Skip to content
Transparency and user control

Privacy Policy

This Privacy Policy explains how Northway Digital Compass collects, uses, and protects information when you use our website. It also explains how cookie consent works, what advertising and analytics technologies may be used, and what choices you have. If you have questions about this policy, please contact us using the contact details at the end of this page.

Last Updated
January 15, 2026
Effective Date
January 15, 2026
Cookie choices
Stored for 12 months

SECTION 1: Cookie categories (three mandatory tiers)

Cookies are small text files stored on your device. Some cookies are set by our website (first party cookies) and others are set by third parties that provide analytics or advertising services (third party cookies). We use a consent banner that lets you choose which categories of cookies you allow. Essential cookies are always active because they are required for core site functionality and security.

1. Essential cookies

Purpose: core site functionality, security, session management.

  • Examples: session_id, csrf_token, cookie_consent_status
  • Consent required: NO, activated automatically
  • Retention: session duration or up to 12 months for preference storage

Essential cookies help us protect the site from abuse, keep settings stable, and remember the cookie consent choice you have made. If you block these cookies in your browser, some features may not function reliably.

2. Analytics cookies

Purpose: measuring traffic, user behavior, site performance.

  • Tools: Google Analytics 4
  • Examples: _ga, _ga_XXXXXXX, _gid, _gat
  • Consent required: YES, activated only after user accepts
  • Retention: up to 14 months

Analytics cookies help us understand which pages are helpful, how visitors navigate the site, and how we can improve performance. We use aggregated metrics and do not attempt to identify you personally through analytics.

3. Marketing / advertising cookies

Purpose: remarketing, personalized ad delivery, conversion tracking.

  • Consent required: YES, activated only after user accepts
  • Retention: up to 540 days (Google Ads default)

Marketing cookies may be used to measure advertising effectiveness and to show relevant advertisements across platforms. If you do not consent to marketing cookies, you may still see advertisements, but they may be less relevant and not based on your activity on our site.

SECTION 2: Marketing cookies (mandatory sub disclosures)

If you accept marketing and advertising cookies, we and our partners may use tracking technologies to deliver ads, measure conversions, and provide remarketing. The disclosures below describe how this works in plain language.

  • Third party ad serving

    "Third-party vendors, including Google, use cookies to serve ads based on a user's previous visits to this website and other sites on the internet."

  • Advertising partners

    "We may work with advertising partners such as Google and Meta to deliver advertisements tailored to your interests across various websites and platforms."

  • Remarketing

    "We may use remarketing services to advertise to previous visitors of our website. After visiting our site, you may see our ads on other websites, apps, or platforms you visit."

  • YouTube and Display Network

    "Advertisements may appear across Google services including YouTube, Gmail, and the Google Display Network."

  • Tracking technologies

    "We use the following tracking technologies on this website:

    - Cookies (first-party and third-party)
    - Tracking pixels (Google Ads tag / gtag.js, Meta Pixel)
    - Device identifiers (browser fingerprint, IP address)
    - Conversion event tags

  • Advertising measurement

    "We use conversion tracking to understand which advertisements lead to actions on our website such as form submissions, calls, or purchases. This allows us to measure campaign effectiveness and allocate budget appropriately. Conversion data may be shared with Google Ads and Meta."

  • Technologies in use

    "Advertising and analytics technologies active on this site:

    - Google Ads (gtag.js / Google Tag Manager)
    - Google Analytics 4
    - Google Remarketing Tag
    - Meta Pixel (Facebook / Instagram)"

  • Opt out from personalized advertising

    "You may opt out of personalized advertising at any time:

    - Google Ads Settings: https://adssettings.google.com
    - Your Online Choices (EU): https://www.youronlinechoices.eu
    - Network Advertising Initiative: https://optout.networkadvertising.org
    - Digital Advertising Alliance: https://optout.aboutads.info
    Opting out does not remove ads entirely you will continue to see non-personalized advertisements."

  • Cookie preference management

    "Manage cookie preferences" opens the cookie panel where you can accept or reject each category independently. Use the button at the top of this page, or the footer link labeled Manage cookie preferences.

SECTION 4: Data Sharing with Advertising Partners

"We share certain data with advertising partners for campaign delivery and measurement. Recipients and the data categories shared include:

- Google LLC: cookie identifiers, conversion events, anonymized behavioral data, remarketing lists. Governed by Google's Privacy Policy: https://policies.google.com/privacy

- Meta Platforms, Inc.: pixel events, conversion data, custom audiences. Governed by Meta's Data Policy: https://www.facebook.com/privacy/policy

We do not sell personal data. All transfers to Google and Meta operate under Standard Contractual Clauses where applicable. Data is processed for ad targeting and campaign measurement only not resold to unaffiliated third parties.

Google and Meta may use this data across their own platforms in accordance with their respective policies. We encourage users to review those policies directly."

SECTION 5: Lead Forms and Contact Requests

"When you submit a contact form, request a quote, or register interest in our services, we collect the information you provide. This typically includes: full name, email address, phone number, and your message.

Legal basis: consent (GDPR Art. 6.1.a) and, where a service relationship exists, performance of a contract (GDPR Art. 6.1.b).

Retention: form submission data is retained for up to 2 years from the date of submission, unless a longer period is required by applicable law.

You may request deletion of your data at any time by contacting us at the email address in this policy.

A link to this Privacy Policy appears adjacent to every submission button on this site. Submitting a form constitutes acknowledgment of this policy."

In practice, if you send us a message through the Contact page, we use your details to respond and to keep a record of the communication. We do not ask for sensitive personal data in our contact process. If you include sensitive details in a message, you do so voluntarily and at your discretion.

