Privacy Policy
Effective 24 July 2026
This Privacy Policy explains how WaveBlink (“WaveBlink,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you visit waveblink.ca, use the WaveBlink Lab, submit our contact form, or otherwise interact with our services (collectively, the “Services”). We serve visitors worldwide, and we aim to handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, other privacy laws such as the EU/UK GDPR.
By using the Services, you agree to the practices described here. If you do not agree, please do not use the Services.
1. Information we collect
We collect only what we need to run the Services:
- Information you give us. When you submit the contact form, we collect your name, email address, company or brand (if provided), and the contents of your message. When you unlock or download a resource in the WaveBlink Lab, we collect your email address and the resource you requested.
- Information collected automatically. For security and abuse prevention (such as rate-limiting downloads), we process your IP address and basic technical request data. Our hosting and infrastructure providers may keep standard server logs.
- Local browser storage. The Lab stores a small value in your browser’s local storage to remember that you have unlocked a resource, so you are not asked for your email again. This stays on your device and is not used to track you across other websites.
We do not use advertising cookies, third-party analytics, tracking pixels, or behavioural profiling. We do not knowingly collect payment card details through the Services.
2. How we use your information
- To respond to your enquiries and provide the services or resources you request;
- To deliver Lab downloads and, where you have provided your email, to send occasional updates about new resources (you can opt out at any time);
- To operate, secure, and improve the Services, including preventing fraud, abuse, and automated attacks;
- To comply with legal obligations and enforce our Terms of Service.
Where required by law, our legal bases for processing are your consent (which you may withdraw), our legitimate interests in operating and securing the Services, and compliance with legal obligations.
3. Service providers and disclosure
We do not sell your personal information. We share it only with service providers who process it on our behalf to operate the Services:
- FormSubmit — delivers our contact-form submissions to our inbox.
- Supabase — stores Lab email sign-ups and hosts downloadable files. Data is processed on servers located outside Canada.
- Cloudflare — hosts and delivers the website and processes technical data (including IP addresses) to serve content and protect against attacks.
We may also disclose information if required by law, to enforce our rights, or in connection with a business transfer (such as a merger or acquisition). We do not control, and are not responsible for, the privacy practices of third-party services you reach through links from the Services (including Instagram, LinkedIn, and any resources you download and deploy yourself).
4. International transfers
Because we and our providers operate globally, your information may be processed and stored in countries outside your own, including outside Canada (for example, in the United States and Japan). These countries may have different data-protection laws than your jurisdiction. Where required, we take steps to ensure appropriate safeguards are in place.
5. Data retention
We keep personal information only as long as necessary for the purposes described above or as required by law. Contact-form submissions are retained while we correspond with you and for a reasonable period afterward. Lab email sign-ups are retained until you ask us to remove them or they are no longer needed. Security logs are retained for a limited period.
6. Your rights and choices
Depending on where you live, you may have the right to access, correct, delete, or port your personal information, to withdraw consent, or to object to or restrict certain processing. To exercise any of these, or to be removed from our email list, email us at waveblinkmarketing@gmail.com and we will respond within a reasonable time. You may also lodge a complaint with your local data-protection authority (in Canada, the Office of the Privacy Commissioner).
7. Security
We take reasonable technical and organizational measures to protect your information, including access controls and restricting who and what can read our data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Children’s privacy
The Services are not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.
9. Changes to this policy
We may update this Privacy Policy from time to time. The “Effective” date above shows when it was last revised. Material changes will be reflected on this page; your continued use of the Services after changes take effect constitutes acceptance.
10. Contact us
Questions about this policy or your information? Email waveblinkmarketing@gmail.com. See also our Terms of Service.
