Privacy Policy

New Vision Concept  |  Last updated: June 29, 2026  |  Effective immediately

1. Introduction

New Vision Concept (“NVC”, “we”, “us”, “our”) is committed to protecting the privacy of our clients and website visitors. This Privacy Policy explains how we collect, use, disclose, and protect your personal information in compliance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

By using our services or visiting our website, you consent to the collection and use of your information as described in this policy.

2. Information We Collect

We collect information to provide digital marketing, AI automation, web design, CRM configuration, and related services to our clients. The types of information we collect include:

2.1 Information You Provide Directly

• Contact Information: Name, email address, phone number, business address
• Business Information: Company name, industry, service needs, website URL
• Payment Information: Billing address, payment method details (processed securely through third-party payment processors)
• Account Credentials: Login credentials for third-party platforms (Meta, Google, CRM systems) necessary to deliver services
• Project Content: Branding assets, marketing copy, images, and other materials you provide for service delivery

2.2 Information Collected Automatically

• Website Usage Data: IP address, browser type, device information, pages visited, time spent on pages
• Cookies & Tracking: Session cookies, analytics cookies (Google Analytics), advertising pixels (Meta Pixel) where applicable
• Communication Records: Email correspondence, meeting notes, support tickets

3. How We Use Your Data

We use your personal information for the following purposes:

Purpose	Data Used
Service Delivery	Contact info, business details, project content, platform credentials
Client Communication	Email address, phone number, communication history
Billing & Invoicing	Contact info, payment details, purchase history
Website Analytics	IP address, browser data, usage patterns
Marketing (with consent)	Email address, business information
Legal Compliance	All data as required by applicable laws

4. Legal Basis for Processing

Under PIPEDA, we process your personal information based on:

• Consent: You provide explicit consent when engaging our services or submitting forms on our website
• Contractual Necessity: Processing is necessary to fulfill our service agreement with you
• Legitimate Interests: We have a legitimate business interest in maintaining client relationships and improving our services
• Legal Obligations: We process data to comply with Canadian tax, accounting, and business regulations

5. Data Sharing & Third Parties

We do not sell, rent, or trade your personal information. We share data only in the following circumstances:

5.1 Service Providers

We share data with trusted third-party platforms necessary to deliver our services:

• CRM & Automation: GoHighLevel, Vendasta, ManyChat
• Advertising Platforms: Meta (Facebook/Instagram), Google Ads
• Web Hosting & Development: Hostinger, Vercel, Supabase, Framer
• Forms & Communication: WPForms, email service providers
• Analytics: Google Analytics

Each of these platforms has its own privacy policy and data handling practices. We ensure that data shared with third parties is limited to what is necessary for service delivery.

5.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or to protect our legal rights or the safety of others.

6. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy or as required by law.

Data Type	Retention Period
Client contact & project data	Duration of engagement + 2 years
Financial records (invoices, payments)	7 years (CRA requirement)
Platform credentials	Deleted within 30 days of engagement end
Website analytics data	26 months (Google Analytics default)
Marketing communications data	Until consent is withdrawn

7. Data Security

We implement industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encrypted data transmission (SSL/TLS)
• Secure password management and credential storage
• Regular security audits and updates
• Access controls limiting data access to authorized personnel only
• Secure cloud storage with reputable providers

While we take reasonable precautions, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but will notify you promptly in the event of a data breach affecting your information.

8. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to improve user experience and analyze site performance.

8.1 Types of Cookies We Use

• Essential Cookies: Required for website functionality (session management, security)
• Analytics Cookies: Google Analytics to track site usage and performance
• Advertising Cookies: Meta Pixel for retargeting and ad performance measurement (if applicable)

8.2 Managing Cookies

You can control cookies through your browser settings. Disabling cookies may limit certain website features. To opt out of Google Analytics, visit: Google Analytics Opt-out.

9. Your Rights Under PIPEDA

Under Canadian privacy law, you have the following rights regarding your personal information:

To exercise any of these rights, contact us at florent.vosse@newvisionconcept.com. We will respond within 30 days as required by PIPEDA.

10. International Data Transfers

Some of the third-party platforms we use (e.g., Meta, Google, Vercel, Supabase) may store or process data outside of Canada, including in the United States. When data is transferred internationally, we ensure that appropriate safeguards are in place, such as:

• Contractual agreements requiring compliance with Canadian privacy standards
• Use of platforms certified under recognized data protection frameworks
• Encryption and secure data transfer protocols

By using our services, you consent to these international transfers as necessary for service delivery.

11. Minors’ Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a minor without parental consent, we will delete it promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will notify clients via email and update the “Last updated” date at the top of this page.

Continued use of our services after notice of changes constitutes acceptance of the updated policy.