Effective Date: September 9, 2026
1. Introduction and Company Information
This Privacy Policy explains how Northline Creative Studio Ltd. (“Northline Creative Studio Ltd.,” “we,” “us,” or “our”) collects, uses, discloses, stores, and protects personal information in the course of operating our design-studio business in Canada.
We are committed to protecting personal information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (“PIPEDA”) and, where applicable, relevant provincial privacy legislation.
Northline Creative Studio Ltd.
Northline Studio, 2450 Dixie Road, Suite 210, Mississauga, ON L4Y 2A6, Canada
Email: [email protected]
Phone: +1 (905) 624-7891
This Privacy Policy applies to personal information collected through our website, email communications, phone calls, meetings, project intake forms, client onboarding processes, service delivery, marketing activities, and any other interaction with us in connection with our services.
2. Data Collection and Processing
We may collect personal information directly from you, automatically through our website and digital tools, and from third parties where permitted by law. Depending on your interaction with us, this may include:
- Identity and contact information, such as your name, business name, job title, email address, phone number, mailing address, and account or login details;
- Project and business information you provide, including design briefs, brand assets, preferences, budgets, timelines, feedback, and communications;
- Billing and payment information, such as invoice details, payment status, and limited payment-related information handled by third-party payment processors;
- Website and technical information, including IP address, browser type, device information, pages visited, referral URLs, and usage analytics;
- Communication records, including emails, call notes, meeting notes, support requests, and correspondence history;
- Marketing and preference information, such as newsletter subscriptions, event registrations, and engagement with our communications;
- Any other information you choose to provide to us voluntarily.
We process personal information only to the extent reasonably necessary for the purposes described in this Privacy Policy or as otherwise permitted or required by law.
3. Purpose of Data Processing
We use personal information for the following purposes:
- To respond to inquiries, provide quotes, and evaluate potential projects;
- To enter into and manage client relationships;
- To deliver design and related creative services, including branding, web design, graphics, presentations, and associated project management;
- To communicate with clients, suppliers, and website users;
- To prepare estimates, contracts, proposals, invoices, and receipts;
- To process payments and maintain accounting records;
- To personalize and improve our services and website experience;
- To administer our website, monitor performance, and protect against fraud, misuse, or security incidents;
- To send marketing communications where permitted by law and subject to your choices;
- To comply with legal, tax, accounting, and regulatory obligations;
- To establish, exercise, or defend legal claims.
4. Legal Basis for Processing
Under Canadian privacy law, we generally rely on your knowledge and consent for the collection, use, and disclosure of personal information, unless otherwise permitted or required by law. Depending on the context, our processing may be based on one or more of the following grounds:
- Consent: You have given consent, express or implied, to the collection, use, and disclosure of your personal information;
- Performance of a contract: Processing is necessary to provide services, manage a project, or take steps at your request before entering into an agreement;
- Legitimate business purposes: Processing is necessary for purposes that a reasonable person would consider appropriate in the circumstances, including service administration, security, and business operations, subject to applicable legal limits;
- Legal or regulatory compliance: Processing is required to meet obligations under law, taxation, accounting, or lawful requests from authorities;
- Protection of interests: Processing is necessary to protect our rights, property, safety, or those of our clients, users, or others.
Where consent is required, you may refuse or withdraw consent subject to legal or contractual restrictions and reasonable notice.
5. Data Sharing and Third Parties
We may disclose personal information to trusted third parties only when necessary for the purposes described in this Privacy Policy and in accordance with applicable law. Such third parties may include:
- Hosting, cloud storage, and IT service providers;
- Email, communication, and collaboration tools;
- Website analytics and performance measurement providers;
- Project management, CRM, and invoicing software providers;
- Professional advisers, including lawyers, accountants, and insurers;
- Payment processors and financial institutions;
- Subcontractors and freelance specialists engaged to assist with specific client projects under confidentiality obligations;
- Government bodies, regulators, courts, or law enforcement where required or permitted by law.
