Privacy Policy

1. Introduction

PositionMySite (“we,” “us,” “our”) respects your privacy. This Privacy Policy explains what personal information we collect, how we process it, why we process it, who we share it with, and how you can exercise your rights—including how to request deletion of your data.

This policy applies when you visit positionmysite.ca, use SEO Site Signals, communicate with us, or otherwise share information with PositionMySite.

Some of our pages use third-party tools for measurement, advertising, or social features. Where those tools involve Meta (Facebook, Instagram) products, we process information only as described in Section 2 and in line with applicable law and Meta’s developer and platform requirements (Platform Terms, Developer Policies, Developer Data Use Policy).

2. Advertising, measurement, and social features (third parties including Meta)

We may use vendors for website analytics, advertising measurement, or embedded social features. One such vendor family is Meta (Facebook, Instagram). This section describes what that can involve so our practices are clear; it does not change that PositionMySite is responsible for our own sites and services under this policy.

2.1 Technologies we may use

Depending on the page, campaign, or product, we may use:

• Meta Pixel — a snippet that sends events (such as page views, leads, or conversions) to Meta for measurement and, if configured, advertising optimization.
• Conversions API (CAPI) — server-to-server transmission of similar event data to Meta for attribution and measurement.
• Meta SDKs or social plugins — for example, embedded content or share buttons that communicate with Meta when loaded.
• Facebook Login or Instagram-related APIs — if we offer or implement these on a site or app we operate for you, we receive only the profile fields and permissions you (or the end user) authorize, subject to Meta’s consent flows.

When Meta processes personal data, it does so under its own policies. See Meta’s Privacy Policy and Terms of Service.

2.2 Categories of data involved

Through Meta tools and similar integrations, data may include:

• Identifiers such as IP address, device or browser characteristics, and Meta-generated identifiers (e.g., cookie or device IDs).
• Event data tied to actions on our site (URLs visited, buttons clicked, form submissions where configured).
• If you use Facebook Login (where offered): name, email address, profile picture, and other fields you approve in the permission dialog.
• Hashed contact information (e.g., hashed email or phone) when we or our tools send conversions to Meta for matching.

We describe our general analytics and cookies on our Cookies page.

2.3 Purposes of processing

We use data collected via Meta-related tools for purposes such as:

• Measuring traffic, conversions, and campaign performance.
• Delivering or optimizing advertising where you have consented or where applicable law allows.
• Authenticating users and personalizing experience when Facebook Login or similar is enabled.
• Security, fraud prevention, and debugging.

We only process Meta Platform Data for purposes disclosed in this policy (and in any supplemental notice at collection, such as a cookie banner).

2.4 Sharing with Meta

When you interact with our properties, certain information is shared with Meta automatically as part of using Pixel, CAPI, Login, or APIs. Categories typically include device/usage events and identifiers as described above. Purposes include measurement, ad delivery, and account services as configured.

We do not sell your personal information for money. Where “sharing” for cross-context behavioral advertising applies (e.g., under U.S. state laws), we honor applicable opt-out rights as described in Section 8.

3. Information we collect

3.1 You provide directly

• Contact and account details: name, email, phone, company, job title, billing address.
• Project and form content: messages, questionnaire answers, files you upload.
• Payment information: processed by payment processors (we do not store full card numbers on our servers).

3.2 Automatic collection

• Log data: IP address, browser type, referring URL, timestamps.
• Cookies and similar technologies (see our Cookies page).
• Analytics: e.g., Google Analytics 4 aggregates; Meta Pixel / CAPI events as configured.

3.3 SEO Site Signals (tools.positionmysite.com)

If you subscribe, we collect account information (name, email, company, billing details), authentication data, the domains and URLs you choose to analyze, SEO-related metrics and reports we generate or import, usage of the platform (e.g., logins, feature usage), and data from optional integrations you connect (such as Google Search Console) according to the permissions you grant. We use this information to provide the subscription, improve the product, secure accounts, process payments, and communicate with you about your subscription. Details also appear in our Terms of Service under SEO Site Signals.

