Effective date: July 30, 2026
Last updated: July 31, 2026
Trafexo collects what you send through our forms (like your name, email, and business details), plus analytics and site-behaviour tools. If you call us, an AI assistant answers, the call is recorded and transcribed, and we tell you that at the start of the call. All of it is used to reply to you and prepare your growth plan or review. Trafexo doesn't sell your data, and you can ask to see or delete what's held at any time. The full policy is below.
Trafexo Inc. ("Trafexo," "we," "us," or "our") is a performance marketing consultancy based in Toronto, Ontario. We provide paid advertising, website and ecommerce build services, and marketing consulting to clients in Canada, the United States, and internationally.
This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit https://trafexo.com, submit a form, book a meeting, request a growth plan or Decision Review, communicate with us, or otherwise interact with our services.
Because Trafexo is based in Ontario, Canada, our primary privacy law framework is Canada's Personal Information Protection and Electronic Documents Act ("PIPEDA"). Depending on where you are located, additional rights may apply, including under Canada's Anti-Spam Legislation ("CASL"), the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA"), and the GDPR or UK GDPR. PIPEDA gives individuals access and correction rights, and individuals may complain to the Office of the Privacy Commissioner of Canada if they are not satisfied with how an organization handles their personal information.
We collect only the personal information reasonably needed for the purposes described in this Privacy Policy.
When you submit a contact form, booking form, growth-plan intake, Decision Review intake, or similar form, we may collect:
When you visit our website, certain information may be collected automatically, including:
When you call our business phone number, we collect your phone number, a recording and transcript of the call, an automatically generated summary, and any details you provide such as your name, business name, callback number, or the reason for your call. The Inbound Calls section below explains this in full.
We use personal information for the following purposes:
We do not use your personal information for purposes that are materially different from those described in this Privacy Policy unless we provide additional notice or obtain consent where required.
We may use internal, white-label agency management, CRM, workflow, and AI-assisted operations tools to help us organize inquiries, manage client records, support project workflows, prepare internal notes, summarize business context, and deliver our services. We use these tools for internal business operations and service delivery. We do not use them to make solely automated decisions about you that produce legal or similarly significant effects.
Where we use AI-enabled service providers, including advertising or agency-management tools, we use them to support the services we provide to clients, such as campaign analysis, reporting, workflow management, and operational support. We do not knowingly submit personal information to these tools for the purpose of training public AI models. Where available, we rely on provider terms, privacy commitments, settings, and data-processing agreements that limit use of client data to providing and improving the contracted service.
We use cookies and similar technologies to operate our website, understand website activity, improve performance, protect forms from spam and abuse, and understand how visitors arrive at our site.
We use Google Analytics 4 to collect usage and device data, including cookies, browser and device information, page views, and related website activity. We also use Google Tag Manager to manage website tags. In the future, Google Tag Manager may be used to support pixels or conversion API data collection from advertising networks such as Meta, but we do not currently sell personal information or share personal information for cross-context behavioural advertising.
We use Microsoft Clarity, a product from Microsoft, to understand how visitors interact with our website through session replay and heatmaps, including which pages they view and where they click and scroll. Clarity is configured to mask sensitive content by default, so form field entries such as names, email addresses, and message contents are not captured in session recordings.
We use Cloudflare Turnstile to help determine whether form submissions and interactions are made by real users rather than bots or automated systems.
On our forms, Turnstile runs as a visible check that you complete before you submit. On our growth plan form, a second Turnstile check also runs in the background using Turnstile's invisible mode, which means it completes without showing a widget and without asking you to do anything, so that we can save your progress as you move between steps. Cloudflare describes the client-side signals Turnstile processes, and how it uses them, in its Turnstile Privacy Addendum.
We also collect UTM campaign parameters from inbound links so we can understand the source of traffic and measure campaign performance.
You can control cookies through your browser settings. Most browsers allow you to block cookies, delete existing cookies, or receive a warning before cookies are stored. Blocking or deleting cookies may affect how parts of the website function.
You can also opt out of Google Analytics by using Google's Google Analytics Opt-out Browser Add-on, which Google describes as a tool that prevents Google Analytics JavaScript from sharing visit activity with Google Analytics.