We do not sell personal information. If we use third-party tools that collect information for analytics, service delivery, or communications, those providers may process information under their own privacy policies and contractual obligations.
6. Data Transfer to Third Countries
Some of our service providers may store or process personal information outside of Canada, including in the United States or other jurisdictions. As a result, your personal information may be subject to the laws of those countries and may be accessible to courts, law enforcement, or regulatory authorities in those jurisdictions.
Where personal information is transferred outside Canada, we take reasonable contractual, technical, and organizational measures to protect it and require service providers to safeguard it in a manner consistent with applicable privacy requirements. By providing us with personal information, you understand that such transfers may occur as part of the delivery of our services and the operation of our business.
7. Storage Duration
We retain personal information only as long as necessary for the purposes for which it was collected, or as required or permitted by law. Retention periods may vary depending on the nature of the information and the purposes for which it is used.
- Client records, contracts, invoices, and tax-related information are generally retained for the period required by applicable accounting and tax laws;
- Project files and communications are retained for as long as needed to complete the project, handle follow-up work, and maintain appropriate business records;
- Marketing information is retained until you opt out or unsubscribe, subject to legal requirements;
- Website analytics and technical logs are retained for a limited period necessary for security, troubleshooting, and performance analysis.
When personal information is no longer required, we will securely destroy, delete, anonymize, or de-identify it in accordance with our internal retention practices and applicable law.
8. User Rights
Subject to applicable legal exceptions, you may have the following rights in relation to your personal information:
- Access: Request access to the personal information we hold about you and information about how it is used and disclosed;
- Rectification: Request correction of inaccurate, incomplete, or outdated personal information;
- Erasure: Request deletion of personal information, where permitted by law;
- Restriction: Request that we limit certain uses of your personal information in appropriate circumstances;
- Data portability: Request a copy of certain personal information in a portable format, where applicable under law;
- Objection: Object to certain processing, including marketing communications or processing based on circumstances where objection is available.
To exercise any of these rights, please contact us using the details in Section 12. We may need to verify your identity before responding to your request. We will respond within a reasonable time and in accordance with applicable Canadian privacy laws.
9. Withdrawal of Consent
Where our processing is based on your consent, you may withdraw that consent at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Please note that withdrawing consent may limit our ability to provide certain services, maintain an ongoing project, or continue communications with you. We will explain any consequences of withdrawal where relevant.
10. Right to Complain
If you have concerns about our privacy practices, please contact us first so that we may address your concerns directly.
You may also have the right to file a complaint with the Office of the Privacy Commissioner of Canada or, where applicable, a provincial privacy regulator if you believe your personal information has been handled in a manner that does not comply with applicable law.
We encourage you to contact us before escalating a complaint so that we can attempt to resolve the matter promptly and in good faith.
11. Data Security
We use reasonable administrative, technical, and physical safeguards to protect personal information against loss, theft, unauthorized access, unauthorized disclosure, copying, use, modification, or destruction. These measures may include:
- Access controls and role-based permissions;
- Secure passwords and authentication measures;
- Encryption and secure transmission protocols where appropriate;
- Device and network security practices;
- Confidentiality obligations for employees, contractors, and service providers;
- Monitoring and incident response procedures.
Although we strive to protect personal information, no method of transmission over the internet or method of electronic storage is completely secure. Accordingly, we cannot guarantee absolute security.
12. Contact Information
If you have any questions, requests, or complaints regarding this Privacy Policy or our privacy practices, please contact:
Northline Creative Studio Ltd.
Northline Studio, 2450 Dixie Road, Suite 210, Mississauga, ON L4Y 2A6, Canada
Email: [email protected]
Phone: +1 (905) 624-7891
13. Changes to Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make changes, we will revise the effective date at the top of this page and, where appropriate, provide additional notice through our website or by other reasonable means.
We encourage you to review this Privacy Policy periodically so that you remain informed about how Northline Creative Studio Ltd. protects personal information.