services you were offered, and about our specials and promotional offers relating to your website and marketing needs.
• To improve our services, measure ad performance and keep our systems secure.
• To meet legal, tax and regulatory obligations.

We do not sell your personal information. We do not rent, trade or share your contact list with third parties for their own marketing.

4. How we contact you

When you submit your information through our form, you are contacting us about a service. We will reach out by email, phone or text only for the following reasons:

• To arrange, confirm or follow up on the consultation you requested.
• To deliver, support or service the website or marketing work you engaged us for.
• To share specials, promotions or new offers relating to your website and marketing needs.

That is the full list. You will not receive messages from us for unrelated products, and we will not pass your details to another company so they can contact you.

By submitting your details through our form, calling us, or engaging us for work, you expressly consent to receive emails, text messages, phone calls and in-app or push notifications from us for the purposes listed above, at the email address and phone number you provide. Message frequency varies. Standard message and data rates may apply. You can stop marketing messages at any time by replying STOP to a text, using the unsubscribe link in any email, or emailing info@octionagency.com.

Every commercial email we send identifies us, includes our contact information, and carries a working unsubscribe link. You can withdraw consent to marketing messages at any time by using that link or by emailing info@octionagency.com. We action unsubscribe requests promptly and in any event within 10 business days, as required by CASL. Withdrawing consent to marketing does not stop service messages about work already underway.

5. Legal basis and consent

By submitting our form, you consent to us collecting and using your information for the purposes in Section 3, and to being contacted as described in Section 4. Where required, we rely on your express consent for promotional messages, and on the business relationship created by your enquiry or engagement for service messages.

You may withdraw consent at any time, subject to legal and contractual restrictions and reasonable notice. Withdrawing consent may mean we can no longer provide some or all of our services.

6. Who we share information with

We share personal information only with service providers who help us operate, and only to the extent they need it. These include:

• CRM and automation: to store your enquiry, manage follow-up and send messages.
• Scheduling: to book your consultation call.
• Hosting and infrastructure: to host our site, your website and related files.
• Email delivery: to send transactional and marketing email.
• Payment processing: to take payment securely.
• Analytics and advertising: to measure traffic and ad performance.
• Professional advisors: accountants and lawyers, under confidentiality.

These providers are bound by contract to protect your information and to use it only for the services they perform for us. We may also disclose information where required by law, by court order, or to establish, exercise or defend legal claims, or to protect our rights, safety or property.

If our business is sold, merged or reorganised, personal information may be transferred as part of that transaction, subject to the same protections described here.

7. Cookies and tracking

Our site uses cookies and similar technologies for basic functionality, analytics and advertising measurement, which may include tools such as Google Analytics, the Google Ads tag and the Meta pixel. These help us understand which campaigns bring visitors and improve the site.

You can block or delete cookies through your browser settings. Some parts of the site may not work properly if you do. You can also opt out of personalised advertising through the settings offered by Google and Meta.

8. How we protect your information

We maintain physical, organisational and technical safeguards appropriate to the sensitivity of the information we hold, including:

• Encryption in transit using HTTPS and TLS across our site, forms and hosting.
• Reputable, security-reviewed providers for CRM, scheduling, hosting and payments.
• Access limited to team members who need the information to do their work, on a least-privilege basis.
• Strong, unique passwords and multi-factor authentication on business-critical accounts.
• Confidentiality obligations for employees and contractors.
• Payment card data handled entirely by PCI-compliant processors. We never see or store full card numbers.
• Periodic review of access, retention and third-party providers.

No method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee absolute security. If a breach occurs that creates a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by law, and keep records of the incident.

9. How long we keep it

We keep personal information only as long as needed for the purposes it was collected for, or as required by law. As a general guide: enquiry and lead records are kept for up to 3 years from your last interaction with us, client project records and financial records for at least 7 years as required for tax purposes, and marketing contact records until you unsubscribe. After that, information is deleted or anonymised.

10. Your rights

Subject to legal limits, you may:

• Ask what personal information we hold about you and request a copy.
• Ask us to correct information that is inaccurate or incomplete.
• Withdraw consent to marketing, or ask us to delete your information.
• Ask how your information has been used and who it has been shared with.

Write to info@octionagency.com and we will respond within 30 days. We may need to verify your identity first. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada, or your provincial privacy regulator.

11. Children

Our services are offered to businesses and to adults. We do not knowingly collect personal information from anyone under the age of majority in their province. If you believe we have, contact us and we will delete it.

12. International transfers

Some of our service providers store or process data outside Canada, including in the United States and the European Union. While in another country, information may be accessible to courts, law enforcement and national security authorities of that country. We choose providers that offer comparable protection and that are bound by contract to safeguard your information.

13. Changes

We may update this policy from time to time. The version posted on this page is the current one, and the date at the top shows when it last changed. Material changes will be posted here before they take effect.

14. Contact us

Questions, requests or complaints about privacy can be sent to:

Oction Agency (Oction Agency)
Vancouver, British Columbia, Canada
info@octionagency.com
+1 (587) 896-4199