This Privacy Policy explains how PitchCraft Inc. (“PitchCraft,” “we,” “us,” or “our”) collects, uses, discloses and safeguards personal information in the course of operating our digital marketing agency and the website at pitchcraft.life. We are a Winnipeg-based organisation providing marketing strategy, creative direction and campaign delivery. We are not an artificial intelligence platform vendor, a software-as-a-service product company, an information technology outsourcing provider or a web development studio whose primary business is building websites without a marketing mandate. This Policy is written in Canadian English and is intended to align with the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, substantially similar provincial private-sector privacy legislation.
1. Who we are and how to reach us
PitchCraft Inc. maintains its principal place of business at 330 St. Mary Avenue, Suite 300, Winnipeg, Manitoba R3C 3Z5, Canada. Our Business Number is 847295631MB0001. General correspondence may be directed to [email protected] or +1 (204) 555-6729 during Monday to Friday, 09:00–17:00 Central Time. Privacy-specific requests, including access, correction, withdrawal of consent where applicable, and complaints, should be sent to [email protected] with sufficient detail for us to authenticate and respond. If you prefer postal correspondence, mark the envelope “Privacy” and send it to our Suite 300 address.
We designate an internal privacy contact responsible for overseeing compliance with this Policy, training relevant personnel on handling personal information, and coordinating responses to individual requests and regulatory inquiries. That role may be held by a senior operations or compliance lead rather than a standalone data-protection officer title; the functional accountability remains the same. We will acknowledge privacy requests within a reasonable time and aim to complete responses within thirty (30) days of receiving sufficient information, subject to extensions permitted by law when the request is complex or retrieval is delayed by circumstances beyond our control.
2. Scope of this Policy
This Policy applies to personal information we collect online through pitchcraft.life (including enquiry forms, cookie and similar technologies as described in our Cookie Policy), offline when you visit our Winnipeg offices or attend workshops, and through ordinary business operations such as contracting, invoicing, media account administration and supplier management. It applies to prospective clients, clients, suppliers, job applicants where relevant, and other individuals whose information we handle in providing or administrating our services.
This Policy does not govern websites, platforms or tools operated solely by third parties, including advertising networks, social platforms, analytics vendors or client-owned CRM systems, even when we configure or recommend those tools as part of a marketing programme. Those services have their own privacy notices. When we process personal information on behalf of a client as a service provider in the course of campaign delivery, the client’s instructions and the applicable statement of work or data processing terms typically set additional obligations; this Policy describes PitchCraft’s organisational practices and should be read together with those contractual commitments.
3. The PIPEDA principles we follow
PIPEDA establishes fair information principles that guide our programme. In summary: we are accountable for personal information under our control; we identify purposes before or at the time of collection; we obtain meaningful consent where required; we limit collection to what is needed for identified purposes; we limit use, disclosure and retention to those purposes except as otherwise permitted or required by law; we strive for accuracy appropriate to the use; we implement safeguards proportionate to sensitivity; we are open about our policies; we provide individuals with access to their information subject to legal exceptions; and we offer a challenge process for compliance concerns. The remainder of this Policy operationalises those principles for our agency context.
4. Categories of personal information we collect
Depending on your relationship with us, we may collect identifiers and contact details such as name, job title, employer, business email address, telephone number and mailing address; commercial and engagement information such as briefing notes, programme preferences, subject selections on forms, meeting scheduling data and correspondence content; technical and usage data such as IP address, browser type, device characteristics, referring URLs, pages viewed and approximate location derived from IP where analytics are enabled with consent; cookie preference records stored locally on your device for up to six months; financial and administrative data needed for invoicing, such as billing contacts and payment references (we avoid collecting full payment card numbers on our website); and identity verification information when reasonably required for access requests or sensitive contractual matters.
In the course of delivering marketing services for clients, we may receive or process audience, lead or customer datasets supplied by the client or generated through client-authorised campaigns. Those datasets remain subject to the client’s privacy notices and instructions. PitchCraft does not sell personal information. We do not require sensitive personal information (such as health data or government identification numbers) to respond to ordinary website enquiries and ask that you avoid submitting such information through the public contact form.