For visitors in Canada, where the information is not sensitive and applicable law permits it, we may rely on implied consent for certain analytics, security, and website functionality cookies after giving notice through this Privacy Policy and providing practical opt-out choices. The Office of the Privacy Commissioner of Canada has recognized that the appropriate form of consent can vary based on sensitivity and context, with express consent generally used for sensitive information and implied consent potentially available for less-sensitive information.
For visitors in the EU or UK, non-essential analytics and advertising cookies may require prior express consent under applicable local rules. UK regulator guidance states that valid consent for cookies must involve a clear positive action and that consent cannot be shown merely by placing cookie information in a hard-to-find or rarely read privacy policy.
If we implement advertising pixels, conversion API tools, or other non-essential tracking technologies in a way that requires express consent or opt-out rights under applicable law, we will update this Privacy Policy and implement the required consent or opt-out mechanism before using those technologies in that way.
By providing your mobile number to Trafexo Inc. (for example, by checking the SMS consent box or submitting your number through our booking or contact forms), you consent to receive text messages from us related to scheduling and meeting reminders, service and account updates, and customer support. These are transactional and service messages; we do not send marketing or promotional text messages unless you have separately opted in to marketing communications.
For more information, see our Terms of Service and the rest of this Privacy Policy.
When you call our business phone number, your call is answered by an AI voice assistant provided through Quo (formerly OpenPhone), our telephony provider. The assistant can answer questions about our services and take a message. It does not make decisions about you and it does not have access to your records with us.
Calls to our business number are recorded. We tell you this at the start of every call, before any conversation takes place. If you do not want the call recorded, you can hang up, or contact us by email at contact@trafexo.com or through the forms on our website instead. Recording laws vary by jurisdiction, and some require the consent of all parties. The notice at the start of the call is how we obtain that consent.
Depending on what you tell the assistant, we may collect:
We use call information to respond to your inquiry, prepare for a follow-up conversation, maintain a record of our communications with you, and improve how we handle inbound inquiries. We do not use recordings or transcripts to train public AI models.
Call recordings are copied from our telephony provider into private storage that we control, and are not publicly accessible. Transcripts, summaries, and the details above are stored in our own database alongside our other records. Access requires authenticated administrator sign-in.
If the phone number or email address you give on a call matches information you have previously given us through a form, we link the two records so we can see our full history with you in one place. We match only on an exact phone number or an exact email address. We do not attempt to match on names or partial information.
See the Data Retention section below.
You can ask us to delete the information we hold about you, including call recordings, transcripts, and summaries. See the Privacy Rights section below for how, and for the limitations we want to be straightforward about.
We send marketing emails only where you have opted in, where we have another valid form of consent, or where applicable law otherwise permits us to contact you.
For Canadian recipients, we aim to comply with Canada's Anti-Spam Legislation. CASL requires senders of commercial electronic messages to obtain consent, provide sender identification information, and include an unsubscribe mechanism.
When we send marketing emails, we identify Trafexo Inc. as the sender and provide a way to unsubscribe. You can unsubscribe at any time by using the unsubscribe link in the email or by contacting us. We will process unsubscribe requests as required by law.
Unsubscribing from marketing emails does not stop us from sending non-marketing communications, such as service messages, booking confirmations, meeting reminders, support replies, or legally required notices.
We do not sell personal information.
We do not share personal information except as described in this Privacy Policy, with service providers that help us operate our website and services, as required by law, or in connection with a business transfer.
We use trusted service providers to operate our website, manage forms and records, send communications, protect against abuse, deliver SMS messages, support internal workflows, and understand website activity.
These service providers include:
These providers may process personal information only as needed to provide services to us, operate and secure our website and systems, send communications, provide analytics, support internal operations, or support the other purposes described in this Privacy Policy.
Our telephony provider retains its own copy of call recordings and transcripts under its retention practices, independently of the copy we hold.
We remain responsible for personal information that is transferred to service providers for processing. We use contractual, technical, and organizational measures designed to provide a comparable level of protection while personal information is processed by service providers.
We may disclose personal information if we believe disclosure is required or permitted by law, regulation, legal process, court order, governmental request, or to protect the rights, property, safety, or security of Trafexo, our clients, users, service providers, or others.
If Trafexo is involved in a merger, acquisition, financing, reorganization, sale of assets, due diligence process, or similar business transaction, personal information may be disclosed or transferred as part of that transaction, subject to appropriate confidentiality protections and applicable law.