4. How we use information

We use personal information to:

• Provide, maintain, and improve our services and websites.
• Process payments and subscriptions; send transactional messages.
• Respond to inquiries and support requests.
• Send marketing where permitted; you may opt out anytime.
• Measure performance of our site and ads (including via Meta and Google).
• Comply with law, enforce our Terms, and protect rights and safety.

Where GDPR applies, we rely on appropriate legal bases (contract, legitimate interests, consent where required, legal obligation).

5. Disclosure of information

We disclose information to:

• Service providers (hosting, email, analytics, payments, CRM) under contractual safeguards.
• Meta Platforms, Inc. and affiliates when you trigger Meta Pixel, CAPI, Login, or related features—as required for those products to function.
• Professional advisers or authorities when required by law or to protect our legal interests.
• Successors in a merger or asset sale, subject to this policy or notice to you.

6. How to access, correct, or delete your data

We provide a clear, actionable process to exercise your rights. This applies to users who can access our services (website visitors, leads, clients, and account holders). For a dedicated page with step-by-step deletion instructions (including a stable URL for app and platform compliance), see Request data deletion.

6.1 Contact us (primary channel)

Send an email to [email protected] with:

• Subject line: Data request — [access / correction / deletion / opt-out]
• Your name and the email address associated with your inquiry or account.
• A brief description of your request (e.g., “delete my newsletter subscription and contact form submissions from March 2026”).
• For deletion: confirmation that you want personal data we hold erased, subject to legal exceptions (e.g., invoices we must retain).

We will respond within 30 days (or sooner where required by law). We may verify your identity before processing deletion or access requests.

6.2 SEO Site Signals accounts

For subscription products, you may also update or delete certain data in your account settings where available, or email [email protected] with the subject Account data request.

6.3 Optional: advertising and social account controls

If you use Facebook or Instagram, those companies offer their own privacy and ad settings for data they hold. For example: Facebook settings, Instagram settings in the app or on instagram.com, and Meta’s Privacy Policy. Requesting deletion from PositionMySite does not automatically delete data held by third-party advertising or social platforms—you may need to use their tools as well.

6.4 Authorized agents (U.S.)

California and certain other U.S. state residents may designate an authorized agent. We may require proof of agency and verify your identity.

7. Your privacy rights by region

Depending on where you live, you may have rights to access, portability, correction, deletion, restriction, objection, and to withdraw consent. Residents of the EEA/UK may lodge a complaint with a supervisory authority. Canada: PIPEDA and provincial laws. California: CCPA/CPRA rights including opt-out of sale/sharing where applicable—we do not sell personal information for monetary consideration; see sharing above for advertising technologies.

To exercise rights, use the process in Section 6.

8. Cookies and advertising choices

See our Cookies page for types of cookies and how to manage them. You can also use industry opt-outs (e.g., Digital Advertising Alliance) where available. Meta provides ad preferences within Facebook and Instagram account settings.

9. Security and retention

We use technical and organizational measures appropriate to the risk (encryption in transit, access controls, vendor review). No system is perfectly secure.

We retain data only as long as needed for the purposes above, including legal, tax, and accounting obligations. Examples: marketing lists until unsubscribe or deletion request; contracts and invoices for required statutory periods; analytics according to tool settings (e.g., GA4 retention).

10. International transfers

We operate in Canada and the United States. Data may be processed in either country or where our subprocessors operate. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses).

11. Children

Our services are not directed to children under 16. We do not knowingly collect their personal information. Contact us if you believe we have, and we will delete it.

12. Third-party sites

Links to other websites are governed by those sites’ policies. We are not responsible for their practices.

13. Changes to this policy

We may update this Privacy Policy. We will post the new version on this URL, update the effective date, and for material changes may notify you by email or a notice on our site. We retain prior versions internally and can provide them if reasonably requested (e.g., for platform compliance).

14. Contact

This Privacy Policy is provided for transparency and compliance. It is not legal advice. Consult qualified counsel for your specific obligations. This page is published at a stable, publicly accessible URL for verification by partners and regulators where required.