1. Scope
This Privacy Policy describes how Angarum Media (“Angarum”, “we”, “us”) handles personal information through the website angarummedia.com and through engagements with clients. It is written to comply with:
- Personal Information Protection and Electronic Documents Act (PIPEDA), the federal Canadian privacy law.
- British Columbia Personal Information Protection Act (BC PIPA).
- Canada's Anti-Spam Legislation (CASL) for electronic communications.
Where laws conflict, the law more protective of the individual prevails.
2. What we collect
2.1 Information you give us directly
- Contact form submissions: name, email, phone, business name, website, project description.
- Client engagement information: business details, billing information, brand assets, marketing platform access.
- Email correspondence sent to or received from us.
2.2 Information collected automatically
- Analytics: page views, time on page, referrer, approximate location (city-level), device type, browser via Google Analytics 4 (anonymised IP).
- Server logs: IP address, timestamp, requested URL, user agent — retained for 30 days for security and debugging.
2.3 What we do NOT collect
- Sensitive personal information (financial details, health data, government IDs) unless required for a specific engagement and explicitly consented to.
- Personal information of individuals under the age of 18.
- Information from third-party data brokers.
3. How we use your information
- Respond to inquiries and provide requested information.
- Deliver agreed services under an engagement.
- Send invoices and process payments.
- Improve the website and our services (aggregated analytics only).
- Send transactional emails (project updates, invoices) and, with consent, marketing communications.
- Comply with legal obligations (tax, accounting, regulatory requests).
We do not sell, rent, or trade your personal information to third parties.
4. Third-party services we use
To deliver this website and our services, we rely on the following processors. Each has its own privacy practices:
- Vercel — website hosting (United States). Privacy policy.
- Google Analytics 4 — site analytics with anonymised IP. Privacy policy.
- Google Fonts & Tailwind CDN — web font + CSS delivery.
- HubSpot — CRM & contact form processing (United States). Privacy policy.
- Cloudflare Turnstile — bot & spam protection on forms. Privacy policy.
- Stripe — payment processing for credit card transactions. Privacy policy.
Where data is processed outside Canada (notably the United States), we rely on Standard Contractual Clauses or equivalent safeguards. PIPEDA Section 4.1.3 obligations apply to all transfers.
5. Cookies & tracking
This site uses minimal cookies:
- Essential: session/preference cookies required for the site to function.
- Analytics: Google Analytics 4 (set only with consent in regions requiring it).
No advertising cookies. No remarketing pixels for paid advertising on this website (we run those on client websites, not ours, with their own disclosure).
You can block or delete cookies via your browser settings. Doing so may degrade site functionality.
6. Your rights
Under PIPEDA and BC PIPA you have the right to:
- Access the personal information we hold about you.
- Correct inaccurate or incomplete information.
- Withdraw consent at any time (subject to legal/contractual restrictions).
- Request deletion of your information where we have no continuing lawful basis to retain it.
- Lodge a complaint with the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner of BC.
To exercise these rights, contact the privacy officer (below). We respond within 30 days.
7. Retention
- Contact form submissions: retained for 24 months unless an engagement begins.
- Client engagement records: retained for 7 years after engagement end (Canadian tax / accounting requirement).
- Server logs: 30 days.
- Analytics: 14 months in Google Analytics 4 (default retention).
8. Security
We follow industry-standard practices to protect personal information:
- HTTPS / TLS encryption for all data in transit.
- Encrypted storage for sensitive client data.
- Access controls — only personnel needing access have it.
- Regular security reviews of third-party processors.
No system is perfectly secure. In the unlikely event of a breach affecting your personal information, we will notify you and the Privacy Commissioner without undue delay, consistent with PIPEDA Section 10.1.
9. CASL & commercial electronic messages
We only send commercial electronic messages (CEMs) to recipients who have provided express or implied consent under CASL. Every CEM includes:
- Clear identification of Angarum Media as sender.
- Our mailing address and contact information.
- A working unsubscribe mechanism that processes within 10 business days.
To unsubscribe immediately, email info@angarummedia.com with “Unsubscribe” in the subject line.
10. Privacy Officer & Contact
For privacy questions, access requests, or to file a complaint:
Privacy Officer — Angarum Media
Vancouver, BC, Canada
Email: info@angarummedia.com (subject: Privacy Inquiry)
Phone: (672) 500-4444
If you are not satisfied with our response, you may contact:
This policy may be updated periodically. Material changes will be highlighted at the top of this page. The current version is always at angarummedia.com/privacy-policy/.