We retain personal information for as long as reasonably needed for the purposes described in this Privacy Policy, including to respond to inquiries, manage client relationships, provide services, maintain business records, comply with legal and tax obligations, resolve disputes, enforce agreements, and protect our rights.
For information collected from phone calls, we apply the following schedule:
Form submissions and the contact records built from them are business records and are kept for as long as the relationship or a legitimate business need continues. You can ask us to delete them at any time.
When personal information is no longer needed, we delete, anonymize, or securely retain it in accordance with our legal obligations and reasonable business practices.
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, and loss.
These safeguards include encryption in transit, access controls, service-provider security measures, and Cloudflare Turnstile for bot and spam protection.
No method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security, but we take reasonable steps to protect personal information in light of the nature of the information and the risks involved.
Trafexo is based in Ontario, Canada, and serves clients in Canada, the United States, and internationally.
Your personal information may be stored or processed in Canada, the United States, or other countries where we or our service providers operate. These countries may have privacy laws that differ from those in your province, state, or country.
When personal information is transferred internationally, we take reasonable steps designed to ensure that it remains protected in accordance with this Privacy Policy and applicable law. This may include using service providers with contractual, technical, and organizational safeguards appropriate to the nature of the information being processed.
Our service providers, including hosting, analytics, communications, SMS, database, CRM, workflow, and AI-assisted operations providers, may process personal information in Canada, the United States, or other countries where they or their subprocessors operate.
Depending on where you live, you may have rights regarding your personal information. We will respond to privacy requests in accordance with applicable law.
Under PIPEDA, you may request access to personal information we hold about you and request correction of inaccurate or incomplete information. You may also withdraw consent to our collection, use, or disclosure of your personal information, subject to legal or contractual restrictions and reasonable notice.
If you withdraw consent, we may not be able to provide certain services, respond to certain requests, or send certain communications.
You may also contact us with questions or complaints about our privacy practices. If we cannot resolve your concern, you have the right to complain to the Office of the Privacy Commissioner of Canada.
If you are a California resident and the CCPA/CPRA applies to your personal information, you may have the following rights:
California's privacy regulator describes the right to opt out as including both "sale" and "sharing," with "sharing" referring to cross-context behavioural advertising.
Trafexo does not sell personal information. Trafexo also does not share personal information for cross-context behavioural advertising. If our practices change, we will update this Privacy Policy and provide any required notices and opt-out mechanisms.
If you are located in the European Economic Area, the United Kingdom, or another jurisdiction where the GDPR or UK GDPR applies, you may have additional rights regarding your personal data.
Where applicable, our legal bases for processing personal data may include:
Depending on the circumstances, you may have the right to request access, correction, deletion, restriction, portability, or objection to processing. You may also withdraw consent where processing is based on consent.
You also have the right to complain to a data protection supervisory authority in your country or region. The GDPR is the EU's data protection regulation and provides privacy rights to individuals, including rights relating to access, correction, deletion, objection, and other controls over personal data.
Where we use AI-assisted internal operations tools, we use them to support internal administration, workflow management, client relationship management, and service delivery. We do not use these tools to make solely automated decisions about individuals that produce legal or similarly significant effects. If that changes, we will update this Privacy Policy and provide any additional notices, rights, or consent mechanisms required by applicable law.
You can ask us to delete the personal information we hold about you by emailing contact@trafexo.com. When we action a deletion request, we remove your contact record, your form submissions, your booked calls, your call records, and the call recordings and transcripts held in our own storage.
Three limitations we want to be clear about:
Our website and services are not directed to children under 16.
We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will take reasonable steps to delete it.
Our website may contain links to third-party websites, platforms, or services. We are not responsible for the privacy practices, content, or security of those third parties.
When you visit a third-party website or service, that third party's privacy policy and terms apply.
We may update this Privacy Policy from time to time to reflect changes to our practices, technologies, legal obligations, or services.
When we make changes, we will update the "Last updated" date at the top of this Privacy Policy. If we make material changes, we will provide notice as required by law, which may include posting a notice on our website or contacting you directly where appropriate.
Your continued use of our website or services after the updated Privacy Policy takes effect means that you acknowledge the updated Policy, subject to any consent requirements under applicable law.
If you have questions, requests, or complaints about this Privacy Policy or our handling of personal information, contact us at:
Trafexo Inc.
401 Bay Street, Suite 1600
Toronto, ON M5H 2Y4
Canada
Privacy contact: contact@trafexo.com