Privacy Policy

This policy explains what personal information Matt Wright, operating as WrightClick Consulting ("WrightClick," "we," "our," or "us"), collects, why we collect it, and what you can do about it. It covers wrightclick.it, our client portal at portal.wrightclick.it, our forms, and our support channels.

We're a small consulting business in Burlington, Ontario. Canada's federal privacy law, the Personal Information Protection and Electronic Documents Act (PIPEDA), applies to how we handle personal information in the course of our business, and we follow it.

1. What we collect

Information you give us. When you request a Free Assessment, open a support ticket, email or call us, use our client portal, or work with us, we may collect:

• your name, job title, and company name
• your email address and phone number
• your mailing or billing address
• details about your business, tools, and the problems you want solved
• files, screenshots, or messages you send us
• billing details needed to invoice you (card payments are handled by our payment processor, and we don't store full card numbers)

Information collected automatically. When you use our website or the portal, chat, and form tools on it, we and our service providers may collect technical data. That can include your IP address, browser, device type and operating system, pages viewed, the page that referred you, your approximate location (such as country, region or city), the date and time of your visit, whether you start our free assessment form, and cookies or similar technologies. We use this to run the site, make the forms and chat work, keep things secure, and fix problems. See section 9 for more.

2. How we use it

We use your information to:

• reply to your questions, Free Assessment requests, and support tickets
• decide whether we're a good fit, and prepare proposals and statements of work
• deliver the services you've hired us for, including setting up and supporting your systems
• send invoices and manage payments
• send service messages about an active request or engagement (for example, "your ticket's been updated")
• run, secure, and improve our website and portal
• meet legal, tax, and accounting obligations

If we want to use your information for a new purpose, we'll ask you first unless the law allows it without consent.

3. Email and other marketing

We may send promotional emails, such as news, tips, or offers. We send them only to people who have given express consent, or whose consent is validly implied under Canada's Anti-Spam Legislation (CASL). For example, that can include someone who has an existing business relationship with us, or who has published a business email address without a notice that they don't want unsolicited messages, where our message relates to their business role.

Every promotional email identifies us as the sender, includes our contact details, and has a working unsubscribe option at no cost to you. We act on unsubscribe requests without delay, and in any case within 10 business days. We keep records of consent and unsubscribe requests so we can honour them.

Service messages about an active request or engagement aren't promotional, so you may still receive them after you unsubscribe from marketing.

4. Text messages (SMS)

We do not send marketing or promotional text messages unless you have clearly agreed to receive them. Any promotional text would identify us and tell you how to opt out.

Some of our forms ask for a phone number. Giving us a phone number on a form does not mean you've agreed to receive texts, and we don't treat it as agreement to marketing texts.

We send service texts (for example, about your request, an appointment, or an active engagement) only if you ask us to text you. If you receive a text from us, you can reply STOP at any time, or tell us by email or phone, and we'll stop texting you. Message and data rates from your mobile carrier may apply.

We don't share mobile phone numbers, or information about your text-message consent, with third parties or affiliates for their marketing or promotional purposes.

If we add a way to sign up for texts on our forms, we'll update this policy first.

5. Who we share it with

We don't sell, trade, or rent your personal information.

We share it only:

• With service providers who help us run the business. They fall into these categories:
  • website hosting
  • payment processing
  • client portal and customer relationship management (CRM) tools, including the tools that host our forms and chat
  • email and communications tools
  • productivity and cloud storage tools
• With the software vendors we set up for you, when your project needs it and you've asked us to (for example, creating an account for you in a business software tool).
• When the law requires it, or to protect our rights, our clients, or the public.
• If the business changes hands, for example in a sale or merger, under a confidentiality agreement.

Our service providers may only use your information to do work for us, and must protect it.

6. Information stored outside Canada

Some of our service providers may process or store information outside Canada, including in the United States. While your information is there, it is subject to the laws of that country, which may differ from Canadian privacy laws, and courts or authorities there may be able to access it. We choose providers with reasonable security and privacy practices, and we rely on contractual terms and technical safeguards to protect your information. We don't promise that your information will be stored only in Canada.

7. How long we keep it

We keep personal information only as long as we need it for the reasons in this policy, or as long as the law requires. For example, tax law generally requires us to keep financial records for at least six years from the end of the last tax year they relate to (Income Tax Act, section 230). When we no longer need information, we delete it or make it anonymous.

8. How we protect it

We use reasonable administrative, technical, and physical safeguards to protect personal information, including multi-factor authentication where supported. No system is perfectly secure, but we work to keep risk low. If a breach creates a real risk of significant harm to you, we'll tell you and report it as the law requires.

9. Cookies and similar technologies

Cookies are small files your browser stores. We use only the cookies and similar technologies needed to run our site, forms, client portal, chat, and payment and security features. Some of these are set by our service providers when their tools load on our pages. If you pay through our client portal or a payment page, our payment processor may load its own checkout and security scripts there.

We don't use advertising pixels or advertising cookies. We use a privacy-focused website analytics tool to count visits and understand which pages are useful. It records things like the page viewed, the page that referred you, your approximate location (such as country, region or city), whether you start our free assessment form, and your device type, browser and operating system. It is designed to report aggregated statistics, it doesn't follow you across other websites, and we don't use it to identify you. Before we add any other kind of analytics or tracking, we'll update this policy and, where the law requires it, ask for your permission.

You can block or delete cookies in your browser settings, but some forms, chat, or portal features may stop working.

10. Your choices and rights

Subject to the law (including PIPEDA), you can:

• ask for access to the personal information we hold about you
• ask us to correct anything that's wrong or out of date
• withdraw consent to something you agreed to, like marketing emails or texts (this won't undo things we've already done, and we may still need some information to finish active work, bill you, or meet legal duties)
• ask questions or complain about how we handle your information

To make a request, email hello@wrightclick.it with the subject line "Privacy request." Please make your request in writing. We may need to confirm your identity before we respond. We'll respond with due diligence and in any case within 30 days of receiving your request. In limited cases the law lets us extend that time by up to 30 more days, and if we do, we'll tell you why and tell you about your right to complain to the Privacy Commissioner of Canada.

To stop marketing emails, use the unsubscribe option in the email. To stop texts, reply STOP. You'll still get essential messages about an active request or engagement.

If you're not happy with our answer, you can contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.

11. Who's responsible

Matt Wright is responsible for privacy at WrightClick. You can reach him at hello@wrightclick.it with the subject line "Privacy request."

12. Children

Our website and services are meant for businesses. They're not meant for children, and we don't knowingly collect personal information from anyone under the age of majority.

13. Links to other sites

Our site links to other websites and tools, such as client portal, productivity, and payment tools run by other companies. Their own privacy policies apply. We're not responsible for how they handle your information.

14. Changes to this policy

We may update this policy from time to time. When we do, we'll change the "Last updated" date at the top. If a change is significant, we'll put a notice on the site or contact you. If we ever want to use your information in a way that needs new consent, we'll ask first.

15. Contact us

Questions about this policy or your personal information:

Matt Wright, operating as WrightClick Consulting
Burlington, Ontario, Canada
Phone: (365) 657-5699
Email: hello@wrightclick.it (subject: "Privacy request")