Privacy Policy
Briq to Cliq — Privacy Policy
PRIVACY POLICY
Effective Date: October, 2026
Last Updated: October, 2026
1. Introduction and Scope
This Privacy Policy (“Privacy Policy”) governs the collection, processing, disclosure, and protection of personal data by briqtocliq (“we,” “us,” “our”), operating from Brampton, Ontario, Canada. This policy applies to all individuals (“you,” “your”) who interact with our website located at https://briqtocliq.com (the “Site”), communicate with us, engage our digital auditing tools, or procure our technical services, including custom software development, website engineering, artificial intelligence (AI) automation, GoHighLevel (GHL) workflow architectures, CRM/ERP integrations, and digital marketing consulting (collectively, the “Services”).
We are committed to processing personal data in full compliance with applicable privacy and data protection laws globally, including but not limited to:
- Canada: The Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.
- United States: The California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and applicable state privacy frameworks (e.g., Virginia, Colorado, Connecticut, Texas).
- European Union & United Kingdom: The General Data Protection Regulation (Regulation (EU) 2016/679) (“EU GDPR”) and the Data Protection Act 2018 / UK GDPR (“UK GDPR”).
- Australia: The Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
- Other International Jurisdictions: Applicable data privacy statutes governing cross-border digital processing.
2. Entity Status: Data Controller vs. Data Processor
Under international data protection frameworks, our legal classification depends on the context of the data collected:
- briqtocliq as a Data Controller / Business: We act as a Data Controller when we collect and determine the purposes and means of processing personal data relating to visitors of our Site, prospective enterprise clients requesting scoping audits, newsletter subscribers, and business representatives with whom we establish commercial agreements.
- briqtocliq as a Data Processor / Service Provider: When we design, configure, host, or integrate custom software, web platforms, AI workflow automations, CRM pipelines, or GoHighLevel systems on behalf of our enterprise clients, our clients act as the Data Controllers regarding their end-users’ and customers’ data. In such engagements, briqtocliq processes personal data solely as a Data Processor under the written instructions of our client and governed by a bilateral Data Processing Addendum (DPA).
3. Personal Data We Collect
We collect personal data directly from you, automatically through technical monitoring, and via authorized third-party business channels:
A. Data You Provide Directly
- Contact & Identification Data: Full name, corporate email address, business telephone number, and physical mailing address.
- Commercial & Project Specifications: Corporate domain URLs, current technology stack configurations, CRM structures, business operational challenges, and project budgetary ranges submitted via our “Run A Free Audit” portal or consultation forms.
- Billing & Transactional Information: Commercial billing addresses, tax registration identifiers (e.g., Canadian Business Numbers, VAT numbers, foreign Tax IDs), banking wire information, and transaction histories. (Note: We do not store full credit card numbers; payment processing is handled through PCI-DSS-compliant payment gateways).
- Communications: Inquiries, feedback, email correspondence, and communications exchanged via digital messaging tools.
B. Data Collected Automatically (Log Files & Tracking)
When you navigate our Site, our systems collect technical information, including:
- IP address and geographic location data (country, province/state, city);
- Browser software version, device operating system, hardware model, and screen resolution;
- Uniform Resource Locators (URLs) referring you to the Site, navigation clickstreams, time-stamped visit durations, and page interaction heatmaps;
- Cookies, pixel tags, and local storage tokens.
C. Data Processed Within Client Technical Engagements
In the execution of custom engineering, AI workflows, or CRM integration sprints, we may temporarily access customer or lead records within your third-party environments (such as GoHighLevel, HubSpot, Salesforce, PostgreSQL, or AWS databases) strictly for configuration, migration, and testing purposes.
4. Legal Bases for Processing (EU / UK GDPR & Global Compliance)
If you are located within the European Economic Area (EEA), the United Kingdom, or jurisdictions requiring a specified statutory basis, we process your personal data under the following legal bases:
- Contractual Necessity (Art. 6(1)(b) GDPR): Processing required to evaluate project feasibility, deliver agreed software engineering and automation deliverables, generate invoices, and execute client contracts.