SECTION 6: Google Services and Advertising

"This website uses the following Google services:

- Google Analytics 4: collects anonymized usage data, device info, and behavioral signals. IP anonymization is enabled. Data retention is set to 14 months. Users may opt out via the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout

- Google Ads Conversion Tracking: records when a user completes a defined action (form submission, call, purchase) after clicking one of our ads. This data is used solely for measuring ad campaign performance.

- Google Remarketing: allows us to show ads to previous visitors across Google's network. Remarketing lists are not created from sensitive data categories (health, finance, religion, sexual orientation).

- Google Tag Manager: deploys tracking tags on our behalf. No personal data is collected by GTM itself; it acts as a container for the tags listed above.

Google's advertising products are governed by: https://policies.google.com/technologies/ads"

If you accept analytics or marketing cookies, the related tags may set cookie identifiers or record events such as page views and conversions. If you do not consent, those tags will not be activated from our consent system. You can still use the site normally.

SECTION 7: Meta Advertising Services

"This website uses the Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram. The pixel may record:

- Page views and time on site
- Specific conversion events (form submissions, purchases)
- Custom audience membership for retargeting purposes

We do not use the Meta Pixel to collect sensitive personal data, nor to target users based on health status, financial situation, religion, political views, sexual orientation, or any other special-category attribute prohibited under Meta's advertising policies.

Meta acts as an independent data controller for data collected via its Pixel and processed within its own platform. Refer to Meta's Data Policy: https://www.facebook.com/privacy/policy

To manage your ad preferences on Meta platforms, visit: https://www.facebook.com/adpreferences/"

SECTION 8: Prohibited content self declaration

"This website does not promote, sell, or facilitate access to prohibited product or service categories including but not limited to: weapons, controlled substances, counterfeit goods, gambling services (unlicensed), adult content, or services that make misleading health or financial claims. All advertising conducted through Google Ads and Meta Ads complies with the respective platform policies in full."

SECTION 9: Landing page integrity statement

"The content of this website accurately represents the products and services advertised. No bait-and-switch practices are employed. The experience delivered to users arriving from paid advertisements is identical to the experience for all other visitors. Cloaking, automatic redirects, and content variation by traffic source are not used on this website."

SECTION 10: Children's privacy

"This website is not directed at individuals under the age of 16. We do not knowingly collect personal data from minors. If we discover that data has been collected from a person under 16 without verifiable parental consent, we will delete it promptly. Contact us at the address in this policy if you believe we have received data from a minor."

SECTION 11: International data transfers

"Personal data collected through this website may be transferred to and processed in countries outside the European Economic Area, including the United States, where Google LLC and Meta Platforms, Inc. are based.

These transfers are conducted under Standard Contractual Clauses (SCCs) approved by the European Commission, which provide appropriate safeguards for personal data. A copy of the applicable SCCs can be requested by contacting us directly."

SECTION 12: User rights (GDPR Articles 15 22)

"If you are located in the EEA or UK, you have the following rights:

- Access (Art. 15): request a copy of data we hold about you
- Rectification (Art. 16): correct inaccurate or incomplete data
- Erasure (Art. 17): request deletion ('right to be forgotten')
- Restriction (Art. 18): limit how we process your data
- Portability (Art. 20): receive your data in a structured, machine-readable format
- Objection (Art. 21): object to processing based on legitimate interest
- Withdraw consent (Art. 7.3): revoke consent at any time without penalty

To exercise any right, email us at the contact address provided in this policy. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority:

- EU users: https://edpb.europa.eu
- UK users: https://ico.org.uk"

For users in Canada, you can also contact us directly to request access, correction, or deletion of your personal information. We aim to respond promptly and in line with applicable privacy requirements.

SECTION 13: What data we collect

The data we collect depends on how you interact with the site and which cookie categories you allow. We may collect the following types of information:

  • Full name
  • Email address
  • Phone number
  • IP address
  • Browser type and version
  • Device type and operating system
  • Cookies and tracking identifiers
  • Usage data (pages visited, time on site, click paths)
  • Form submission content
  • Conversion events (form submits, calls, purchases)

We do not intentionally collect special category data such as health information, precise location data, or sensitive financial details. If you choose to include such information in a message to us, you provide it voluntarily.

SECTION 15: Retention periods

We retain information only as long as needed for the purposes described in this policy. Retention varies by category:

  • Contact form submissions: 2 years
  • Analytics data (GA4): 14 months
  • Marketing cookies (Google Ads): up to 540 days
  • Email communications: duration of relationship plus 1 year
  • Server logs: 90 days
  • Cookie consent records: 3 years (audit requirement)

If you request deletion, we will delete or anonymize information where legally permitted. In some cases, we may need to retain limited records to meet legal obligations or to document consent choices for compliance purposes.

SECTION 16: Policy metadata (required on the page)

Last Updated: January 15, 2026
Effective Date: January 15, 2026

If we make material changes to this Privacy Policy, we will notify users via a homepage banner at least 14 days before the changes take effect. Continued use of the site after the effective date means you have read the updated policy. You can also revisit this page at any time to review the current version.

Contact details

Business name: Northway Digital Compass
Address: 200 Bay Street, Suite 3300, Toronto, ON M5J 2J2, Canada
Phone: +1 (416) 203-2300
Email: [email protected]

If you have a privacy question, a data access request, or a request to delete contact form information, email us and include enough detail so we can verify the request and locate relevant records. We may ask for confirmation to protect your information from unauthorized requests.

Quick actions

Contact us

Note: External resources such as opt out pages and partner privacy policies are provided as plain text for reference. Use your browser to navigate to those addresses if desired.