Privacy policy

Last updated 23 August 2026

This policy explains what personal information 16255281 Canada Inc. collects through this website, what we do with it, and what you can require of us. It is written to be read, not to be survived.

1. Who we are

16255281 Canada Inc. (“we”, “us”) is a company incorporated federally in Canada with its registered office in Ontario, Canada. For the purposes of the UK and EU General Data Protection Regulation we are the controller of the personal information described here.

For anything in this policy, write to info@16255281canadainc.com. A person reads that address.

2. What we collect

We collect two things, and only two.

What you send us: If you use the enquiry form or email us: your name, email address, your store’s web address, the ad spend band and market you select, and whatever you write in the message. If we go on to work together, we will hold the business contact details and correspondence that engagement requires.
Server and delivery records: Our hosting provider records standard technical information when a page is requested — IP address, browser type, the page requested and the time. This is generated automatically by the infrastructure, is used to keep the site available and secure, and we do not use it to build a profile of you.

We do not buy personal information, we do not scrape it, and we do not enrich what you give us with data from third parties.

3. Why we use it, and our legal basis

We use what you send us to read your enquiry, decide whether we are a sensible fit for your business, reply to you, and — if it goes further — to provide the services we agree on.

Where the UK or EU GDPR applies to you, our legal bases are:

Steps taken at your request before entering a contract (Article 6(1)(b)) — responding to your enquiry and scoping possible work.
Performance of a contract (Article 6(1)(b)) — once we are working together.
Our legitimate interests (Article 6(1)(f)) — keeping this website secure and available, and keeping records of business correspondence. We have considered your interests and rights, and think this is what you would reasonably expect.
Legal obligation (Article 6(1)(c)) — where tax or corporate law requires us to retain records.

We do not use your information for automated decision-making or profiling that produces legal or similarly significant effects.

4. Cookies and tracking

This website sets no cookies. There is no advertising pixel, no retargeting tag, no session cookie and no cross-site tracking of any kind on these pages — which is why you have not been shown a consent banner. Our full cookie policy explains this, and says plainly what we would do if that ever changed.

We do not sell, rent or trade personal information. We share it only with the service providers that make this website and our email work, and only so far as they need it:

Our hosting provider, which serves these pages and generates the technical logs described above.
Our email delivery provider, which transmits enquiry messages from the form to our inbox.
Professional advisers and authorities, where we are legally required to disclose something.

These providers act on our instructions under contract, and are not permitted to use your information for their own purposes.

6. International transfers

We are based in Canada, and our providers operate infrastructure in Canada, the United States and the European Union. If you are in the United Kingdom or the European Economic Area, that means your information may be transferred outside your country.

Where that happens, the transfer is protected by an appropriate safeguard — in most cases the European Commission’s Standard Contractual Clauses (and the UK Addendum or International Data Transfer Agreement for UK data), or a finding of adequacy. Canada holds a partial adequacy decision from the European Commission for organisations subject to PIPEDA. You can ask us for details of the safeguard that applies to you.

7. How long we keep it

Enquiries that do not become work — up to 24 months, then deleted, so we can recognise you if you come back.
Client correspondence and records — for the engagement and for as long afterwards as tax and corporate law requires, which in Canada is generally six years.
Server logs — short retention periods set by our hosting provider, typically measured in days.

You can ask us to delete your information sooner. See below.

8. Your rights

Whatever country you are in, you can email us and ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. We will do it, and we will not charge you or make it difficult.

If you are in Canada

Under PIPEDA you have the right to access the personal information we hold about you, to challenge its accuracy, and to withdraw consent where our use rests on consent. We will respond within 30 days.

If you are in the UK or the EEA

Under the UK and EU GDPR you have the right of access, rectification, erasure, restriction of processing, data portability, and the right to object to processing based on our legitimate interests. Where processing rests on consent, you may withdraw it at any time without affecting what we did before you withdrew it. We will respond within one month.

If you are in California

Under the CCPA as amended by the CPRA you have the right to know what we collect and why, to request deletion, to request correction, and to be free from discrimination for exercising those rights. We do not sell or share personal information as those terms are defined in that Act, and we have not done so in the preceding twelve months.

9. Security

This site is served over HTTPS. Enquiries are transmitted over encrypted connections and land in a mailbox protected by multi-factor authentication. Access to client records is limited to the people who need it. No system is perfectly secure, and we will not pretend otherwise — but if a breach affected you and posed a real risk, we would tell you and the relevant regulator within the time the law requires.

10. Children

This is a website for businesses. It is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has sent us information, email us and we will delete it.

11. How to complain

Please come to us first — info@16255281canadainc.com — because most things are fixable in a day. If you are not satisfied, you can complain to a regulator:

Canada — the Office of the Privacy Commissioner of Canada.
United Kingdom — the Information Commissioner’s Office.
EEA — the supervisory authority in the country where you live or work.

12. Changes to this policy

If we change this policy we will update the date at the top of the page. If the change is significant and affects information we already hold, we will contact you about it directly rather than relying on you re-reading this page.

16255281 Canada Inc. · Ontario, Canada · info@16255281canadainc.com