Skip to main content
Legal

Privacy Policy

Last updated: June 2026

1. Who We Are

devMYK ("we", "us", "our") is a digital growth agency headquartered in the Province of Quebec, Canada. We help local small businesses get more phone calls, reviews, and customers.

Privacy Officer:
For any questions about this policy or your personal information, contact us at Show email.

2. Information We Collect

We collect personal information in the following situations:

  • Contact form: name, email address, phone number, business name, business type, and message.
  • Audit tool: name, email, phone, business name, website URL, city, province, and your answers to our audit questionnaire.
  • Consultation booking: name, email, phone, business name, preferred date, and notes.
  • Automatically collected: IP address, browser type, device type, pages visited, referral source, and usage data via Google Analytics 4.
  • Cookies: see Section 5 below.

3. How We Use Your Information

We use your information to:

  • Respond to your inquiry and deliver our services;
  • Send you your audit report and associated recommendations;
  • Communicate with you about your account or engagement;
  • Improve our website and personalize your experience;
  • Comply with our legal obligations.

We never sell, rent, or trade your personal information to third parties for commercial purposes.

4. Canada's Anti-Spam Legislation (CASL)

In compliance with Canada's Anti-Spam Legislation (CASL), we only send commercial electronic messages (CEMs) to individuals who have provided express consent through a form on our website.

  • Every contact, audit, and booking form includes an explicit, unchecked-by-default consent checkbox.
  • Every commercial email includes our full identification and a working unsubscribe mechanism.
  • Unsubscribe requests are honoured within 10 business days as required by CASL.
  • We retain proof of consent for every contact.

To unsubscribe, use the unsubscribe link in any of our emails or email us at Show email.

5. Third-Party Services & Cross-Border Transfers

We use third-party service providers to operate our platform. Some providers process your data outside Quebec and Canada, including in the United States. In accordance with Quebec's Law 25 (Bill 64), we disclose this below:

Service Purpose Location
AWS SESEmail deliveryUnited States
CloudflareSecurity & CDNGlobal
Google Analytics 4Anonymized usage statisticsUnited States
Meta (Facebook) PixelAd measurement (consent required)United States
StripeOnline paymentsUnited States
AnyChatLive chat widgetVariable

Each provider is contractually required to protect your data to applicable standards.

6. Cookies

We use the following categories of cookies:

Essential Cookies

Required for the site to function (session management, CSRF security, language preference). Always active — cannot be disabled.

Analytics Cookies

Google Analytics 4 — helps us understand how visitors use the site. Data is anonymized. Enabled only with your consent.

Marketing Cookies

Meta Pixel (Facebook/Instagram) — used to measure advertising effectiveness. Enabled only with your consent.

You can manage your preferences at any time by clicking "Manage Cookies" in the footer or adjusting your browser settings.

7. Data Retention

  • Contact information and leads: 2 years from last interaction.
  • Audit submissions: 2 years.
  • Analytics data: per Google Analytics policy (14 months by default).
  • Payment data: per Stripe's requirements and applicable accounting obligations.

At the end of the retention period, your data is permanently deleted or irreversibly anonymized.

8. Your Rights (PIPEDA & Quebec Law 25)

You have the following rights regarding your personal information:

  • Access: obtain a copy of the information we hold about you.
  • Correction: have inaccurate or incomplete information corrected.
  • Deletion: request erasure of your information (subject to legal obligations).
  • Portability: receive your data in a structured, commonly used format.
  • Withdrawal of consent: withdraw your consent to processing at any time.

To exercise any of these rights, email us at Show email. We will respond within 30 days as required by Law 25.

9. Security

We implement industry-standard security measures including SSL/TLS encryption, strict access controls, Cloudflare-backed infrastructure, and secure servers. No transmission over the internet is 100% guaranteed to be secure.

10. Complaints

If you believe your rights have not been respected, you may file a complaint with the Commission d'accès à l'information du Québec (CAI) at www.cai.gouv.qc.ca, or with the Office of the Privacy Commissioner of Canada (OPC) at www.priv.gc.ca.

11. Changes to This Policy

We may update this policy periodically. The last revision date is shown at the top of this page. For material changes, we will notify you by email or through a prominent notice on the site.

12. Contact Us

Questions about this policy: Show email