Privacy policy

Grizzly Agency (“we,” “us,” “our,” or “Company”) operates the website grizzlyagency.com (the “Site”) and provides digital marketing services from Sylvan Lake, Alberta, Canada. This Privacy Policy explains what information we collect, how we use it, and your choices.

We operate under Canada’s federal Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta’s Personal Information Protection Act (PIPA). If you are a resident of Quebec, the European Union, the United Kingdom, or California, additional rights may apply to you as described below.

Information we collect

Information you provide

• Contact information (name, email, phone, company) submitted through our contact or newsletter forms
• Service inquiry details, project information, and any message content you choose to send us
• Communication preferences

Information collected automatically

• Usage data: pages visited, time on page, referring URL, pages per session
• Technical data: IP address (truncated where possible), browser type and version, device type, operating system, screen size
• Approximate geographic location (city/region-level, derived from IP; never precise GPS)
• Performance metrics: Core Web Vitals (page load time, interaction responsiveness, layout stability)

How we use your information

• Respond to your inquiries and provide customer support
• Deliver, maintain, and improve our digital marketing services
• Send you promotional emails and newsletters only with your consent (and you can unsubscribe at any time)
• Analyze aggregate site usage to understand what content is useful and improve the Site
• Diagnose technical issues and secure the Site against abuse
• Comply with legal obligations

Cookies, analytics & tracking

We use cookies and similar technologies to understand how the Site is used and to improve your experience. We do not use cookies for behavioural advertising, retargeting, or selling your information.

Google Analytics 4

We use Google Analytics 4 (property ID G-C8DRE0CK9J) to measure site traffic and how visitors interact with our content. Google Analytics sets cookies (typically _ga and _ga_*) to distinguish unique users and sessions. Data collected includes pseudonymous identifiers, pages viewed, session duration, approximate location, and device/browser info. We have enabled IP anonymization and do not share data with Google for advertising purposes.

To opt out of Google Analytics across all sites you visit, you can install the Google Analytics Opt-out Browser Add-on. Google’s privacy practices are governed by Google’s own Privacy Policy.

Vercel Analytics & Speed Insights

Our hosting provider Vercel provides first-party analytics and performance (Core Web Vitals) monitoring. These services do not set third-party cookies and use pseudonymous device fingerprints to count unique visits. No personally identifiable information is collected. Vercel’s practices are described in their Privacy Policy.

Formspree (contact & newsletter forms)

When you submit our contact form or newsletter signup, your submission is processed by Formspree, which forwards it to our inbox. Formspree stores submission data per their Privacy Policy.

Controlling cookies in your browser

Most browsers let you refuse or delete cookies, and many honour “Do Not Track” or “Global Privacy Control” signals. Disabling cookies may affect some functionality but will not prevent you from browsing the Site.

Information sharing

We do not sell, trade, or rent your personal information. We share data only with service providers who help us operate the Site (as described above under Cookies, Analytics & Tracking) and only to the extent necessary for those services. Each provider is contractually bound to protect your information.

We may disclose information when required by law, a valid court order, or to protect our legal rights, property, or the safety of our users or the public.

Data retention

• Contact form and newsletter submissions: retained as long as the business relationship is active, plus a reasonable follow-up period
• Google Analytics data: 14 months by default, per our GA4 configuration
• Vercel Analytics and Speed Insights: retention per Vercel’s published defaults
• Email marketing opt-ins: until you unsubscribe

Data security

We implement reasonable technical and organizational measures to protect your information, including HTTPS encryption in transit, secure hosting infrastructure, and access controls. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Your rights & choices

Depending on where you live, you may have the following rights:

• Access the personal information we hold about you
• Correct information that is inaccurate or incomplete
• Request deletion of your information, subject to legal retention obligations
• Withdraw consent for marketing communications at any time
• Receive a copy of your information (data portability)
• Lodge a complaint with a privacy regulator

To exercise any of these rights, email [email protected]. We respond within 30 days as required under PIPEDA.

You can also contact Canada’s Office of the Privacy Commissioner at priv.gc.ca or Alberta’s OIPC at oipc.ab.ca.

Regional notices

Quebec residents

Quebec’s Act to modernize legislative provisions as regards the protection of personal information (Law 25) grants additional rights including the right to be informed of automated decision-making and the right to data portability in a structured format. Contact us to exercise these rights.

EU / UK residents

If you access the Site from the EU or UK, the GDPR / UK GDPR applies. Our lawful basis for processing is legitimate interest for analytics and consent for marketing communications. You have the right to object to processing, lodge a complaint with a supervisory authority, and withdraw consent at any time.

California residents

California residents have rights under the CCPA/CPRA. We do not sell personal information as defined under California law. To request information or deletion, contact us.

Children's privacy

The Site is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. The “Last updated” date at the top of this page indicates when it was last revised. Significant changes will be announced on the Site. Continued use of the Site after changes constitutes acceptance.