Privacy Policy
This Privacy Policy explains how The Liminals, an Ontario-based creative and web agency ("The Liminals," "we," "us," or "our"), collects, uses, discloses, and protects personal information through theliminals.ca, our forms, calls, client portal, and agency services.
In short: we collect the information needed to respond to inquiries, book calls, deliver and bill for our work, operate our website and portal, measure marketing, and meet legal obligations. We share it only with service providers, professional advisers, authorities when legally required, and others described below. We do not sell personal information.
Effective and last updated: July 30, 2026
1. Scope and Accountability
This Policy applies when The Liminals controls the personal information. When we build, host, or support a client's website or lead intake system, that client generally controls information submitted by its own customers and prospects. The client's privacy policy and instructions apply to that information, and we process it only to provide the agreed services unless law requires otherwise.
Sean Jones is The Liminals' Privacy Lead and is accountable for our privacy practices. Questions, access requests, or complaints can be sent to support@theliminals.ca.
2. Personal Information We Collect
| Category | Examples |
|---|---|
| Contact and lead information | Name, business name, role, email address, phone number, website, referral source, and inquiry details |
| Booking and communication information | Availability, appointment details, call or meeting information, correspondence, feedback, support requests, and communication preferences |
| Client and project information | Business goals, onboarding answers, brand and website materials, approvals, files, credentials or access details, project activity, and information needed to perform an Engagement |
| Account information | Portal username or email, authentication and security records, account permissions, and activity needed to operate The Liminals OS |
| Transaction information | Invoices, billing contact and address, payment status, amount, currency, tax, and limited payment metadata supplied by payment processors or financial institutions |
| Device and usage information | IP address, browser and device type, pages and links used, timestamps, referring URL, approximate location derived from IP, cookie or advertising identifiers, and diagnostic or security logs |
| Marketing attribution | UTM source, medium, campaign, term and content, ad interactions, opt-in status, and lead or booking events |
We do not intentionally collect or store full payment-card numbers, card security codes, or online banking credentials. Those are entered directly with payment processors or financial institutions and are governed by their privacy and security practices.
3. How We Collect Information
We collect information:
- Directly from you when you submit a form, book a call, communicate with us, sign an Engagement, pay an invoice, use the client portal, or provide project materials;
- Automatically through hosting logs, cookies, pixels, analytics, security tools, and similar technologies when you use our website or portal; and
- From other sources such as referrals, business partners, payment and scheduling providers, advertising platforms, and public business websites or directories used for relevant business development, subject to applicable law.
4. Why We Use Personal Information
We use personal information for purposes a reasonable person would consider appropriate in the circumstances, including to:
- Respond to inquiries, qualify fit, schedule and conduct calls, and provide requested information;
- Prepare proposals, enter into and perform Engagements, manage projects, obtain approvals, provide support, and maintain client relationships;
- Create and administer accounts, authenticate users, protect systems, prevent fraud or abuse, and troubleshoot problems;
- Issue invoices, process and reconcile payments, collect amounts owing, and maintain tax and business records;
- Send service, booking, project, billing, security, and other transactional communications;
- Send marketing communications where we have consent or are otherwise permitted by law, maintain consent and suppression records, and respect unsubscribe requests;
- Understand website use, attribute campaigns, measure advertising and funnel performance, improve content and services, and develop aggregate reporting;
- Establish, exercise, or defend legal claims; comply with contracts, law, court orders, and regulatory requirements; and respond to lawful requests; and
- Complete a business transaction such as a financing, reorganization, merger, or sale, subject to appropriate confidentiality and legal safeguards.
If we want to use personal information for a materially new purpose, we will identify that purpose and obtain additional consent where required.
5. Consent and Communications
We obtain express or implied consent depending on the sensitivity of the information, the purpose, reasonable expectations, and applicable law. Providing information through an inquiry or booking form allows us to use it to respond, schedule the requested call, and send related service communications. Optional promotional messages are separate from communications needed to provide a requested service.
You may withdraw consent for optional uses at any time, subject to legal or contractual restrictions and reasonable notice. Marketing emails include an unsubscribe method. You can also contact us to stop marketing messages. We will action requests within the period required by law and may retain a minimal suppression record so we do not contact you again. Withdrawing consent does not affect processing already lawfully completed and may limit a service that requires the information.