- Legitimate Interests (Art. 6(1)(f) GDPR): Processing required to optimize our website, safeguard our network security, prevent fraudulent bot activity, manage B2B commercial relationships, and improve our automation frameworks.
- Consent (Art. 6(1)(a) GDPR / CASL): Explicit consent provided for subscription to technical newsletters, promotional insights, and the placement of non-essential analytical and marketing cookies.
- Legal Obligation (Art. 6(1)(c) GDPR): Compliance with statutory tax reporting (e.g., Canada Revenue Agency records), international anti-fraud controls, and regulatory requirements.
5. Cookies and Tracking Technologies
Our Site utilizes essential, analytical, and functional tracking mechanisms:
- Strictly Necessary Cookies: Essential for page navigation, load balancing, and cyber security protection. These cannot be switched off in our systems.
- Analytical & Performance Cookies: Configured through privacy-respecting analytics tools to evaluate traffic patterns and engagement metrics.
- Marketing & Conversion Tracking: Pixels and tags used to evaluate digital campaign performance across search and social networks.
You can configure your browser to decline non-essential cookies. Furthermore, we recognize and honor automated browser privacy signals, including the Global Privacy Control (GPC).
6. Sharing and Third-Party Subprocessors
We do not sell, rent, or trade personal data to third parties. We disclose data solely to vetted third-party service providers (“Subprocessors”) bound by stringent technical confidentiality agreements:
- Cloud Infrastructure & Hosting: Scalable, encrypted hosting facilities (e.g., Amazon Web Services, Google Cloud Platform, Vercel, Supabase, Cloudflare);
- CRM & Automation Platforms: Third-party API software tools (e.g., GoHighLevel, Make, Zapier) used to orchestrate workflow automation;
- Artificial Intelligence Engine APIs: Secure AI APIs (e.g., OpenAI, Anthropic) utilized to process specialized text, parsing, or workflow logic, under strict terms ensuring prompt inputs are not retained or utilized to train public foundation models;
- Professional & Legal Counsel: Accounting, legal, and auditing professionals to ensure statutory cross-border compliance;
- Statutory Authorities: Law enforcement or governmental bodies solely when compelled by enforceable legal processes or valid court orders.
7. International Data Transfers
Because briqtocliq is headquartered in Ontario, Canada, personal data collected globally will be transferred to, stored, and processed within Canada and secure global cloud regions.
Canada has been recognized by the European Commission and the UK Government as providing an adequate level of data protection under commercial activities governed by PIPEDA. Where data transfers occur to jurisdictions without an adequacy finding (such as the United States), we implement appropriate safeguards, including the execution of the European Commission’s Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum (IDTA), and supplementary technical encryption measures.
8. Data Security and Retention Policies
We employ industry-standard technical and organizational security controls, including TLS/HTTPS encryption in transit, AES-256 encryption at rest, multi-factor authentication, network firewalls, and least-privilege role-based access controls.
We retain personal data only for as long as necessary to fulfill the operational purposes outlined in this policy, satisfy contractual warranties, resolve legal disputes, and comply with Canadian and international tax record retention requirements (typically up to seven years for corporate accounting records).
9. Your Global Data Rights
Depending on your geographic residency, you possess statutory rights regarding your personal data:
- Right of Access & Portability: Request confirmation of whether we process your data, obtain a copy of your personal data, and receive your information in a structured, machine-readable format.
- Right to Rectification: Request correction of inaccurate, incomplete, or outdated personal data.
- Right to Erasure (“Right to be Forgotten”): Request permanent deletion of your data where statutory retention grounds no longer apply.
- Right to Restrict or Object to Processing: Object to processing grounded in legitimate interests or demand the restriction of data processing during a pending inquiry.
- Right to Opt-Out of Direct Marketing: Revoke consent for promotional electronic messages at any time via the one-click unsubscribe mechanism in our emails (in compliance with Canadian CASL and US CAN-SPAM).
- Rights Under US State Laws (CCPA/CPRA): California and other US state residents have the right to opt out of the sale or sharing of personal data, limit the use of sensitive personal information, and be free from discriminatory pricing or service denial for exercising privacy rights.
