Privacy Policy

How Greenlight Creative collects, uses, discloses, and protects personal information in the course of our work as a digital agency, and the choices available to you.

Greenlight Creative (“Greenlight Creative,” “we,” “us,” or “our”) is a digital agency based in Fort McMurray, Alberta, Canada, offering services that may include web design and development, content creation, social media management, advertising, and related marketing services. This policy applies to personal information collected through our website at greenlightcreative.ca, in connection with our client engagements, and in the ordinary course of running our business.

We are committed to protecting personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Alberta privacy legislation. If we provide services to clients or visitors outside Canada, we take reasonable steps to also respect other privacy laws that may apply to that information, such as the EU/UK GDPR or applicable U.S. state privacy laws.

Gracify is a content platform built and operated by Greenlight Creative for the Wood Buffalo Grace Committee in Fort McMurray, Alberta. It helps the Committee celebrate Catholic education across the region by automating what was previously a manual, time-consuming process: monitoring the public Facebook pages of local Catholic schools and organizations, using AI to curate and merge related updates into a consistent voice, publishing approved content to Facebook on a schedule.

Gracify uses the Facebook Graph API to retrieve public posts from the pages the Committee has chosen to follow, and to publish approved content back to the Committee’s own Facebook Page.

The personal information we collect depends on how you interact with us — as a website visitor, prospective client, active client, job applicant, or supplier. It generally falls into the categories below.

We do not knowingly collect sensitive categories of information (such as health or financial account data) unless a client relationship specifically requires it, in which case we handle it under the terms of a separate agreement.

• Directly from you — when you fill out a form on our website, email us, call us, or sign a services agreement with us.
• Automatically — through cookies, analytics tools, and similar technologies when you browse our website (see Section 6).
• From third parties — such as referral partners, publicly available business listings, or platforms you have connected to services we manage on your behalf (for example, a social media or advertising account).

We use personal information only for purposes that a reasonable person would consider appropriate in the circumstances, including to:

• Respond to inquiries and provide quotes for services
• Deliver, manage, and invoice for the services set out in a client agreement
• Operate, maintain, and improve our website and internal systems
• Communicate with you about projects, updates, or account matters
• Send marketing communications, where you have consented or as otherwise permitted by law, with an easy way to opt out at any time
• Evaluate job applications
• Meet legal, accounting, and regulatory requirements

We do not sell personal information to third parties.

Our website uses cookies and similar technologies (such as pixels and local storage) to keep the site working properly, understand how visitors use it, and, where applicable, measure the performance of advertising campaigns we run for ourselves or on behalf of clients. This may include tools such as Google Analytics and the Meta (Facebook) pixel.

We disclose personal information only where necessary, and generally to the following categories of recipients:

• Service providers — hosting, email, analytics, payment processing, and other vendors who process information on our behalf under appropriate confidentiality and data-handling terms.
• Platform providers — such as Meta, Google, or other advertising and social media platforms, when we manage campaigns or accounts for a client, and only to the extent required to perform that work.
• Professional advisors — such as our accountant or legal counsel, where necessary.
• Legal or regulatory bodies — where required by law, court order, or to protect our rights, property, or safety, or that of others.
• A successor entity — in the event of a merger, acquisition, or sale of business assets, subject to the same privacy commitments described here.

Personal information we collect is generally stored on servers located in Canada or the United States, operated by reputable third-party providers. Where information is processed or stored outside Canada, it may be accessible to courts, law enforcement, or national security authorities of that jurisdiction under its laws. By providing us with your information, you acknowledge this possibility. We take contractual and technical steps to require our service providers to protect information to a standard consistent with this policy.

We keep personal information only as long as necessary to fulfill the purposes described in this policy, including to satisfy legal, accounting, or reporting requirements. Client and billing records are typically retained for the duration of the business relationship and for a period afterward as required by Canadian tax and corporate law. Website analytics data is retained in accordance with the retention settings of the analytics tools we use. When information is no longer needed, we securely delete or anonymize it.

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information involved, such as access controls, encryption in transit, and limiting access to personal information to personnel and service providers who need it to do their work. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we work to protect personal information against loss, theft, and unauthorized access, disclosure, copying, use, or modification.

Subject to certain legal exceptions, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Withdraw consent to our collection, use, or disclosure of your information, where consent was the basis for processing (this may limit our ability to provide certain services)
• Unsubscribe from marketing communications at any time, using the link provided in each message or by contacting us directly
• Ask questions about how your information has been collected, used, or disclosed

To exercise any of these rights, contact us using the details in Section 15. We will respond within a reasonable time and in accordance with applicable law.

Our website and services are directed at businesses and individuals over the age of majority in their jurisdiction. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected information from a child, we will take reasonable steps to delete it.

Our website and the campaigns we manage may contain links to third-party websites, tools, or social media platforms that we do not control. This policy does not apply to those third parties, and we encourage you to review their own privacy policies before providing them with information.

We may update this policy from time to time to reflect changes in our practices or for legal or operational reasons. The “Effective” date at the top of this page indicates when it was last revised. Material changes will be posted on this page; we encourage you to review it periodically.

Questions, requests, or concerns about this policy or how we handle personal information can be directed to:

If we are unable to resolve a concern, you have the right to contact the Office of the Privacy Commissioner of Canada or, for matters within its jurisdiction, the Office of the Information and Privacy Commissioner of Alberta.