Privacy Policy — Granite Path Marketing
Effective date: October 13, 2026 · Last updated: October 13, 2026
1. Who we are
Granite Path Marketing ("we", "us") is a marketing business at 207 Dundas St. East, Suite 242, Trenton, Ontario K8V 1L0. Phone: 613-661-3880. Email: info@granitepathmarketing.com.
This policy explains how we handle personal information collected through granitepathmarketing.com, including our small-business marketing pages (/small-business-marketing/ and /fr/marketing-petites-entreprises/). We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Québec's Act respecting the protection of personal information in the private sector (as amended by Law 25), and Canada's Anti-Spam Legislation (CASL).
2. Person responsible for protecting personal information
Todd Stinson, Owner, is responsible for protecting personal information at Granite Path Marketing. Contact them at the address, phone or email above, with the subject "Privacy".
3. What we collect
When you request a free local visibility audit, we collect:
- Required: first name, business name, type of business, city/town, province, email address.
- Optional: phone number, website or Google Business Profile link, a description of your biggest marketing challenge.
- Your marketing choice: whether you ticked the optional box agreeing to receive marketing emails and texts.
- Automatically with the form: the page and language you submitted from, the date and time, and campaign codes in the page link if any (UTM tags, Google "gclid" or Facebook "fbclid" click IDs).
- For security: your IP address is used briefly to limit repeated submissions (anti-spam). It is kept for about one hour in a temporary counter and is not saved with your request. A hidden "honeypot" field helps block bots.
We do not ask for payment information, government ID numbers, or sensitive information on these pages. Please don't include sensitive details in the free-text box.
4. Why we use it
- To prepare and send the audit you asked for and follow up about it.
- To reply to your questions and, if you want, provide a quote or services.
- To understand which pages and campaigns bring in requests (using the page and campaign codes).
- To protect the site from spam and abuse.
- If you ticked the consent box: to send you marketing tips and offers by email or text.
We don't sell your personal information or use it for anything unrelated to these purposes without asking you.
5. Consent and withdrawing it
By submitting the form, you agree to us using your information to prepare your audit and follow up about it. The marketing box is optional and unticked by default; your audit is processed either way.
You can withdraw consent at any time: reply UNSUBSCRIBE to any email, reply STOP to any text, or contact us. We send texts only to people who have consented to receive them. We will act on unsubscribe requests within 10 business days, as CASL requires. Withdrawing marketing consent doesn't affect your audit.
6. Who we share it with (service providers)
We only share information with providers who help us run our business, and only what they need:
- Website hosting: our web host stores our website and form submissions in our WordPress database. Its servers may be located outside Canada.
- Email: request notifications and confirmations are sent by email from our website and received in our business mailbox, which is run by an email service provider.
- Internal operations software: your request may be processed by our internal operations software, and by service providers acting on our behalf under confidentiality obligations, to manage and follow up on it.
- Text messaging: if you consented to texts, they are sent through a messaging service provider acting on our behalf. Reply STOP to unsubscribe.
We may also disclose information if the law requires it.
7. Information stored outside Québec or Canada
Some of our providers may store or process your information outside Québec or outside Canada. Before doing so, we assess whether the information will be adequately protected, and we use contracts and the providers' security measures to protect it. Information stored outside Canada may be accessible to courts and authorities in those countries under their laws.
8. Cookies and tracking
Our small-business marketing pages (/small-business-marketing/ and /fr/marketing-petites-entreprises/) do not load third-party analytics or advertising tracking scripts and do not set cookies for visitors as of the effective date. They do include an empty "data layer" (a page script that records events such as a thank-you page view) that would only send data if a tag manager is added later. If we ever add tracking tools, we will update this policy first and, where the law requires, they will stay off until you accept them. A technical cookie (asf_pv, 12 hours) is used only by our own team to preview unpublished pages. This statement applies only to those small-business pages. Other parts of granitepathmarketing.com, such as our trade service pages, may use different technology, including the call tracking described below.
Call tracking
Some of our pages use a call-tracking service. It may show a tracking phone number on the page and uses cookies (such as calltrk_landing and calltrk_referrer) to link a phone call to the page or ad that led to it. When you call, the service logs call details such as your phone number, the time and the length of the call. Calls may be recorded for quality, training and lead-handling purposes. The provider processes this information on our behalf and may store it outside Québec or Canada.
9. How long we keep it
We keep audit requests for as long as we need them to deliver the audit and follow up, and for up to 24 months after our last contact with you, unless you become a client (then for as long as the relationship lasts plus any period required by law, e.g., tax records). Proof of marketing consent is kept as long as we send you messages, plus 3 years after our last message to you. Then we delete or anonymize it.
10. How we protect it
Requests are stored as private records in our website's admin area, accessible only to authorized people, over an encrypted (HTTPS) connection. We limit access to those who need it.
11. Your rights
You can ask us to:
- tell you what personal information we hold about you and how we use it, and give you a copy;
- correct information that is inaccurate or incomplete;
- delete your information or stop using it, where the law allows;
- (Québec) receive computerized information you gave us in a structured, commonly used format; and be told about any decision made solely by automated processing. We do not make decisions about you based solely on automated processing.
Contact the person responsible (section 2). We will respond within 30 days and may need to verify your identity. There's no charge in most cases.
12. Privacy incidents
If a privacy incident (such as unauthorized access to or loss of personal information) happens, we will act quickly to reduce the risk, keep a record of it, and — where there's a risk of serious harm — notify you, the Office of the Privacy Commissioner of Canada and/or Québec's Commission d'accès à l'information, as the law requires.
13. Complaints
Please contact us first; we'll try to fix the problem. You can also complain to:
- Office of the Privacy Commissioner of Canada: priv.gc.ca, 1-800-282-1376.
- Commission d'accès à l'information du Québec (Québec residents): cai.gouv.qc.ca, 1-888-528-7741.
14. Changes
We may update this policy. We'll post the new version here with a new effective date, and ask for your consent again if we plan to use your information for a new purpose.