Who We Are and What This Covers
This Privacy Policy is issued by 15581065 CANADA LTD., operating as Hammerhead Marketing ("Hammerhead," "we," "us," or "our"). It covers personal information we collect through https://hammerheadmarketing.agency and related domains we operate, our forms and booking links, our emails, texts, and calls, and our work with clients (together, the "Services").
We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Alberta's Personal Information Protection Act (PIPA), and Canada's Anti-Spam Legislation (CASL). Where US state privacy laws apply to you, we honour the rights they give you.
We never sell your personal information. We never have and never will.
Information We Collect and Why
Contact and business details. When you fill out a form, book a call, or apply to work with us, we collect your name, email address, phone number, company name, website, and role. We use this to respond to you, run the call, and evaluate fit. Our application and intake forms may also ask about your business, such as service area, current ad spend, monthly revenue range, team size, and how you currently get estimates. We use this to prepare for your call and, if you become a client, to plan and run your campaigns.
Billing information. If you become a client, we collect billing contact details and process payments through a third-party payment processor. We do not store full card numbers. We keep transaction records, including the last four digits of the card, for invoicing, account history, and tax purposes.
Calls and correspondence. Sales and client calls may be recorded and transcribed for note-taking, training, and quality. We tell you at the start of a recorded call; ask us if you prefer not to be recorded. We keep emails, texts, and chat messages with you so we have a record of what was agreed.
Client account data. If you become a client, we collect what we need to run your campaigns: access to your ad accounts, analytics, CRM, website, and call data; your logo, photos, and business information; and performance data from your campaigns. Our Client Agreement governs how we handle this.
Website and device data. When you visit our site, we automatically collect your IP address, browser and device type, operating system, pages viewed, time on page, referrer, and approximate location. We use this for security, analytics, and to understand what on the site is working. See Cookies, Analytics, and Advertising Pixels below for how ad platforms use this.
Testimonials and case studies. If you agree to give a testimonial or let us use your results, we collect what you share and use it as described in our Terms and Conditions.
Information We Handle for Our Clients
When we run advertising for a roofing company, homeowners submit their details (name, address, phone, email, roof details, and sometimes photos) through landing pages and forms we build and operate on the client's behalf. That information belongs to the client. We process it as their service provider to deliver estimate requests, send follow-up emails on the client's behalf, and report results.
At the client's direction, we may use third-party data providers to append information to a lead, such as estimated financial capacity, so the client can decide who to follow up with first.
If you are a homeowner who submitted a request through one of these pages, the roofing company you contacted controls your information. Contact them directly, or email us at [email protected] and we will pass your request on.
Email, Text, and Phone Communications
When you give us your contact details, you consent to us contacting you by email, phone, and text about your enquiry and our services, in line with CASL and, for US recipients, the Telephone Consumer Protection Act (TCPA). Message frequency varies. Standard message and data rates may apply.
You can opt out at any time: click unsubscribe in any email, reply STOP to any text, or email [email protected]. Reply HELP to any text for assistance. Opting out of marketing messages does not affect service messages about an active engagement.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are not shared with anyone other than the vendors that help us deliver the messages.
How We Use and Share Information
We use personal information to respond to enquiries, run sales calls, deliver services, bill for them, communicate with you, improve our site and offers, and comply with the law.
We share it only with:
- Service providers that help us run the business: CRM and marketing automation, email and text delivery, scheduling, call recording and transcription, video hosting, payment processing, analytics, cloud storage, and the contractors who work on our team. They may use it only to do that work for us.
- Advertising platforms such as Meta and Google, which receive site interaction data through cookies and pixels to measure our ads and show them to people who visited our site (see Cookies, Analytics, and Advertising Pixels).
- Professional advisers such as lawyers and accountants when needed.
- Authorities when required by law or a court order, or to protect our rights or someone's safety. We notify affected people where the law allows.
- A buyer or successor if we sell or merge the business. We will notify you if your information is affected.
We never sell personal information and never share it with third parties for their own marketing.
Cookies, Analytics, and Advertising Pixels
Our site uses cookies and similar tools, including Google Analytics, Google Ads tags, and the Meta Pixel and Conversions API. These collect device and interaction data to measure how the site performs, attribute conversions to our ads, and build audiences of people who visited our site so we can show them ads on Google, YouTube, Facebook, and Instagram.
You can control cookies in your browser settings. You can opt out of ad personalization through Google's Ads Settings, Meta's ad preferences, and the opt-out tools run by the Digital Advertising Alliance (US) and the Digital Advertising Alliance of Canada. Blocking cookies may affect how parts of the site work.
Where Your Information Is Stored
We are based in Alberta, Canada. Our service providers store data in Canada and the United States, so your information may be transferred to and stored in the US and become subject to US law, including access by US authorities. By using our Services you consent to this. We use providers with reasonable security practices and contractual protections.
How Long We Keep It
We keep personal information as long as we need it for the purposes above, to fulfil our Client Agreements, and to meet legal, tax, and accounting requirements. Lead and prospect records are kept while there is a reasonable prospect of working together and deleted or anonymized after that. Call recordings and transcripts are kept as long as they are useful for the engagement, then deleted. You can ask us to delete your information at any time (see Your Rights and Choices).
Security
We use reasonable technical and organizational safeguards: access controls, two-factor authentication on our systems, encryption in transit, and limiting access to the people who need it. No method of storage or transmission is perfectly secure, and we cannot guarantee absolute security. If a breach creates a real risk of significant harm, we will notify you and the relevant privacy commissioner as the law requires.
Your Rights and Choices
You can ask what personal information we hold about you and how we use it, ask us to correct it, withdraw your consent (subject to legal or contractual limits), ask us to delete it, and opt out of marketing at any time.
To exercise these rights, email [email protected]. We respond within 30 days and may need to verify your identity first. We will not treat you differently for exercising your rights.
If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner of Alberta. US residents may have additional rights under their state's privacy laws, including the right to know, delete, and correct; contact us to exercise them. You can opt out of ad pixels as described in Cookies, Analytics, and Advertising Pixels.
Children and Third-Party Sites
Our Services are for businesses and adults. We do not knowingly collect personal information from anyone under 18. If you believe we have, email us and we will delete it.
Our site links to third-party services such as scheduling, video, and payment tools. Their privacy policies govern what they collect, and we encourage you to read them.
Changes and Relationship to Our Terms
This Privacy Policy is part of our Terms and Conditions. By using our Services you agree to both. Exercising some rights, such as deletion, may limit our ability to serve you or continue an engagement.
We may update this policy from time to time. The Last Updated date at the top will change, and we will flag material changes on the site or by email where we have your address. Continued use after a change means you accept it.
Contact
Questions about this policy, your information, or our text and email communications go to our Privacy Officer: