- Home
- Privacy
Privacy policy
What we collect, why, where it goes, and how to get it deleted. We've written this to be read rather than to hide behind.
Last updated 29 July 2026
The short version
We collect what you type into our contact form, and nothing else. We don't run analytics, we don't use tracking cookies, we don't advertise to you, and we never sell or share your information with anyone for their own purposes. If you want your data gone, email us and it's gone.
Who we are
Daena Agency is a two-person digital marketing studio operating from Canada. For the purposes of Canadian privacy law, we are the organisation responsible for the personal information described here.
Questions, requests or complaints: hello@daenaagency.com.
What we collect
When you fill in the contact form
Only what you choose to enter:
- Your name and email address
- Your company or act, and what kind of organisation it is
- Which services you're interested in
- Any key date, budget range or urgency you tell us
- Your message
- Whether you ticked the consent box
Alongside that, our server records the page you submitted from, your browser's user-agent string, and the country your request came from. That's used to understand context and to filter automated spam.
When you simply visit
Our host, Cloudflare, processes your IP address in order to route the request and protect the site from attacks and bots. We don't have access to a log of who visited which page, and we don't build any profile of you. There is no analytics software on this site.
When you email us
Mail sent to hello@ or newbusiness@ is forwarded to our inbox. We keep correspondence for as long as it's useful, then delete it.
Why we collect it
To reply to you, to prepare the free audit if you ask for one, and to keep a record of enquiries so nothing gets lost. Where we later send you anything commercial by email, we do so only with your consent, as Canada's anti-spam legislation requires — and every such message will have a working unsubscribe link.
We do not use your information to train models, to build advertising audiences, or to enrich third-party datasets.
Where it goes
We're a small team using ordinary tools. Your enquiry is stored with these providers:
| Provider | What they hold | Where |
|---|---|---|
| Cloudflare | Serves the site, processes your IP, runs the form endpoint | Global network |
| Enquiries in a private spreadsheet; our email inbox | United States | |
| Brevo | Contact record; sends email from our domain | European Union |
This means your information may be stored or processed outside Canada, and may therefore be accessible to the courts and authorities of those countries. We've told you rather than burying it.
Beyond those providers, we share nothing. No data brokers, no advertising networks, no "partners".
Fonts, and the one third party your browser talks to
The site loads its typefaces from Google Fonts. That means your browser makes a request to Google, which necessarily reveals your IP address to them. Nothing else on the page contacts a third party. We're planning to serve the fonts ourselves so that even this stops — we'd rather not send you anywhere you didn't ask to go.
How long we keep it
- Enquiries that go nowhere — deleted within 24 months.
- Client records — kept for the relationship, then as long as tax and accounting rules require.
- Anything you ask us to delete — deleted, unless we're legally required to keep it.
Your rights
Under Canadian privacy law you can ask us to:
- Tell you what personal information we hold about you
- Correct anything that's wrong
- Delete it
- Withdraw consent for us to contact you, at any time
Email hello@daenaagency.com and we'll act within 30 days. There's no form to fill in and no charge.
If you're unhappy with how we've handled a request, you can complain to the Office of the Privacy Commissioner of Canada.
Security, honestly stated
The site is served only over HTTPS. Our form endpoint validates and rate-limits what it accepts, and the keys it uses are held server-side, never in your browser. Accounts holding your data use strong, unique credentials.
What we won't claim: no setup is perfectly secure, and we rely on the providers above for the security of what they store. If we ever become aware of a breach affecting your information, we'll tell you and the regulator as the law requires.
Children
This is a business-to-business site and isn't directed at children. We don't knowingly collect information from anyone under 18.
Changes
If we change this policy we'll update the date at the top. If a change materially affects how we handle information you've already given us, we'll email you about it rather than quietly editing the page.
Ask us directly.
A real person reads every message. If you want to know what we hold about you, or want it deleted, just say so.