NORTHMATICS / ONTARIO, CANADA
Privacy Policy.
Clear information about our website, the conversations you choose to have with us and your privacy choices.
Initial draft:
DRAFT — owner review required. Privacy accountability, safeguards, retention and provider processing still require review. This policy remains a draft until the remaining checks are resolved and the owner explicitly approves publication.
01 / SCOPE
About this policy
Northmatics — Digital Intelligence & Growth is the brand used for this Ontario-based digital marketing and AI growth business. Northmatics is not yet registered; this policy does not identify an incorporated or registered legal entity. It addresses information associated with visits to northmatics.com and enquiries made by phone or WhatsApp Business.
Canadian privacy requirements, including the Personal Information Protection and Electronic Documents Act (PIPEDA), apply where relevant to the collection, use and disclosure of personal information in commercial activities. The applicable requirements depend on the information and activity involved. This draft is not a statement that Northmatics has obtained a privacy certification or completed a compliance audit.
Background: Office of the Privacy Commissioner of Canada: PIPEDA.
02 / WHAT YOU SHARE
Information visitors voluntarily provide
When you contact Northmatics, you choose what to share. This may include your name, business name, phone number, website, service interests, project details and the contents of your messages or any files you send. Communication services may also make contact or profile information available, depending on their settings.
The current website has no active enquiry form, account registration or online checkout. Please avoid sending passwords, payment-card information or sensitive personal information through an initial enquiry.
03 / WEBSITE DELIVERY
Hosting and technical information
Hosting and network services process technical requests to deliver web pages. Request information can include an IP address, the requested page, date and time, browser or device details and a referring address when supplied by the browser.
The website is hosted on Cloudflare Pages with Cloudflare proxy enabled. Its primary domain is northmatics.com; www.northmatics.com permanently redirects to the root domain using a 301 redirect. Cloudflare request analytics is active.
Cloudflare may process IP addresses, request headers, technical logs and security-related information to deliver the website, provide request analytics and operate security features. Cloudflare Managed Ruleset and Browser Integrity Check are active. Email Address Obfuscation is enabled, although no business email address is published on the website.
Cloudflare request analytics is distinct from Cloudflare Web Analytics, which has not been configured in the account workflow. Production responses, cookies, injected resources and the scope of provider processing still need verification.
The site files use local styles, a local navigation script and inline graphics. The navigation script does not transmit visitor interaction data. Reviewing these files alone cannot establish what a hosting account or network service records.
04 / PURPOSE & CHOICE
How information is used
The purposes of handling information supplied in an enquiry are to respond to your questions, understand your business needs, discuss potential services and follow up on the conversation you requested. Information needed for an agreed client engagement or a legal obligation must be handled for the relevant, identified purpose.
Collection should be limited to what is reasonably needed. Where consent is required, it must be meaningful and appropriate to the sensitivity and circumstances. Visiting this site or opening a contact link is not consent to unrelated marketing or undisclosed tracking.
Any additional use or disclosure must have an appropriate legal basis and, where required, your consent. This draft does not establish an undisclosed information-sharing arrangement.
Guidance: Obtaining meaningful consent.
05 / DIRECT CONTACT
Phone and WhatsApp communications
Phone links open your device's calling service for +1 905-781-5449. The mobile provider carries the call and may process phone numbers, call metadata, network records and other service information under its own terms and settings. Information you share during a call, and contact details or call records made available by a provider, may form part of the business communication.
WhatsApp links take you to WhatsApp with a pre-filled greeting. You can edit the greeting and decide whether to send it. The website does not send a message automatically and does not embed a WhatsApp chat widget.
If you send a message, Northmatics receives its contents and any contact or profile details that WhatsApp makes available under your settings. The business owner personally manages WhatsApp Business enquiries. No other Northmatics team members currently access these conversations.
WhatsApp is a third-party Meta service with its own terms and privacy practices. Owner-only access within Northmatics does not mean that messages or related information are never processed or stored by WhatsApp, Meta or their service providers. Provider handling depends on the services, features, settings and policies involved. You can choose a phone call instead.
The owner does not use call recording or AI transcription tools. This describes the owner's practice; it does not establish what the mobile provider, voicemail or other provider systems record, retain or process. Those provider features remain subject to review.
On the owner's current WhatsApp Business setup on Android, no Google backup account is selected, automatic backups are off and the encrypted-backup setting is off. These are backup settings, separate from ordinary WhatsApp message encryption. They do not mean that ordinary message encryption is disabled or that no device, local or provider copies exist. Linked devices, other copies and provider handling still require review.
Provider information: WhatsApp Privacy Policy and WhatsApp encrypted-backup information.