6. Cookies, Analytics, and Advertising
Our website and providers use cookies, pixels, local storage, and similar technologies for essential functions, security, analytics, campaign attribution, and advertising measurement. For example, Google Site Kit and related Google services help measure site use, and the Meta Pixel records page views and selected lead or booking events. These providers may receive device and browser information, IP address, page URL, cookie or advertising identifiers, and event data, and may handle that information under their own policies.
You can block or delete cookies through your browser and use the privacy or advertising controls offered by Google, Meta, and your device. Blocking technologies may affect website or booking functionality. Where applicable law requires a different form of consent or choice, we will use the consent mechanism presented on the site.
7. When We Disclose Information
We may disclose personal information only as reasonably needed for the purposes above to:
- Service providers that support hosting, content management, security, analytics, advertising, scheduling, payments, email or SMS, CRM, file storage, collaboration, bookkeeping, and professional services;
- Project participants such as authorized team members, contractors, and a client's designated contacts;
- Professional advisers and authorities where reasonably necessary to obtain advice, collect a debt, protect rights or safety, investigate misuse, comply with law, or respond to valid legal process; and
- Transaction parties evaluating or completing a legitimate business reorganization, financing, merger, or sale under appropriate restrictions.
Current providers may include Hostinger for hosting, WordPress and its service plugins, Google for analytics and business tools, Meta for advertising measurement, Cal.com for scheduling, Stripe and financial institutions for payments, and email, CRM, storage, or SMS providers used for a particular workflow. Providers may change as our systems evolve. They are permitted to process information only for the contracted service or as allowed by their own terms and applicable law.
We do not sell or rent personal information. We do not disclose it to another business for that business's independent direct marketing without consent.
8. Processing Outside Canada
Some providers and team members may process or store information in Canada, the United States, or other countries. Information processed outside your province or country may be subject to the laws of that jurisdiction and accessible to courts, law enforcement, or national-security authorities under those laws. We use contractual and other reasonable measures appropriate to the service, but cannot require foreign laws to provide protections identical to those in Canada.
9. Retention
We retain personal information only as long as reasonably needed for the identified purposes, an active or reasonably anticipated business relationship, legal and tax recordkeeping, dispute resolution, security, backup cycles, and enforcement of agreements. Retention varies by record type. We may keep project and transaction records longer than general inquiries, and keep a minimal unsubscribe or suppression record after a marketing opt-out.
When information is no longer required, we delete, anonymize, or securely dispose of it, subject to technical backup cycles and legal holds. Client data processed on a client's behalf is retained and returned or deleted according to the applicable Engagement and lawful instructions.
10. Safeguards and Incidents
We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information, such as access controls, secure authentication, encryption in transit where supported, software maintenance, backups, and limiting access to people who need it. No internet transmission, storage system, or safeguard is completely secure, so we cannot guarantee absolute security.
If a privacy or security incident creates a real risk of significant harm, we will investigate and notify affected individuals and regulators as required by applicable law.
11. Your Privacy Choices and Rights
Subject to applicable law, you may ask us to:
- Explain whether we hold personal information about you and how it has been used or disclosed;
- Provide access to that information;
- Correct inaccurate or incomplete information;
- Withdraw consent for optional uses or stop marketing communications; or
- Delete information we are not required to keep.
Send a request to support@theliminals.ca. We may need to verify your identity and may withhold or redact information where law permits or requires. If you are dissatisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.
12. Children
Our website and Services are intended for businesses and adults and are not directed to children under 13. We do not knowingly collect personal information from a child who cannot provide meaningful consent. A parent or guardian who believes a child provided information may contact us to request review and deletion.
13. Third-Party Sites and Client Services
Our website may link to third-party websites or embed third-party services. Their privacy practices are governed by their own policies, not this one. We are also not responsible for the privacy practices of client websites we design or support; each client is responsible for its own notices, consent choices, and lawful handling of its customers' and prospects' information.
14. Changes to This Policy
We may update this Policy as our services, providers, or legal obligations change. We will post the revised date here and provide additional notice or obtain new consent if a change is material and applicable law requires it.
15. Contact and Complaints
Contact our Privacy Lead, Sean Jones, at support@theliminals.ca. Please describe your question or concern and provide enough information for us to respond. We will investigate privacy complaints and reply within a reasonable time.