5. How we collect information
We collect information directly from you when you submit forms, email us, call us, meet us, or enter into agreements; automatically through necessary site operations and, where you allow, optional analytics or marketing cookies; and from third parties such as mutual business referrals, publicly available professional sources (for example LinkedIn profiles you publish), or advertising platforms when you interact with campaigns we manage under client authorisation. We do not knowingly scrape personal data in a manner contrary to platform terms or applicable law for cold outreach lists unrelated to legitimate business context.
Our contact form includes a consent checkbox that is not pre-selected. Submissions without affirmative consent are rejected. The form also includes a honeypot field designed to detect automated bots; fields intended for bots are not used for marketing profiles of genuine individuals. We timestamp submissions in America/Winnipeg time for operational integrity.
6. Purposes for collection and use
We use personal information to respond to briefing requests and enquiries; evaluate mutual fit for programmes and services; prepare proposals, statements of work and commercial correspondence; deliver contracted marketing services and report on them; administer accounts, invoicing and collections; operate, secure and improve our website and internal operations; comply with legal, regulatory, audit and insurance obligations; and communicate about updates to policies or services where appropriate. We do not use enquiry data as a pretext to enrol you in unrelated advertising cooperatives, nor do we treat Canadian consent casually as a merchandising checkbox.
Where we wish to use personal information for a new purpose not disclosed at collection and not otherwise compatible by law, we will seek fresh consent unless an exception applies (for example, legal requirement). Compatible uses may include securing systems, detecting fraud or abuse, and defending legal claims related to the original interaction.
7. Consent
Meaningful consent is foundational under PIPEDA. For website enquiries, we rely on express consent via the unchecked consent_pipeda control. For client delivery, consent frameworks often sit with the client as the organisation that has the direct relationship with end individuals; PitchCraft’s role may be as a service provider processing information per instructions. Where PitchCraft itself markets its services, we prefer business contact channels and respect unsubscribe or do-not-contact requests promptly.
You may withdraw consent for optional processing subject to legal or contractual restrictions and reasonable notice. Withdrawal may limit our ability to continue certain services. Withdrawal does not require us to erase information we must retain for legal, security or accounting reasons.
8. Disclosure and service providers
We may disclose personal information to employees and contractors who need it to perform their duties under confidentiality expectations; to technology and infrastructure providers that host email, files, collaboration tools or websites on Canadian and North American infrastructure where feasible; to professional advisers such as lawyers, accountants and insurers; to advertising, analytics or marketing platforms when you or our clients authorise such use; and to authorities when required by law, court order or to protect rights, safety and security. When we transfer personal information to a service provider, we remain responsible for ensuring a comparable level of protection through contracts and due diligence reasonably appropriate to sensitivity and context.
Cross-border transfers may occur when a provider operates infrastructure in the United States or other jurisdictions. We assess risks and contractual safeguards but acknowledge that foreign legal regimes can compel disclosure in ways that differ from Canadian expectations. Where residency is a procurement requirement, discuss it during contracting so we can select hosting and tooling configurations accordingly.
9. Retention
We retain personal information only as long as necessary for the purposes identified or as required by law. Enquiry records that do not convert to clients are typically reviewed for deletion or anonymisation within twenty-four (24) months unless a longer period is needed for disputes, compliance or demonstrated legitimate interest. Client records follow retention schedules aligned with tax, contract and professional requirements, often ranging several years after engagement closure. Cookie preference data stored in localStorage is designed for approximately six months as described in our Cookie Policy. Backups may persist for a limited additional period before cyclical overwrite.
10. Safeguards
We implement administrative, technical and physical safeguards proportionate to sensitivity: access controls and least-privilege practices; secure transmission for form submissions over HTTPS; staff awareness of phishing and privacy obligations; vendor review for material processors; and office practices appropriate for a professional services environment. No method of transmission or storage is perfectly secure. We encourage you to use unique passwords for your own systems and to avoid sending highly sensitive information over unencrypted email when alternatives exist.
