Privacy Policy

Privacy Policy for Performance Media Agency

Last updated: October 9, 2025

Who We Are

Performance Media Agency (“we”, “us”, “our”) is a boutique digital marketing agency based in Montréal, Québec, Canada. We help local businesses and professionals in Canada and the United States acquire more customers through digital marketing. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit performancemediaagency.ca, interact with our ads or social media, contact us, or use our services.

How to Contact Us and Our Privacy Officer

Email: privacy@performancemediaagency.ca
Mail:1250 Boulevard Jolibourg, Laval, QC, Canada

In Québec, the person with the highest authority is responsible for personal information protection. We have designated a Privacy Officer who can be reached at the email above.

Scope and Roles

For our website, our own marketing, and our direct client relationships, we act as a controller of personal information.

When we process personal information on behalf of our clients (for example, by managing their leads or campaigns in HighLevel), we act as a service provider/processor and follow our clients’ instructions; their privacy notices apply in addition to this one.

What We Collect

We collect personal information that you provide directly to us, that is generated when you use our website or services, and that we receive from platforms we integrate.

The categories include:

• Identifiers and contact details (name, email, phone, postal address).
• Professional and business information (company, role, industry).
• Communications and lead details (form responses, bookings, messages, call/SMS/email logs and, with consent where required, call recordings).
• Billing and transactional information (for customers).
• Marketing and analytics data (pages viewed, referral URLs, IP address, device and browser data, cookie IDs, advertising identifiers, time stamps).
• Preference and consent data (your choices about cookies, marketing, and privacy requests).
• User‑generated content (testimonials or case study quotes with your permission).
We generally do not intentionally collect sensitive personal information. If we ever request it for a specific purpose, we will ask for explicit consent and apply heightened protections.

How We Use Personal Information

We use personal information to:

• respond to inquiries, provide quotes, onboard and support customers;
• plan, deliver, and optimize advertising and marketing campaigns;
• send marketing emails and text messages with your consent, and honor your unsubscribe choices;
• measure and improve website, funnel, and campaign performance;
• operate, maintain, and secure our services;
• comply with laws, contracts, and enforce our rights.
If we ever make a decision based exclusively on automated processing that produces significant effects (for example, automated lead prioritization that could materially affect you), we will tell you and provide a way to request human review.

Cookies, Pixels, and Similar Technologies

We and our partners use cookies, pixels, tags, SDKs, and similar technologies to run the site (essential cookies), understand usage (analytics), and provide, measure, and improve advertising (advertising/retargeting cookies). You can manage your preferences in our cookie banner, use browser settings to block or delete cookies, and use platform opt‑out tools. See “Your Choices and Opt‑Outs” below.

When We Share Information

We share personal information with:

• Service providers and sub-processors we use to run our business (hosting, CRM/marketing automation, integrations, analytics, advertising platforms, creative/video tools, billing, support). We restrict them from using personal information except to provide services to us and require appropriate security measures.

• Our clients, when we act as their service provider to manage their leads or campaigns.

• Professional advisors, and authorities or third parties when required by law, to protect rights, safety, or our services, or in connection with a business transaction (e.g., merger or sale).

We do not sell personal information for money. For certain US state privacy laws (e.g., California), “sharing” personal information for cross‑context behavioral advertising may occur when we use advertising pixels or similar tools. You may opt out of sale/sharing as described below.

International and Inter‑Provincial Transfers

We are located in Québec, Canada, and many of our service providers store or process data in the United States and other jurisdictions. When personal information is processed outside Québec/Canada, it may be subject to the laws of those places. We remain accountable for personal information we transfer to service providers and take steps to assess and protect it, including conducting privacy impact assessments where required by law.

Your Rights

Depending on where you live, you may have rights to:
• access your personal information and receive a copy;
• correct inaccurate or incomplete information;
• withdraw consent to uses based on consent;
• delete your information, subject to legal exceptions;
• data portability (for certain computerized information you provided to us);
• object to or restrict certain processing, including targeted advertising in some US states;
• opt out of the sale or sharing of personal information (as defined by applicable US state laws).

Québec and Canadian residents can also ask us to cease dissemination, de‑index, or re‑index certain information in circumstances defined by law. You can exercise rights by emailing privacy@performancemediaagency.ca with “Privacy Request” in the subject. We will verify your identity before acting on a request. If we deny your request as permitted by law, you may appeal by replying “Appeal” to our decision email. Québec residents may also contact the Commission d’accès à l’information du Québec; California residents will not be discriminated against for exercising rights. Authorized agents may submit requests where permitted if they provide required proof.

Your Choices and Opt‑Outs

Marketing emails: You can unsubscribe at any time using the link in our emails.

SMS/text messages: You can opt out by replying STOP.  Message and data rates may apply.

