Privacy Policy

1. Who is responsible

Alchemy Imageworks is responsible for the personal information described in this policy. Questions, requests and complaints about privacy can be directed to us using the details in section 16.

2. Information we collect

Information you give us

• Enquiries and quote requests: your name, email address, phone number, company, website, and whatever you tell us about your project when you complete a contact or quote form, email us or call us.
• Downloads and updates: your email address when you request a resource (such as our Pre-Post Checklist) or ask to receive insights and updates from us.
• Client relationships: billing and contact details, project briefs, brand assets, login credentials you choose to share for the purpose of the work, and communications between us.
• Payments: invoicing details. Card and bank details are handled by our payment processors; we do not store full card numbers.

Information collected automatically

• Usage and device data: IP address, browser and device type, operating system, pages viewed, referring page, approximate location (city or region level), date and time of visit, and how you interact with the Site.
• Cookies and similar technologies: described in section 5.
• Server logs: standard technical logs kept for security, troubleshooting and abuse prevention.

Information from other sources

We may receive business contact details from referrals, public professional profiles, or from a client who introduces you to us. We use it only to respond to or continue a relevant business conversation.

3. How we use it

• To respond to enquiries, prepare quotes and proposals, and deliver, support and invoice our services.
• To send the resources or updates you asked for, and, with your consent, occasional insights and news from Alchemy Imageworks.
• To operate, secure, maintain and improve the Site, including understanding which content is useful.
• To detect and prevent spam, fraud, abuse and security incidents.
• To meet legal, tax, accounting and regulatory obligations.

We do not sell your personal information, and we do not use it for purposes you would not reasonably expect.

4. Consent

We collect, use and disclose personal information with your consent, which may be express (for example, ticking a box or submitting a form) or implied where the purpose is obvious and you voluntarily provide the information, such as emailing us to ask about a project. Where the law permits collection without consent, such as to comply with a legal obligation, we rely on that authority.

You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawing consent may limit our ability to provide certain services. See section 11.

5. Cookies and analytics

Cookies are small files stored on your device. We use a limited set to keep the Site working and to understand how it is used.

We use Google Analytics to collect usage statistics. Google may process this data on our behalf and in accordance with its own privacy policy. You can opt out by using your browser’s cookie settings, by enabling “Do Not Track” or global privacy controls where supported, or by installing the Google Analytics opt-out browser add-on. Blocking some cookies may affect how parts of the Site work.

6. Who we share it with

We share personal information only where needed and only with:

• Service providers who help us run the business under confidentiality and data-protection obligations: website hosting and infrastructure, form and email delivery tools, email marketing platforms, analytics, scheduling, accounting and payment processors, and cloud storage.
• Professional advisers such as accountants and lawyers, where necessary.
• Authorities when required by law, court order or to protect rights, safety or property.
• A successor in the event of a merger, sale or reorganization of the business, subject to this policy continuing to apply.

Service providers may use your information only to perform services for us, not for their own marketing.

7. Client project data

When we build, host or manage a website or service for a client, we may handle personal information belonging to that client’s own customers, members and site visitors (for example, form submissions, order details or user accounts). In that situation the client determines why and how the data is used and is responsible for its own privacy notices and consents; we act as a service provider and process the information only on the client’s instructions and to deliver the agreed work. If you are a visitor to a client’s website and have a privacy question about it, please contact that organization directly.

8. Storage and transfers outside Canada

We use hosting and cloud infrastructure with servers in Canada wherever practical. Some providers we use (for example analytics, email or productivity tools) may store or process information in other countries, including the United States, where it may be accessible to courts and authorities under the laws of that jurisdiction. We choose providers that maintain appropriate safeguards. You can contact us for more information about our use of service providers outside Canada.

9. How long we keep it

We keep personal information only as long as needed for the purposes described in this policy or as required by law.

• Enquiries that do not become projects: generally up to 24 months.
• Email subscribers: until you unsubscribe or ask us to delete your details.
• Client and financial records: typically 7 years to meet tax and accounting requirements.
• Analytics and logs: in line with the retention settings of the relevant tool, generally up to 26 months.

When information is no longer needed, we delete or anonymize it.

10. Security

We use reasonable technical and organizational safeguards appropriate to the sensitivity of the information, including encrypted connections (HTTPS), access controls, regular updates and backups. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach creates a real risk of significant harm, we will notify affected individuals and the appropriate privacy commissioner as required by law.

11. Your rights and choices

Subject to applicable law, you may:

• ask what personal information we hold about you and how it has been used and disclosed;
• ask us to correct information that is inaccurate or incomplete;
• withdraw your consent to our collection, use or disclosure, or ask us to delete your information;
• unsubscribe from marketing emails at any time.

To make a request, contact us using the details below. We may need to verify your identity first, and we will respond within the time required by law (generally within 30 days). If you are not satisfied with our response, you may contact the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada.

12. Email and CASL

We send commercial electronic messages only with your express or implied consent as defined by CASL. Every marketing email identifies us, includes our contact details, and contains a working unsubscribe link. You can withdraw consent at any time by using that link or by contacting us, and we will act on your request within 10 business days. Transactional and project-related messages (such as invoices or support replies) are not marketing and may still be sent.

13. Third-party links

The Site may link to or embed content from other websites and social platforms. We do not control their privacy practices and are not responsible for them. Please review their policies before sharing information.

14. Children

The Site and our services are intended for businesses and adults. We do not knowingly collect personal information from children under 13. If you believe a child has given us information, contact us and we will delete it.

15. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top shows when it last changed. Material changes will be highlighted on the Site or communicated directly where appropriate. Continued use of the Site after an update means you accept the revised policy.

16. Contact us

For privacy questions, access or correction requests, or to withdraw consent: