01. Who we are
Creative Scope is a digital marketing and web design studio based in Toronto, Ontario. We design and build websites, run paid advertising, produce content, and handle SEO for small and mid-sized businesses, mostly across Canada and the U.S.
Our studio address is 45 Lisgar St, Toronto, ON M6J 0B8. The person responsible for privacy questions and data requests is reachable at contact@creativescope.ca. If you'd rather call, the line is (905) 746-9209.
We are the data controller for any personal information you submit through this site or share with us during a project engagement.
02. What we collect
We try to collect as little as possible. There are a few places personal information enters our systems:
Inquiries you send us
When you fill out the contact form or email us directly, we receive the name, email address, phone number (optional), service interest, and project details you choose to share. That's it. We don't ask for anything we don't need to write you back.
Analytics
We use Google Analytics 4 (properties G-SR5XHLF36L and G-CXYZM6FYNS), loaded through Google Tag Manager, with IP anonymisation enabled. GA4 records pages visited, approximate location at the city level, device type, referrer, and aggregate behaviour.
Advertising and conversion measurement
Because we advertise on Google, we use Google Ads conversion tracking and have linked GA4 to our Google Ads account to measure which ads lead to inquiries. When you arrive from one of our ads, Google may set advertising cookies and we may receive a Google Click Identifier (gclid) for that click, which we attach to the inquiry you submit so we know which campaign it came from. Google processes this data to measure ad performance and, where applicable, for remarketing, under its own privacy policy.
Server logs
Our hosting provider (Hostinger) keeps standard Apache access logs — IP address, user agent, requested URL, referrer, timestamp. These are used for security monitoring and debugging, and rotate out after 30 days.
03. How we use it
We use the information you give us for a small set of clearly defined purposes:
- Responding to inquiries and following up on a conversation you started
- Preparing proposals, quotes, and discovery documents for prospective clients
- Delivering services to active clients (web design, SEO, paid ads, content, branding)
- Sending project-related communications — invoices, status updates, deliverables
- Improving the site (which content is read, where people drop off, what's broken)
- Meeting our legal and tax obligations under Canadian law
We do not sell your personal information. We do not add inquiry contacts to a marketing list. We do not run drip email sequences. If you want a follow-up, you'll get one from a human.
04. Legal bases
Under Canadian law (PIPEDA), our processing is grounded in the consent you give when you submit a form, plus the reasonable purpose of running and improving a small business website.
For visitors and clients in the European Union, the GDPR legal bases that apply are: your consent (analytics, contact form), the necessity of performing a contract (active client work), and our legitimate interest in operating a secure, functional website (server logs, security monitoring).
05. Third parties we share data with
We share data only with the small set of vendors that help us run the studio. They each act as a data processor on our instructions:
- Resend — delivers the email notification generated when you submit a form on this site
- Google Analytics 4 — website analytics, linked to our Google Ads account for conversion measurement
- Google Ads — advertising and conversion tracking, including remarketing where applicable
- Google Tag Manager — loads and manages the analytics and advertising tags described above
- Hostinger — web hosting and email infrastructure, based in the EU and Lithuania with global edge
- Google Workspace — our team email, document storage, and calendars
- Notion — internal project management, used for active client documentation
- Slack — internal team communication, occasionally shared channels with active clients
We will also disclose information if we're required to by a court order, lawful subpoena, or other binding legal process — and only the minimum necessary to comply.
06. How long we keep it
Inquiry messages stay in our inbox for up to 24 months from last contact, unless the conversation continues or turns into a project. After that, they're deleted.
For active clients, we retain project files, contracts, and communications for the duration of the engagement plus seven years after the final invoice — this matches Canada Revenue Agency record-keeping requirements.
Google Analytics retention is set to 14 months. Server logs rotate out after 30 days. You can ask us to delete records earlier; see your rights below.
07. Your rights
You have the right to access the personal information we hold about you, ask us to correct it if it's wrong, request that we delete it, and withdraw any consent you've given. EU residents additionally have rights to data portability and to object to certain processing.
To exercise any of these, email contact@creativescope.ca with the subject line "Privacy request" and tell us what you'd like done. We'll confirm receipt within two business days and complete the request within thirty days. We may need to verify your identity before acting on a deletion or access request.
08. Cookies
This site uses a small number of first-party cookies for theme preference (light/dark) and Google Analytics cookies (_ga, _ga_*) to count visits and sessions. Because we advertise on Google, we also use Google Ads and Google Tag Manager, which may set advertising and conversion-measurement cookies (for example _gcl_*), primarily when you arrive from one of our ads. We do not run social media trackers on this site.
You can block or delete cookies through your browser's settings. Most browsers also offer a "Do Not Track" or strict-tracking-prevention mode, which we honour. To opt out of Google Analytics specifically, install Google's official browser add-on at tools.google.com/dlpage/gaoptout.
09. Children
This site is built for businesses and is not directed at children under thirteen. We don't knowingly collect personal information from children. If you believe a child has submitted information through this site, email us and we'll delete it.
10. International transfers
Our hosting infrastructure is operated by Hostinger, which stores data in EU and global edge regions. Some of our processors — Google, Formspree, Notion, Slack — are headquartered in the United States and may process data there.
For visitors and clients in the European Union, we rely on the European Commission's Standard Contractual Clauses (SCCs) as the lawful transfer mechanism for any data that moves outside the EEA. Copies are available on request.
11. Changes to this policy
We update this page when our practices change — for example, when we add a vendor, remove one, or change our retention windows. The "last updated" date at the top of the page reflects the most recent revision. For substantive changes, we'll also note what changed in a brief revision summary at the bottom of the next update.
Revision of 18 June 2026: added Google Ads conversion tracking and a second Google Analytics 4 property, both managed through Google Tag Manager, to measure how our advertising performs; replaced our previous form processor (Formspree) with Resend for email delivery; and updated the Cookies section to reflect advertising and conversion-measurement cookies.
12. Contact and complaints
Privacy questions, data requests, or concerns about how we've handled your information should go to contact@creativescope.ca, or by mail to Creative Scope, 45 Lisgar St, Toronto, ON M6J 0B8.
If you're not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca). EU residents may complain to the data protection authority in their country of residence.