BUILDWISE DIGITAL — web + AI automation, Greater Toronto Area (GTA), Canada. Last updated: 28 October 2026.
This policy explains how I handle personal information under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). PIPEDA has no small-business exemption — it applies in full.
BUILDWISE DIGITAL is accountable for the personal information handled here. Questions, access requests, or complaints: [email protected].
| Information | When | Why |
|---|---|---|
| Name, email, message, and (optional) which service you are asking about; your phone number and the call time you pick when you book a call or ask us to call you back | You email me or send an enquiry | To answer you and scope a possible project |
| How you heard about us, and the short code in the link you followed (for example from our Instagram profile) | You send an enquiry through the website form | To learn which of our channels bring enquiries. This code is not stored on your device; it is part of the page address while you browse, so it also appears in our hosting providers' request logs |
| Google Ads measurement: the page address, your IP address and browser details, and cookies Google may set on your device when a page loads, which record whether your visit came from one of our ads | You browse the website's main pages (they load the Google tag) | To count how many visitors who clicked one of our Google ads then sent a message, asked for a callback or booked a call. Only the fact that an enquiry happened is reported; nothing you type in a form is sent to Google |
| AI assistant chat messages | You use the demo assistant | To generate a reply and monitor quality/cost |
| IP address + request counts | Automatically, on each assistant request | Security and abuse-prevention (rate limiting) |
| Social media account access (business account IDs, page IDs, access tokens) | You engage the social media management service and grant access | To publish posts you have approved, and to read your own post metrics for your monthly report |
| Photos and captions you send us | You submit them for posting | To prepare and publish social posts for your business |
| Public comments and reviews on your accounts | Where you ask us to help respond | To draft replies for your approval |
I do not sell personal information and do not use what you send me for advertising. The one link to advertising is the Google Ads measurement above, which counts that an enquiry happened, never what it says. I ask only for what the stated purpose requires.
If you engage the social media management service, you grant access to your business's own social accounts (for example Instagram, Facebook Page, Google Business Profile) so that posts you have approved can be published on your behalf.
Content you supply for posting remains yours. You are responsible for holding the rights to photos you send, and for the accuracy of factual claims about your own business.
I collect and use personal information with your consent. Using the assistant or emailing me is your consent for the purposes above. The Google Ads measurement on the website is described here and in section 4, which says how to turn it off at any time. For any new purpose, I would ask again first. You may withdraw consent at any time (subject to legal limits) by emailing the Privacy Officer.
The AI assistant sends your chat messages to Anthropic PBC (United States) for the AI response, hosted via Vercel Inc. (United States). Your information is therefore processed outside Canada and may be accessible under U.S. law. These vendors are configured to exclude your data from AI model training where that setting is offered.
The website's main pages load the Google tag from Google LLC (United States) to measure our Google Ads. Google receives the page address, your IP address and browser details, and may set cookies on your device when a page loads, which record whether your visit came from one of our ads, under Google's privacy policy. Ad personalisation (remarketing) is switched off on our tag, and so is "enhanced conversions": no name, email, phone number or message is sent to Google. To opt out, block the tag with your browser's tracking protection or a content blocker, or manage Google ads at My Ad Center. The website works the same either way.
For the social media management service, additional processors are involved: Meta Platforms, Inc. (United States) for Instagram and Facebook publishing and metrics, and Google LLC (United States) for Google Business Profile. Captions are generated using Anthropic PBC (United States). Your information is therefore processed outside Canada and may be accessible under U.S. law. Your use of Instagram and Facebook also remains subject to Meta's own privacy policy.
Access is limited to the Privacy Officer. API keys live only in server-side environment variables, never in client code. Connections use HTTPS. The data footprint is deliberately small (short retention, nothing sold).
You may ask what personal information I hold about you, ask me to correct it, or ask me to delete it. Email the Privacy Officer; I respond within a reasonable time (generally 30 days).
If you are not satisfied with my response, you may contact the Office of the Privacy Commissioner of Canada (priv.gc.ca, 1-800-282-1376).
I may update this policy; the "last updated" date shows the current version.