If we become aware of a breach of security safeguards involving personal information that poses a real risk of significant harm, we will assess, contain and notify as required by PIPEDA’s breach provisions, including notification to the Office of the Privacy Commissioner of Canada and affected individuals when legally mandated.
11. Accuracy and individual access
We take reasonable steps to keep personal information as accurate, complete and up to date as necessary for the purposes for which it is used. You may request access to personal information we hold about you, subject to exemptions under PIPEDA (for example, solicitor-client privilege, information about others, or confidential commercial information). You may also request corrections. Submit requests to [email protected]. We may ask for information to verify identity and locate records. If we refuse a request in whole or in part, we will explain the reasons and recourse options except where prohibited.
12. Automated decision-making and artificial intelligence
PitchCraft does not operate a consumer-facing AI decision platform and does not use automated processing alone to approve or refuse agency engagements in a way that produces legal or similarly significant effects without human involvement. We may use productivity tooling (including assistive AI features in enterprise software) under vendor terms; such use does not convert PitchCraft into an AI product company. Client campaign optimisation decisions remain under human accountability within our agency delivery model.
13. Children’s privacy
Our website and services are directed to business professionals and organisational buyers. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact [email protected] and we will take appropriate steps to delete it.
14. Cookies and similar technologies
Details about cookie categories, consent storage period and preference controls appear in our separate Cookie Policy at /cookies.php. Necessary cookies support site security and basic function; optional analytics and marketing cookies are controlled through our banner and stored preferences.
15. Third-party links
Our site may link to external resources. We are not responsible for the privacy practices of destinations we do not control. Review their policies before providing personal information.
16. Changes to this Policy
We may update this Privacy Policy to reflect operational, legal or technological changes. The “Last updated” date at the top will change when revisions are published. Material changes will be highlighted on this page or communicated by other reasonable means. Continued use of the website after the effective date constitutes awareness of the updated Policy for website visitors; contracted clients will receive notice through agreement mechanisms where required.
17. Complaints and recourse
If you have a concern about our privacy practices, contact [email protected] first so we can investigate and respond. If you remain unsatisfied, you may contact the Office of the Privacy Commissioner of Canada. Information about filing a complaint is available on the Commissioner’s official website. Provincial privacy commissioners may also have jurisdiction depending on the circumstances.
18. Governing language and interpretation
This Policy is provided in Canadian English. Headings are for convenience only. Nothing in this Policy creates warranties about marketing outcomes. Marketing programmes may process personal information in accordance with client instructions; commercial results still depend on market conditions, budgets, creative execution, platform policies and audience response, and PitchCraft does not guarantee sales, follower counts, viral reach or ROI. For corporate identity details, see our Legal / Imprint page. For contract terms governing services, see our Terms of Use and engagement statements of work.
19. Operational examples relevant to an agency
When you request a pitch briefing, we use the details you provide to assess scope across SEO, PPC, performance marketing, brand, CRO or analytics programmes and to reply with clarifying questions. When we run media accounts under client authorisation, platform-side personal data remains primarily under the platforms’ policies and the client’s configuration. When we host a workshop at our Winnipeg centre, visitor logs or badge processes may capture names for security. When a supplier invoices us, we process business contact and banking coordinates solely for payment administration. These examples illustrate ordinary agency life; they do not expand purpose beyond what is necessary and disclosed.
We train client-facing teams not to request personal data that is not needed for the engagement, not to download entire CRM extracts to unmanaged devices, and not to reuse client audiences for PitchCraft’s own prospecting. Side-of-desk experiments with client data are prohibited. Access to shared drives is revoked on role change. These operational rules are part of our accountability commitment under PIPEDA’s organisational requirements.
20. Contact summary
PitchCraft Inc., 330 St. Mary Avenue, Suite 300, Winnipeg, MB R3C 3Z5, Canada · [email protected] · +1 (204) 555-6729 · BN 847295631MB0001 · Last updated 8 July 2026.