- Non-Discrimination: We will never penalize, deny services to, or charge disparate fees to any user who exercises their statutory privacy rights.
To exercise any of these rights, contact our Privacy Officer at privacy@briqtocliq.com or info@briqtocliq.com. We verify all identity requests before fulfilling data disclosures and respond within the statutory timelines prescribed by applicable law (typically 30 days).
10. Children’s Privacy
Our Site and Services are strictly directed to commercial enterprises and adult business professionals. We do not knowingly solicit, collect, or process personal data from individuals under the age of 18 (or the applicable age of minority in your jurisdiction). If we discover that personal data of a minor has been collected without verifiable parental consent, we will purge that data immediately.
11. Supervisory Authority and Recourse
If you believe our processing of your personal data infringes applicable data protection statutes, you have the right to lodge a formal complaint with the relevant regulatory supervisory authority:
- Canada: Office of the Privacy Commissioner of Canada (OPC) (or provincial commissioners in Ontario, Quebec, BC, or Alberta).
- United Kingdom: The Information Commissioner’s Office (ICO).
- European Union: The competent national Data Protection Authority (DPA) in your EU Member State of residence.
- United States: The California Privacy Protection Agency (CPPA) or your state Attorney General.
- Australia: The Office of the Australian Information Commissioner (OAIC).
12. Changes to This Privacy Policy
We reserve the right to modify this Privacy Policy at our discretion to reflect evolving regulatory frameworks, service updates, or technology architecture enhancements. Any revisions will be published on this page with an updated “Last Updated” timestamp. Material changes will be accompanied by prominent notification on our Site.
13. Contact Information & Privacy Officer
For inquiries regarding our data handling practices, cross-border transfers, or this Privacy Policy, contact:
Corporate Privacy Officer
briqtocliq
Brampton, Ontario, Canada
Email: privacy@briqtocliq.com / info@briqtocliq.com
Telephone: +1 (437) 443-1525
Website: https://briqtocliq.com
Aug 1, 2026 ·
We collect only the information we need to plan and deliver your project, we never sell it, and you can ask to see, correct or delete it at any time.
1. About this policy
- Who we are: Briq to Cliq (“we”, “us”) is operated by BriqtoCliq, based in Ontario, Canada. Contact: info@briqtocliq.com, (437) 443-1525.
- What it covers: This policy explains how we collect, use, store and protect personal information through our website (briqtocliq.com), our client brief form (clientbrief.briqtocliq.com), email and phone contact, and the services we provide.
- The law we follow: We handle personal information in line with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.
- Consent: By using our website, sending us a brief or working with us, you consent to the collection and use of your information as described here.
2. Information we collect
Where it comes from | What we collect |
Client brief form | Business name, type and address; your name, email and phone; working hours; services you want; marketing details (locations, budget, offers, competitors); app ideas; account IDs and access status; tracking preferences; add-on and plan choices; your notes |
Files you upload | Logos, photos, videos, before-and-after images, testimonials and any other files you choose to send |
Agreement and signature | Your typed full name, the date, and an image of the signature you draw on screen |
Website visits | Pages viewed, device and browser type, approximate location and how you found us, collected through analytics tools |
Emails, calls and meetings | What you tell us when you contact us, and our replies |
Billing | Invoice details and payment records. Card and bank details are handled by our payment provider, not stored by us |
What we never ask for: passwords to your accounts. You give us access by adding info@briqtocliq.com as a user or partner instead.
3. How we use your information
We use your information only for the purposes below, and we ask for your consent before using it for anything new.
- To prepare proposals, quotes and pitch decks for your business.
- To deliver the services you choose: building websites and apps, running campaigns, setting up tracking, CRM and AI tools.
- To record that you agreed to our terms and conditions, and when.
- To contact you about your project, invoices and support requests.
- To improve our website and services, using combined statistics that don’t identify you.
- To meet our legal, tax and accounting obligations.
4. Service providers and where your data is stored
We use trusted providers to run our business. They may store data outside Canada, including in the United States, where it can be subject to local laws.