Advertising and analytics: Use our cookie banner to decline non‑essential cookies or to manage preferences. You can also adjust ad settings in platforms such as Google, Facebook/Instagram, TikTok, and LinkedIn, and use industry tools (for example, the Digital Advertising Alliance).
Do Not Sell or Share: US visitors can use our “Do Not Sell or Share My Personal Information / Manage Preferences” link in the site footer to opt out of sale/sharing and targeted advertising where applicable. We honor Global Privacy Control (GPC) signals as a valid opt‑out in jurisdictions that recognize it.

Data Retention

We keep personal information only as long as needed for the purposes described above and to meet legal, tax, accounting, or reporting requirements. Unless otherwise required or you ask us to delete it sooner, our default practice is to:
• remove or anonymize marketing leads after 24 months of inactivity;
• retain client account and billing records for at least the period required by tax and corporate laws;
• delete call recordings (if enabled) after 12 months.
When retention ends, we will securely delete or anonymize personal information.

Security

We use technical and organizational measures appropriate to the sensitivity of the information, including encryption in transit, access controls, least‑privilege access, authentication, logging, and vendor due diligence. No method of transmission or storage is fully secure; if we discover a security incident that poses a real risk of significant harm, we will notify affected individuals and regulators as required by law.

Children’s Privacy

Our services are not directed to children. In Québec, we do not collect personal information about individuals under 14 without the consent of a parent or tutor. If you believe a child has provided us personal information, contact us and we will take appropriate steps.

HighLevel and Other Platform‑Specific Transparency

We rely on trusted platforms and tools to deliver our services. When you submit a form, book a call, receive communications, or interact with our funnels and automations, your information may be processed in these platforms in addition to our systems. Examples include:
• HighLevel (also known as Go High Level): CRM, pipelines, forms, calendars, call/SMS/email, funnels, and marketing automation used for our own marketing and for client work. Forms hosted in HighLevel collect information directly into HighLevel. HighLevel processes that information to provide its services to us; our use is also governed by this Privacy Policy.
• Zapier: workflow automation and data transfers between tools (for example, moving form submissions into our CRM or spreadsheets).
• Google Ads, Google Analytics, and Google Tag Manager: advertising, measurement, and tag orchestration. Google Tag Manager primarily deploys tags and maintains limited diagnostics; Google Analytics and Ads may collect usage and advertising identifiers according to your choices.
• Meta (Facebook and Instagram), TikTok, and LinkedIn: advertising, measurement, pixels/tags/SDKs, lead forms, and audience tools provided by these platforms.
• Adcreative.ai, Kong.ai, and VEED.IO: creative generation, content editing/hosting, and production workflows to create and deliver ads and marketing assets.
We require our providers to implement appropriate security and to use personal information only to deliver their services to us. Their privacy policies apply in addition to ours; you can find them on each provider’s website. Where these tools enable interest‑based advertising, you can control those uses via our cookie banner, your platform ad settings, and the opt‑outs described above.

Third‑Party Links and Sites

Our website and communications may contain links to third‑party sites, apps, or services. Their privacy practices are governed by their own policies. We are not responsible for those practices.

Legal Bases and Consent

In Canada, our primary legal basis is consent, which we seek in a meaningful, understandable way tied to the purpose. For non‑essential cookies and marketing communications, we rely on your express consent (e.g., unchecked boxes, clear opt‑in) and maintain records of your choices. In certain cases, we may rely on other lawful bases (for example, to fulfill a contract with you or to comply with legal obligations).

Verification, Authorized Agents, and Appeals

To protect privacy, we verify identity before fulfilling access, deletion, correction, portability, or opt‑out requests. If permitted in your jurisdiction, you may use an authorized agent; we will require evidence of authorization and may still ask you to verify your identity. If we deny a request, you can appeal by replying “Appeal” to our decision email; we will review and respond within the time required by law.

Changes to This Policy

We may update this Privacy Policy to reflect changes to our practices or applicable law. When we post changes, we will update the “Last updated” date above. If changes materially affect your rights, we will provide additional notice or seek consent where required.

How to Make a Complaint

If you have a privacy concern, contact our Privacy Officer at privacy@performancemediaagency.ca. Québec residents may contact the Commission d’accès à l’information du Québec. You may also have rights to complain to other regulators depending on your location.

Notice of Collection for US Residents

For transparency under US state privacy laws, we have collected the following categories of personal information in the past 12 months, as described above:

identifiers; commercial information; internet or network activity; geolocation (approximate, derived from IP); professional or employment‑related information; and inferences from the foregoing. We do not knowingly collect sensitive personal information, and we do not use or disclose sensitive personal information for purposes other than those permitted by applicable law. We do not sell personal information for money; we may “share” personal information for cross‑context behavioral advertising, and you may opt out at any time via our “Do Not Sell or Share My Personal Information / Manage Preferences” link or by sending a Global Privacy Control signal.