Privacy Policy

Effective Date: May 25, 2026

1. Introduction and Company Information

This Privacy Policy explains how NorthPeak Content Studio collects, uses, discloses, stores, and protects personal information in the course of its content-marketing business activities. We are committed to handling personal information in a manner that is lawful, transparent, and consistent with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, relevant provincial privacy legislation.

NorthPeak Content Studio is the operator and data controller responsible for the processing of personal information described in this Privacy Policy.

Business Name: NorthPeak Content Studio
Address: NorthPeak Content Studio, 1200 Bay Street, Suite 450, Toronto, ON M5R 2A5, Canada
Email: [email protected]
Phone: +1 (416) 782-5943

This Privacy Policy applies to personal information collected through our website, email communications, lead-generation forms, client onboarding, project management activities, marketing campaigns, analytics tools, and any other interactions with NorthPeak Content Studio in connection with our services.

2. Data Collection and Processing

NorthPeak Content Studio may collect and process the following categories of personal information, depending on your relationship with us and the services requested:

• Identification and contact information: name, email address, phone number, company name, job title, mailing address, and other contact details.
• Communication information: messages, inquiries, feedback, meeting notes, and correspondence sent to us.
• Client and project information: content briefs, brand guidelines, campaign requirements, business objectives, and related materials provided by clients.
• Website and technical information: IP address, browser type, device identifiers, operating system, pages visited, referral source, timestamps, and usage data collected through cookies or similar technologies.
• Marketing and engagement information: newsletter preferences, event registrations, lead magnet downloads, and responses to promotional communications.
• Billing and administrative information: invoicing details, payment status, and transaction records, where applicable.

We generally collect personal information directly from you, but we may also receive information from clients, service providers, analytics platforms, advertising partners, public sources, or other third parties where permitted by law.

We process personal information only to the extent reasonably necessary for the purposes described in this Privacy Policy or as otherwise permitted or required by law.

3. Purpose of Data Processing

NorthPeak Content Studio processes personal information for the following purposes:

• to respond to inquiries and communicate with prospective and current clients;
• to provide content-marketing services, including strategy, copywriting, editing, campaign management, and related deliverables;
• to manage client relationships, contracts, and project administration;
• to send service-related notices, updates, invoices, and administrative communications;
• to personalize and improve our website, services, and user experience;
• to analyze website traffic, campaign performance, and audience engagement;
• to conduct marketing and business development activities, subject to applicable consent and anti-spam requirements;
• to maintain security, prevent fraud, and protect our rights, property, and operations;
• to comply with legal, regulatory, tax, accounting, and record-keeping obligations; and
• to establish, exercise, or defend legal claims.

4. Legal Basis for Processing

Under Canadian privacy law, we process personal information on the basis of valid consent, contractual necessity, legitimate business purposes, and other lawful grounds permitted by applicable legislation. Depending on the context, NorthPeak Content Studio may rely on the following bases:

• Consent: where you have given clear consent for a specific purpose, including certain marketing communications and cookie-based tracking where required.
• Contractual necessity: where processing is necessary to enter into, perform, or manage a contract with you or your organization.
• Legitimate business purposes: where processing is reasonably required to operate and improve our business, provided such interests are not overridden by your privacy rights and interests.
• Legal and regulatory compliance: where processing is required to comply with applicable laws, lawful requests, or court orders.
• Protection of rights and security: where processing is necessary to detect, prevent, or address fraud, security incidents, misuse, or legal claims.

Where consent is the appropriate legal basis, you may withdraw it at any time, subject to legal or contractual restrictions and reasonable notice.

5. Data Sharing and Third Parties

NorthPeak Content Studio does not sell personal information. We may share personal information with third parties only as necessary for the purposes described in this Privacy Policy and in accordance with applicable law.

Third-party recipients may include:

• Service providers: hosting providers, email service providers, analytics providers, customer relationship management tools, cloud storage providers, payment processors, accounting services, and project management platforms.
• Professional advisors: lawyers, accountants, auditors, insurers, and consultants.
• Business partners and subcontractors: freelancers, editors, designers, developers, and other collaborators engaged to support client projects.
• Authorities and legal recipients: regulators, law enforcement, courts, or other parties where disclosure is required or permitted by law.
• Successors in interest: in connection with a merger, acquisition, reorganization, financing, or sale of assets, subject to appropriate confidentiality protections.

