Privacy policy.

Who we are

Launch & Found is a marketing agency based in London, Ontario, Canada. You can reach us at hello@launchandfound.co about anything on this page, including a request to see or delete what we hold about you. Ask for the privacy contact and it goes to a person, not a queue.

Canadian federal privacy law, PIPEDA, is what governs this. Ontario has no separate private sector privacy law, so that is the standard we hold ourselves to.

If you are in Quebec, Quebec’s Law 25 applies as well. Its rule is that anything which could identify, locate or profile you is off until you turn it on, and this site follows that rule where our host reads your connection as coming from Quebec. That reading is kept in a cookie for a day and it is not exact: a VPN, or a mobile network that comes out in another province, makes you look like you are somewhere else, and then the site treats you as outside Quebec. Saying no works the same wherever you are.

What we collect when you contact us

When you fill in a form on this site, a quote request, the contact form, or the message panel, we collect what you type into it. That is usually your name, your email, your phone number, your business, and whatever you tell us about the job.

We do not ask for payment details anywhere on this site, and there is nowhere on it to enter them.

What we collect automatically

We measure how the site is used, and we use that to see which pages and which ads do their job. The first time you arrive you are asked whether that is all right. What runs depends on your answer, and on where you are.

• Google Analytics 4 counts page views from the moment you arrive, with no cookie and nothing that follows you from one page to the next, so we know a page was viewed and roughly where in the world from. If you say yes it also sets its cookies, which lets it tell a return visit from a new one. Google says it does not keep your IP address.
• The Meta pixel tells Meta, which runs Facebook and Instagram, which pages you looked at and which buttons you pressed, so Meta can show our ads to people who visited and to people like them, and so we can see which ads bring in enquiries. It sets a cookie in your browser and sends Meta its own identifiers from your browser or from the ad you clicked. It runs unless you say no. Where we can tell you are in Quebec it waits until you say yes.
• Microsoft Clarity records how a page was used, including scrolling and clicks, so we can see where a page is confusing. It only runs if you say yes. Form fields are not recorded.
• Google Tag Manager is the container the Meta pixel loads through. It collects nothing by itself.

Say no and Clarity never starts, and the Meta pixel stops: it is not loaded again, and if it was already on the page it stops reporting. Outside Quebec it will usually have reported the page you were on, and the button you pressed to answer, before it stopped. The cookie it set stays until it expires or you clear it. If you send an enquiry we still tell Meta about it from our server, as described below, whatever you answered. Analytics keeps counting without cookies. The site works the same either way. Your answer is stored in your browser, so clearing this site’s data brings the question back. Meta’s own account settings let you limit how it uses your activity on other sites.

Why we collect it

To answer you, and to understand which pages do their job. We use what you send to reply, to put together a quote, and to keep track of the conversation if it turns into work. We do not sell it, and we do not share it with other advertisers. Meta uses what the pixel collects to show our ads, and keeps it under its own data policy.

Who else handles it

We use other companies to run parts of this. Each of them only gets what it needs to do its job.

• GoHighLevel holds enquiries as our customer records, and runs the booking calendar where one is on the page.
• Resend delivers the email that tells us an enquiry has come in.
• Vercel hosts the site and keeps standard server logs, including IP addresses, for a short period.
• Google receives the page view count from the start, and the fuller analytics only if you agreed. Microsoft receives the Clarity recording only if you agreed.
• Meta, which runs Facebook and Instagram, receives what the pixel collects, described above, on every page unless you said no, or, where we can tell you are in Quebec, only once you have said yes. It is also told when you send an enquiry or book a call through this site, so we can see which of our ads bring in enquiries and so Meta can show those ads to people more likely to be interested. Your name, email address and phone number are hashed before they leave our server: Meta receives a code it can check against the details it already holds for its own users. It also receives your IP address, your browser, the page you were on, which form you used, and Meta’s own identifiers from your browser or the ad you clicked, where there are any. It does not get your message or your answers to the form.
• Supabase and Stripe hold account and billing information, and only for clients who have signed in or paid us. Stripe handles card details directly and we never see them.

These companies store and process information outside Canada, mostly in the United States. That means it can be reached under the laws of the country it sits in, including by courts and authorities there. Using this site means you are content with that.

How long we keep it

Enquiries that do not turn into work are kept for two years and then deleted. Records for clients are kept for as long as we work together and for seven years after that, because tax rules require it. Measurement data is kept on the retention period set in each tool, which is fourteen months for analytics. Meta keeps what the pixel sends under its own data policy.

If something goes wrong

If information is lost or exposed in a way that creates a real risk of significant harm, we will report it to the Office of the Privacy Commissioner of Canada and tell the people affected as soon as we can. We keep a record of every breach for two years, including the ones that do not meet that bar.

Your rights

You can ask what we hold about you, ask us to correct it, ask us to delete it, and withdraw consent for anything you previously agreed to. Email hello@launchandfound.co and we will answer within thirty days.

If you are not satisfied with how we handled it, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Children

This site is for businesses. We do not knowingly collect information from anyone under sixteen.

Changes

If we add a tool that collects something new, this page changes first and the consent question comes back. The date at the top is when it last changed.