Privacy PolicyPrivacy Policy

1. Who we are

Community Owners is a web design agency based in Edmonton, Alberta, Canada. We design, build, and maintain websites for businesses. This Privacy Policy explains what information we collect when you visit co-owners.ca or contact us, and how we use and protect it.

2. Information we collect

We collect the following categories of information:

• Contact information — when you use our contact form, we collect your name, email address, and the contents of your message.
• Account information — if you create an account or log in to any service we provide, we collect your name, email address, and a hashed password.
• Usage and device data — pages visited, clicks, session recordings, browser type, operating system, and IP address, collected automatically.
• B2B visitor information — we use RB2B to identify the company visiting our site by matching your IP address to business records, and to enrich it with publicly available business contact details (company name and business email). This applies to business visitors only, not individual consumers.

3. Cookies and similar technologies

We use cookies and similar technologies for analytics and to remember your preferences. You can control or disable cookies in your browser settings; however, some features of the site may not work without them.

4. How we use your information

• To respond to your inquiries and provide our services.
• To understand how visitors use our website and improve it.
• To identify businesses that may be interested in our services (B2B sales outreach).
• To meet legal and security obligations.

5. Legal basis for processing (GDPR)

If you are in the European Economic Area or the United Kingdom, we process personal data on the following legal bases:

• Consent — where you have given it (for example, for non-essential cookies).
• Legitimate interests — to operate, measure, and improve our website, and to identify business visitors for B2B outreach.
• Contract — where processing is necessary to provide a service you have requested.
• Legal obligation — where we are required to by law.

6. Third-party services

We use the following third-party providers, which may process your data on our behalf. These providers may store data outside your country, including in the United States:

• PostHog — product analytics, session recording, and heatmaps. Privacy policy: https://posthog.com/privacy
• RB2B (The Lead Pipeline) — B2B visitor identification and enrichment. Privacy policy: https://rb2b.com/privacy-policy
• Microsoft Clarity (optional) — heatmaps and session recordings. Privacy policy: https://clarity.microsoft.com/privacy
• Google Cloud Platform — website hosting and infrastructure.
• Our email provider — to deliver contact-form messages.

7. International data transfers

Our website is hosted on Google Cloud (United States), and our analytics providers process data in the United States. Where we transfer personal data outside the EEA or UK, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

8. Data retention

• Contact inquiries — retained as long as needed to respond and maintain business records.
• Analytics data — retained according to our providers' settings (typically up to 12 months).
• Account data — retained while your account is active, and deleted on request.

9. Your rights (GDPR and CCPA)

Depending on where you live, you may have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request that we delete your data (the “right to be forgotten”).
• Restriction — limit how we process your data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on our legitimate interests.
• Withdraw consent — withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, email us at ptang@co-owners.ca. We will respond within the timeframes required by law.

10. Security

We use appropriate technical and organizational measures to protect your information, including secure transmission (HTTPS) and hashed passwords. No method of transmission or storage is completely secure, but we work to keep your data safe.

11. Children's privacy

Our website is not directed at children under 13 (or 16 in the EEA), and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with the date of last update.

13. Contact

For privacy questions or to exercise your rights:

• Email: ptang@co-owners.ca
• Location: Edmonton, Alberta, Canada