Privacy policy

NarrativeScope Inc. ("NarrativeScope", "we", "us") respects your privacy under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario privacy requirements. This policy explains how we collect, use, disclose and safeguard personal information when you visit narrativescope.pro or engage our digital marketing agency services.

1. Information we collect

We may collect your name, email address, phone number, company name, job title, enquiry details, IP address, browser type, referral URLs and cookie identifiers when you submit forms, call our Hamilton studio or interact with our website. Marketing analytics tools may collect aggregated usage data.

2. How we use information

We use personal information to respond to scope briefing requests, deliver agency services, send service communications, improve our website, comply with legal obligations and measure campaign performance for our own marketing. We do not sell personal information.

3. Legal basis and consent

We process personal information based on your consent (explicit for contact forms), contractual necessity for agency engagements and legitimate interests in operating our business. You may withdraw consent subject to legal or contractual restrictions.

4. Disclosure to third parties

We may share data with email providers, analytics vendors, advertising platforms and cloud hosting providers who assist our operations. These processors are bound by confidentiality and data protection agreements. We may disclose information when required by law or to protect our rights.

5. Cross-border transfers

Data may be processed in Canada and the United States. We ensure appropriate safeguards for cross-border transfers consistent with PIPEDA accountability principles.

6. Retention

Contact enquiry data is retained for up to twenty-four months unless a longer period is required for active agency contracts or legal compliance. Cookie consent preferences are stored for six months.

7. Security

We implement administrative, technical and physical safeguards including access controls, encrypted transmission and secure hosting on Canadian and North American infrastructure.

8. Your rights

You may request access, correction, deletion or portability of your personal information. Contact [email protected]. You may file a complaint with the Office of the Privacy Commissioner of Canada.

9. Cookies

See our Cookie Policy for details on analytics and marketing cookies and opt-out mechanisms.

10. Children

Our services are directed at business professionals. We do not knowingly collect information from individuals under sixteen.

11. Changes

We may update this policy. Material changes will be posted with an updated date. Continued use constitutes acceptance of revised terms.

12. Contact

Privacy Officer, NarrativeScope Inc., 155 King Street West, Suite 603, Hamilton, ON L8P 1A4, Canada. Email: [email protected]

13. Accountability

NarrativeScope designates a Privacy Officer accountable for compliance with PIPEDA principles. We maintain internal records of processing activities related to contact enquiries, client contracts and website analytics. Staff receive periodic training on data minimisation, secure handling and breach notification procedures.

14. Marketing communications

With your consent, we may send service updates, programme announcements and agency insights relevant to digital marketing. You may unsubscribe from marketing emails at any time without affecting transactional communications related to active engagements.

15. Automated decision-making

We do not use solely automated decision-making that produces legal or similarly significant effects on individuals. Analytics tools may segment website visitors in aggregate for performance measurement only.

16. Data breach notification

In the event of a breach posing real risk of significant harm, we will notify affected individuals and the Privacy Commissioner of Canada as required by law, documenting remediation steps and preventive measures implemented.

17. Third-party links

Our website may link to Google, Meta, analytics vendors or partner resources. Their privacy practices are governed by their own policies. We encourage reviewing third-party terms before submitting data on external platforms.

18. Client campaign data

When delivering agency services, we may process customer lists, advertising account data and analytics on your behalf under contractual data processing terms. Ownership and permitted use are defined in statements of work and mutual confidentiality agreements.

19. Access request procedure

Submit access or correction requests to [email protected] with sufficient identity verification. We respond within thirty days unless an extension is permitted under PIPEDA. Denied requests include written reasons and complaint pathway information.

20. De-identification and aggregation

We may use de-identified or aggregated data for benchmarking, service improvement and industry reporting. Such data cannot reasonably identify individuals or specific clients without additional information.

21. Vendor due diligence

Subprocessors handling personal information undergo security and privacy assessment before engagement. Contracts require confidentiality, breach notification and deletion upon termination of services.

22. International clients

Canadian clients remain subject to PIPEDA. International prospects submitting enquiries from outside Canada acknowledge data may be processed in Canada and the United States under this policy.

23. Sensitive information

We do not intentionally collect sensitive categories such as health or financial account credentials through website forms. Please do not submit such information via contact forms.

24. Policy version control

Archived versions of this policy may be available upon request for compliance audits. The current version date appears at the top of this page.

25. Definitions

"Personal information" means information about an identifiable individual as defined under PIPEDA. "Processing" includes collection, use, disclosure, retention and deletion of personal information in the course of agency operations.

26. Complaint process

Privacy complaints should be directed to [email protected] with detailed description. We investigate and respond within thirty days. Unresolved complaints may be escalated to the Office of the Privacy Commissioner of Canada.

27. Employee and contractor access

Only authorised personnel access personal information on a need-to-know basis. Contractors sign confidentiality agreements and return or destroy data upon engagement completion.

28. Website logs

Server logs may record IP addresses, timestamps and requested URLs for security monitoring. Logs are rotated and deleted per retention schedule unless required for incident investigation.

29. Social media interactions

Engagement on LinkedIn or other platforms is governed by those platforms' privacy policies. Direct messages to our official accounts may be retained for business correspondence.

30. Research and benchmarking

Aggregated anonymised website and campaign data may inform internal benchmarks and service improvement without identifying individuals or specific client accounts in published materials.

31. Regulatory cooperation

We cooperate with lawful requests from privacy regulators and law enforcement when properly authorised, disclosing only information required by valid legal process.

32. Data minimisation practice

Forms request only information necessary to respond to enquiries. Optional fields are clearly marked. We discourage submission of excessive personal detail through contact channels.

33. Alignment with marketing delivery

Privacy practices support our role as a digital marketing agency — not as a data broker, AI training vendor or SaaS platform reselling personal information.

34. Document retention for contracts

Active client contracts may require longer retention of contact and billing information than website enquiry defaults. Retention schedules are specified in statements of work and supersede general enquiry timelines where applicable.

35. Anonymisation techniques

Where feasible we apply aggregation, pseudonymisation or removal of identifiers before using data for internal reporting, training or service development purposes.

36. Privacy by design in campaigns

When configuring marketing automation, lead forms or analytics for clients, we recommend minimum necessary data collection and clear consent language aligned with PIPEDA and platform policies.

37. Historical policy archive

Prior policy versions may be retained internally for compliance audits. The version displayed on this page is the current authoritative version for website visitors and prospects submitting enquiries through narrativescope.pro.

38. Questions and requests

For any privacy matter not covered above, contact our Privacy Officer at [email protected] with sufficient detail to identify your request. We respond within statutory timelines and provide guidance on complaint pathways if concerns remain unresolved after internal review.

NarrativeScope Inc. is committed to transparent data practices supporting our digital marketing agency operations across Canada.

This policy was last updated on 8 July 2026 and applies to all visitors of narrativescope.pro.

Thank you for trusting NarrativeScope with your enquiry.