Provider | What they do for us |
Google (Drive, Gmail, Apps Script) | Receives your brief, stores your files, signature and brief PDF in a private folder, and emails us a copy |
Hostinger | Hosts our website and the client brief page |
Google Analytics | Measures website visits |
GoHighLevel or other CRM | Stores leads and contacts when we manage a CRM for you |
Google Ads and Meta | Run advertising campaigns in your accounts |
AI tool providers | Power AI chatbots and call bots we set up for you |
[Payment provider] | Processes invoices and payments |
We only share what each provider needs, and we choose providers that protect personal information.
5. Cookies, analytics and your device
- Cookies: Our website uses cookies to work properly and, with analytics tools such as Google Analytics, to understand how visitors use it. You can block or delete cookies in your browser settings; parts of the site may not work as well.
- Brief saved on your device: Our client brief form saves your answers in your own browser (local storage) as you type, so you can finish later. This stays on your device and is cleared after you send the brief. Uploaded files and your signature are not saved this way.
- Advertising pixels: If we run ads for you, we may add tracking tags (such as the Google tag or Meta Pixel) to your website with your approval.
6. Data we handle on behalf of our clients
When we run websites, forms, ads, CRMs or AI tools for a client, we process their customers’ information only on that client’s instructions.
- Leads and contacts: Names, phone numbers, emails and messages collected through client websites, forms and ads are the client’s data. We use them only to deliver the client’s services.
- AI call bots and chatbots: These may record or transcribe calls and chats. The client is responsible for telling callers and visitors this and getting any consent the law requires.
- Health clinics: We do not ask for, and clinics must not send us, patient health records. Patient photos and testimonials are used only with the patient’s written consent. Clinics remain responsible for their duties under Ontario’s PHIPA and other health privacy laws.
- Client privacy policies: Each client is responsible for having its own privacy policy that explains how it collects and uses its customers’ information.
7. Sharing, retention and security
- We never sell your data. We share it only with the service providers above, with team members and contractors who work on your project, or when the law requires it.
- How long we keep it: We keep your brief, files and signed agreement while you are a client and for [2] years after our last project together. Invoices and payment records are kept for 6 years, as Canadian tax rules require. After that, we delete or anonymize them.
- Deleting sooner: You can ask us to delete your brief and files earlier. We will do so unless we need to keep something for legal or tax reasons.
- How we protect it: Our pages use HTTPS encryption. Your brief and files are stored in a private Google Drive folder that only our team can open. We use account permissions instead of shared passwords, and limit access to the people who need it.
- If something goes wrong: If a breach creates a real risk of significant harm, we will notify you and the Office of the Privacy Commissioner of Canada as PIPEDA requires.
8. Your rights
You can make any of these requests by emailing info@briqtocliq.com, and we will reply within 30 days.
- See your information: Ask what personal information we hold about you and how we use it.
- Correct it: Ask us to fix anything that is wrong or out of date.
- Withdraw consent or delete: Ask us to stop using or to delete your information. If this affects a project we are delivering, we will explain what that means first.
- Complain: If you’re not happy with how we handled your request, tell us first. You can also contact the Office of the Privacy Commissioner of Canada.
9. Marketing messages
We send marketing emails or texts only with your consent, as Canada’s Anti-Spam Legislation (CASL) requires. Every marketing message includes a way to unsubscribe, and we act on it within 10 business days. Messages about your project, invoices or support are not marketing and continue while we work together.
10. Children, changes and contact
- Children: Our services are for businesses. We do not knowingly collect personal information from anyone under 18.
- Changes to this policy: We may update this policy and will post the new version at briqtocliq.com/privacy-policy with its updated date. Big changes will be shared with current clients by email.
- Contact: Briq to Cliq, Ontario, Canada · info@briqtocliq.com · (437) 443-1525.
Stay Connected
Get practical insights on websites, software, AI, automation and building smarter digital businesses.
Copyright by BRIQTOCLIQ. All rights reserved.
Copyright by BRIQTOCLIQ. All rights reserved.