Privacy Policy
A clear explanation of what information iPragma receives through this website, why it is used, where it may be processed and how to make a privacy request.
Who is responsible for this website
iPragma is an Ontario sole proprietorship and the operator responsible for this website. For questions, access or correction requests, or privacy complaints, contact the Privacy Officer at [email protected] or write to iPragma, 65 Oneida Crescent, Richmond Hill, Ontario, Canada L4B 0G9.
This policy describes the website and its public forms. A separate written agreement or notice may apply to a specific client engagement or product.
Information we collect
If you send a project inquiry, the form asks for your name, email address, optional company name, selected starting point and message. The inquiry is stored in the website administration system and an email notification is sent to [email protected]. Please share only information needed to discuss your request; do not submit sensitive personal, financial or confidential information through a general inquiry form.
If you subscribe to the newsletter, the form collects your email address. The subscription system stores the address, a SHA-256 hash of it and a pending status for review. Newsletter messages may be sent manually; the website does not currently send campaigns automatically.
When you visit, the hosting, delivery and security systems may process technical information such as your IP address, browser and device details, requested pages, timestamps, referral information and security events. Cloudflare helps deliver and protect network traffic and may process request and routing data.
How and why we use information
We use inquiry details to review and respond to your request, discuss or provide requested services, keep necessary project records and protect our systems. We use newsletter details to administer subscriptions and send the occasional communication you requested. Technical information is used to operate the site, diagnose faults, prevent abuse, investigate security events and understand aggregate site usage where you have enabled analytics.
The site is hosted on a dedicated server in an Equinix data centre in the United States. Website information and technical data may therefore be processed or stored in the United States, where local authorities may have lawful access under applicable law. iPragma remains responsible for its handling of personal information and takes reasonable steps to use service providers with appropriate safeguards. Internal website backups are made twice weekly on local systems in Canada.
Google Tag Manager and the configured GA4 tag, the site’s direct GA4 event transport, and Microsoft Clarity are loaded only when Analytics consent is enabled. Marketing consent updates advertising-related consent signals; a public container review on October 16, 2026 found no separate Google Ads or remarketing tag. Google Consent Mode starts with analytics and advertising signals denied and reflects the saved choice. Inquiry and newsletter forms are marked for Clarity masking; custom events use defined event details rather than submitted form values. These settings and providers can change, so this is a description of the configuration reviewed on the date above.
Email and newsletter choices
Newsletter information is kept until you unsubscribe. Commercial emails sent by iPragma identify iPragma, include its mailing address and a contact method, and provide an unsubscribe mechanism. We act on an unsubscribe request as soon as practicable and no later than 10 business days after receiving it. We also send non-marketing service, security, token and password-reset messages that may not include a marketing unsubscribe link where the law permits; whether a particular message is commercial depends on its content and context. Unsubscribing from marketing does not prevent necessary service or security messages.
Retention, backups and deletion
Project inquiry information is generally retained for up to 24 months after the last meaningful interaction, then deleted or de-identified unless an active engagement, dispute, legal requirement or other documented need requires a different period. Newsletter information is kept until you unsubscribe; we may retain the minimum record necessary to honour and document that request.
Website logs are kept according to their purpose: security logs for 30 days, business-activity logs for 90 days and debugging logs for 10 days. These periods apply to the relevant log categories, not to unrelated inquiry or newsletter records.
Tax invoices and supporting accounting records are maintained separately from the website database on iPragma’s internal systems and local storage in Canada, and are kept for the period required for tax, accounting or other legal purposes. Website backups are made twice weekly. Full backup copies are retained for one month; versioned or incremental backup copies may be retained for up to one year. A deletion from a live system may not immediately remove a record from an existing backup; backup copies expire through the rotation schedule and are not used as an ordinary source of business records.
We retain information only for as long as needed for its stated purpose or a legal obligation, and then securely delete, erase or de-identify it where practicable. Retention periods are reviewed as our processes and legal requirements change.
Safeguards and service providers
We use administrative and technical safeguards intended to protect information against unauthorised access, disclosure, alteration or loss. Access is limited to people and providers who need information to perform a stated function. Internet transmission and storage cannot be guaranteed to be completely secure.
We may use providers for hosting, network delivery and protection, email, analytics or site operations. They may process information on our behalf for the services they provide. We do not sell personal information. If information is processed outside Canada, the laws of that location may apply to the processing.
Your privacy requests and complaints
You may contact us to ask for access to personal information we hold about you, request a correction, withdraw consent where consent is the basis for processing, or ask us to delete information that we no longer need. These requests are subject to identity verification and any information we must keep for an active service, legal obligation, accounting record, dispute or security purpose. We will explain if we cannot complete a request in full.
To make a request or raise a concern, email [email protected] with “Privacy request” in the subject line or write to the address above. If we cannot resolve your concern, you may contact the Office of the Privacy Commissioner of Canada or the relevant privacy regulator. Applicable rights depend on the information and law involved.
Updates to this policy
We may revise this policy when our website, practices or legal requirements change. The “Last updated” date at the top identifies the latest revision. Material changes will be described on this page; where a law requires additional notice or consent, we will take the required steps.