We require third parties that process personal information on our behalf to protect it appropriately and to use it only for authorized purposes.

6. Data Transfer to Third Countries

Because NorthPeak Content Studio may use service providers or tools located outside Canada, your personal information may be transferred to, stored in, or accessed from jurisdictions outside your province or outside Canada, including the United States and other countries.

When personal information is transferred internationally, it may be subject to the laws of those jurisdictions and accessible to courts, law enforcement, or regulatory authorities there. We take reasonable steps to ensure that such transfers are protected by contractual, technical, and organizational safeguards appropriate to the sensitivity of the information.

7. Storage Duration

NorthPeak Content Studio retains personal information only for as long as necessary to fulfill the purposes for which it was collected, to satisfy legal, accounting, or reporting requirements, and to resolve disputes or enforce agreements.

Retention periods vary depending on the type of information and the context in which it was collected. In general:

• inquiry and lead information is retained for a reasonable period after the last interaction;
• client project records are retained for the duration of the relationship and for a reasonable period afterward;
• billing and tax records are retained as required by applicable law;
• marketing consent records are retained as long as necessary to demonstrate compliance and manage preferences; and
• website analytics data is retained according to the settings of the relevant tools and our internal retention practices.

When personal information is no longer required, we will securely delete, destroy, or anonymize it in accordance with our retention practices and applicable law.

8. User Rights

Subject to applicable law, you may have the following rights regarding your personal information held by NorthPeak Content Studio:

• Access: to request confirmation of whether we hold personal information about you and to obtain a copy of that information.
• Rectification: to request correction of inaccurate, incomplete, or outdated personal information.
• Erasure: to request deletion of personal information, where permitted by law.
• Restriction: to request that we limit the processing of your personal information in certain circumstances.
• Data portability: to request a copy of certain personal information in a structured, commonly used format, where applicable.
• Objection: to object to certain processing activities, including some forms of direct marketing or processing based on legitimate interests, where applicable.

To exercise any of these rights, please contact us using the details in the Contact Information section below. We may need to verify your identity before responding. We will respond within a reasonable time and in accordance with applicable legal requirements.

9. Withdrawal of Consent

Where our processing is based on your consent, you may withdraw that consent at any time by contacting NorthPeak Content Studio or by using any available unsubscribe or preference-management mechanism in our communications.

Withdrawing consent will not affect the lawfulness of processing carried out before the withdrawal. In some cases, withdrawing consent may limit our ability to provide certain services or communications.

10. Right to Complain

If you have concerns about how NorthPeak Content Studio handles personal information, we encourage you to contact us first so that we can attempt to resolve the issue promptly and fairly.

You may also have the right to file a complaint with the Office of the Privacy Commissioner of Canada or with another applicable provincial privacy regulator, depending on the circumstances and your location.

For more information about your rights or how to make a complaint, please contact the relevant privacy authority in your jurisdiction.

11. Data Security

NorthPeak Content Studio uses reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, alteration, or destruction.

These safeguards may include access controls, password protection, encryption where appropriate, secure storage practices, staff confidentiality obligations, and vendor due diligence. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

If we become aware of a privacy or security incident involving personal information, we will take appropriate steps to investigate, mitigate harm, and notify affected individuals and authorities where required by law.

12. Contact Information

If you have questions, requests, or concerns regarding this Privacy Policy or our handling of personal information, please contact:

NorthPeak Content Studio
1200 Bay Street, Suite 450
Toronto, ON M5R 2A5
Canada
Email: [email protected]
Phone: +1 (416) 782-5943

13. Changes to Privacy Policy

NorthPeak Content Studio may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal obligations, or business operations. When we make material changes, we will take reasonable steps to notify you, such as posting the updated policy on our website and revising the effective date above.

Your continued use of our website or services after an updated Privacy Policy becomes effective indicates your acknowledgment of the revised policy, to the extent permitted by law.