07 / EXTERNAL SERVICES
Third-party service providers
Cloudflare provides website hosting, proxy delivery, request analytics and enabled security features. WhatsApp, a Meta service, provides the messaging channel you choose to use. The mobile provider carries telephone communications and may maintain service records. These providers have their own terms, privacy practices and technical systems; their exact processing and retention arrangements have not all been verified.
Northmatics remains accountable for personal information under its control, including information entrusted to a provider for processing where applicable. Provider access, purposes and suitable safeguards must be established for the relevant arrangement. No CRM, email-delivery integration or additional enquiry processor is included in the current website code.
Provider information: Cloudflare Privacy Policy. WhatsApp's policy is linked above.
08 / CARE & RETENTION
Information security and retention
Northmatics is responsible for safeguards appropriate to the sensitivity of personal information under its control. No website, communication channel or storage method can be guaranteed completely secure. This policy makes no claim of a security certification.
The Android phone used for WhatsApp Business has a screen lock enabled. Two-factor authentication using time-based one-time passwords (TOTP) is active on the Cloudflare account, and Cloudflare recovery codes have been generated and securely saved. These confirmations apply to that phone and the Cloudflare account; they do not establish that all business systems have two-factor authentication or the same safeguards.
Information should be retained only as long as needed for its identified purpose and applicable legal requirements, then securely disposed of or made anonymous when appropriate. Relevant access requests or legal obligations may affect when a record can be deleted.
The owner generally does not separately save customer details. However, information may remain in WhatsApp conversations, on devices or in provider records. WhatsApp conversations are sometimes retained and sometimes deleted; there is no confirmed fixed retention period.
These practices do not mean that Northmatics never stores, shares or processes personal information. A consistent retention and deletion process still needs to be documented. Deleting a conversation on one device does not establish that every other copy has been deleted. No fixed retention period, immediate-deletion promise or provider deletion schedule is asserted in this draft.
Guidance: Personal information retention and disposal.
09 / PROCESSING LOCATIONS
International data processing
Hosting and communication providers can process information outside Ontario or Canada, depending on their infrastructure, account arrangements and settings. Information processed abroad may be subject to foreign laws and lawful access by authorities in those jurisdictions. This policy does not promise Canadian-only storage.
Where Northmatics transfers personal information to a provider for processing under PIPEDA, it remains accountable and must use contractual or other means to provide comparable protection. This describes a legal responsibility, not a claim that specific contractual safeguards have already been verified. Actual provider arrangements, processing locations and copies held by providers or devices remain subject to review.
Guidance: Processing personal data across borders.
10 / ACCESS & REQUESTS
Your privacy choices and rights
You can contact Northmatics by phone or WhatsApp Business to request access to, correction of or deletion of personal information, or to raise a privacy concern. Requests will be handled subject to applicable law, including any exceptions, identity-verification needs and lawful retention requirements. You may also ask how information has been used or disclosed.
You may withdraw consent to future collection, use or disclosure, subject to legal or contractual restrictions and reasonable notice. Withdrawal may limit the ability to answer an enquiry or provide a requested service. It does not automatically require deletion of records that must lawfully be retained.
Use the contact details below to start a request. For a PIPEDA access request, a written request is required; WhatsApp provides a written contact route, or you can call for help arranging one. Provide enough detail to identify the relevant records, but do not send identity documents in an initial message. A deletion request does not guarantee that every record can be removed immediately or from every provider system.
Where PIPEDA applies, access requests generally require a response within 30 calendar days, subject to legally permitted extensions. Any refusal or extension must be explained as required by law. You may also raise a concern with the Office of the Privacy Commissioner of Canada.
Guidance: Access and correction requests under PIPEDA.
11 / KEEPING THIS POLICY CURRENT
Changes to this policy
This policy should be updated when the website, providers or information-handling practices change. The date and status of the current version will be shown on this page. The initial draft date is October 25, 2026; it is not a statement that this draft has already been approved.
Material changes involving new purposes or disclosures require appropriate notice and any additional consent required by law. Posting a revised policy alone is not a substitute for meaningful consent.
12 / CONTACT NORTHMATICS
Questions about your information?
For privacy questions, access, correction or deletion requests, withdrawal of consent or concerns, contact Northmatics by phone or WhatsApp Business and tell us your enquiry concerns privacy. Requests are handled subject to applicable law. A formal privacy officer or privacy-contact role has not yet been decided; this draft does not represent a formal appointment.
- Brand
- Northmatics — Digital Intelligence & Growth
- Location
- Ontario, Canada
- Website
- northmatics.com
- Phone & WhatsApp Business
- +1 905-781-5449
Google Workspace email is not yet configured. A business email address will be added only after it is confirmed; no email address is published in this draft.