Privacy Policy

Effective date: 16 October 2026. Replaces the policy dated 30 July 2018.

Octopus & Son Social Media Inc. (“Octopus & Son”, “we”, “us”) runs the website octopusandson.com and the client portal at client.octopusandson.com. This page says what personal information we collect, why we collect it, who else sees it, how long we keep it, and how to ask us about it. We follow Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta’s Personal Information Protection Act (PIPA).

What we collect, and why

When you send us a message through the site. Your name, email address and whatever you write. We use it to reply to you and, if you become a client, to run the engagement. The form is processed by Web3Forms, which forwards the message to our inbox and does not keep a copy beyond its delivery logs.

When you book or hold a call with us. Your name, email address and the call itself. We record sales and working calls with Fireflies.ai so we can work from what was actually said. You will be told at the start of a call that it is being recorded, and you can ask us not to record it.

When you use the ideal customer profile template. The ten answers you type stay in your browser and are not sent to us or stored anywhere unless you ask us to email you the profile. If you do, we store your first name, your email address, your ten answers, what you consented to (the exact wording you agreed to) and when you gave that consent. We use them to send you your profile and, only if you ticked the separate box, occasional notes on marketing strategy. Your profile is emailed to you through Resend, and a copy of your name, email address and consent comes to our inbox (Google Workspace); both may hold them outside Canada. Every email we send carries a link to unsubscribe, and you can also ask us to delete your profile at any time. We keep them until you unsubscribe or ask us to delete them.

When you visit the site. Our hosting provider, Cloudflare, logs the technical details every website needs to work: your IP address, browser type, the pages you request and when. We also use Google Tag Manager and Google Analytics 4 to understand which pages are read and which lead to an enquiry. Analytics data is aggregated; we do not try to identify individual visitors from it.

When you sign in to the client portal. Clients receive a 6-digit access code. The portal records the code’s use so we can see that you have viewed your progress. It sets one cookie to keep you signed in during a session.

Cookies and similar tools

The site sets no cookies of its own. Google Tag Manager loads Google Analytics, which sets cookies to tell returning visitors from new ones. Our Tag Manager container also carries Google Ads and Meta (Facebook) Pixel tags from earlier advertising; these set cookies that can be used to show you ads elsewhere. You can refuse or clear cookies in your browser settings; the site works without them.

Who else sees your information

We do not sell personal information and we do not share it with anyone for their own marketing. The service providers that handle it on our behalf are:

  • Cloudflare, Inc. (website hosting, content delivery and security), United States and global network
  • Google LLC (Tag Manager, Analytics, Ads, and Workspace for our email), United States
  • Web3Forms (contact form delivery), United States
  • Resend (sending the profile email, our copy of it, and occasional notes), United States
  • Fireflies.ai Corp. (call recording and transcription), United States
  • Meta Platforms, Inc. (Meta Pixel), United States

Each of these may store information outside Canada. By using the site you accept that transfer; we choose providers that publish their own privacy commitments and we give them only what their job needs.

We will disclose personal information if the law requires it, to protect our rights or someone’s safety, or with your consent.

How long we keep it

Enquiry emails and call recordings are kept while there is a live conversation or engagement and for up to two years afterwards, so we can pick up where we left off. Analytics data is kept for 14 months, the Google Analytics default. Client portal records are kept for the length of the engagement and deleted on request after it ends.

Your choices and rights

You can ask us at any time what personal information we hold about you, ask us to correct it, or ask us to delete it. Write to [email protected] or to the address below and we will answer within 30 days. You can opt out of Google Analytics with the browser add-on at tools.google.com/dlpage/gaoptout.

Security

The site and portal are served over HTTPS. Access to the systems that hold your information is limited to the people who need it for the work.

Children

The site is for businesses and the people who run them. We do not knowingly collect information from anyone under 18. If you believe a child has sent us information, tell us and we will delete it.

Articles link to other websites. Their privacy practices are their own; read their policies before you give them anything.

Changes to this policy

When we change this policy we will post the new version here with a new effective date. Material changes will also be noted on the home page for 30 days.

Contact

Octopus & Son Social Media Inc. #300, 1550 5 St SW, Calgary, Alberta, Canada [email protected] 1.888.963.4991