1. Data controller identity and contact
For the purposes of applicable privacy laws, including the EU General Data Protection Regulation (GDPR) where relevant, the data controller is Maple Leaf Digital Insights Inc. We operate the Canada Digital Insights website and determine how and why personal data is processed when you use this site.
Maple Leaf Digital Insights Inc.
200 Bay Street, Suite 2300
Toronto, ON M5J 2J2
Canada
Email: [email protected]
General: [email protected]
Phone: +1 (416) 360-7000
This website is a publication focused on digital awareness and user behaviour. We do not request sensitive personal information (such as health or financial details) through the site. If you choose to contact us, you control what you include in your message.
2. Personal data we collect
The information we collect depends on how you use the site. Some data is provided directly by you, while other data is collected automatically by our servers or through cookies and similar technologies. We minimize data collection and focus on what is necessary to operate an editorial website reliably.
Data you may provide
- Full name (if you include it in an email or form)
- Email address
- Phone number (only if you choose to include it)
- Message content and any attachments you send
Data collected automatically
- IP address and approximate location derived from it (city or region level)
- Device and browser information (user agent, language, time zone, screen size)
- Usage data (pages viewed, time on page, referrer, scroll and interaction events where enabled)
- Cookie and similar technology identifiers (only where applicable and permitted)
- Basic server logs (request time, URL requested, response status)
We do not intentionally collect special categories of data (for example health information, biometric data, or political opinions). If you send such information to us voluntarily, we will treat it with care and limit use to handling your request.
3. How we collect data
We collect data using straightforward methods that are typical for a publication website. Some are visible, such as when you email us, and others occur behind the scenes, such as server logs that record how a page is delivered. Where optional analytics or marketing technologies are used, we rely on your cookie preferences and provide controls through the consent banner.
Direct interactions
If the site offers a contact form on certain pages, information is collected when you submit it. You can also contact us directly via email. In both cases, the content you provide is used to respond to your inquiry, to maintain a record of correspondence, and to prevent misuse of the communication channel.
Automated collection
Our hosting environment may automatically collect server logs for security and reliability. In addition, when you accept analytics cookies, measurement tools such as Google Analytics 4 may record aggregated usage information. If marketing cookies are enabled in the future, they would be controlled through the same consent mechanism described in this policy.
We do not use content-blocking pop-ups or forced interstitials. Cookie consent is shown in the bottom-right corner and does not prevent reading. You can change your cookie choice by clearing site data in your browser or by interacting with the banner the next time it appears.
4. Legal bases for processing (GDPR Article 6)
If you are located in the European Economic Area (EEA) or the United Kingdom, we rely on the legal bases below under GDPR Article 6. Similar principles apply under other privacy frameworks, including Canadian privacy laws, where we aim to be transparent, proportionate, and respectful of user choice.
Where we rely on legitimate interests, we consider the impact on visitors and aim to use privacy-friendly settings. You can object to processing based on legitimate interests as described in the rights section below.
5. Purposes of processing
We use personal data for limited, practical purposes that support an editorial site. We do not sell personal data. We do not use personal data to make decisions that produce legal or similarly significant effects about you. Where marketing communications are involved, we rely on consent and provide opt-out options.
Customer support and correspondence
We use contact details and message content to reply to inquiries, clarify requests, and manage follow-up. This may include verifying that a message relates to our site and preventing spam or abusive communications.
Security and fraud prevention
Server logs and technical data help us defend against malicious traffic, reduce the risk of unauthorized access, and maintain site availability. These activities are typical for modern hosting environments.
Analytics and product understanding (optional)
When you accept analytics cookies, we may analyze aggregated activity to understand what pages are read, what topics receive attention, and where site navigation can be improved. We use these insights to improve editorial structure, accessibility, and page performance.
Legal compliance
We may process data to comply with legal obligations, respond to lawful requests, or establish, exercise, or defend legal claims. Where possible, we minimize the amount of personal data used for these purposes.
Marketing emails are not a core feature of this site. If we introduce an optional newsletter in the future, sign-up would be explicit and consent-based, and every message would include an unsubscribe option.
6. How long we keep data (retention)
We retain personal data only for as long as needed for the purposes described in this policy, unless a longer retention period is required or permitted by law. Retention periods can vary depending on the type of data and the context in which it was collected.
Standard retention periods
- Form submissions or email inquiries: 2 years from last correspondence
- Server logs: 30 days (typical operational window), unless needed longer for security investigations
- Analytics data (e.g., GA4): 14 months (or the closest setting available)
- Cookie preference stored in localStorage: up to 12 months or until you clear site storage
- Email list (if introduced): until you unsubscribe, then deletion within 30 days
Deletion and minimization
We periodically review stored correspondence and remove information that is no longer needed. If you request deletion, we will assess the request and remove data unless retention is necessary for legal compliance or to resolve disputes. Where possible, we may also anonymize data so it no longer relates to an identifiable person.
Analytics is intended to remain aggregate. If analytics is enabled through consent, settings may be configured to reduce identifiability, but analytics systems can still process device and browser data as part of their operation.
8. International data transfers
Canada Digital Insights is based in Canada. Some of our service providers may process data in other countries, including the United States and countries within the European Economic Area. International transfers can occur when website traffic routes through global infrastructure, when analytics tools process data, or when email systems deliver messages.
Where GDPR applies and personal data is transferred outside the EEA to a country that does not have an adequacy decision, we rely on appropriate safeguards. These may include the European Commission Standard Contractual Clauses (SCCs) and, where relevant, supplementary measures designed to protect data in transit and at rest.
Even when content is informational, online delivery can involve cross-border processing by infrastructure providers. We aim to select reputable vendors and apply privacy-friendly settings where available, but some processing is inherent to modern web services.
9. Your privacy rights
Depending on your location, you may have rights relating to your personal data. We provide the controls described here as a baseline, and we aim to respond to verified requests in a timely manner. To protect users, we may need to confirm identity before fulfilling a request, especially where deletion or access to correspondence is involved.
Rights under GDPR
- Right of access: request a copy of personal data we hold about you
- Right to rectification: correct inaccurate or incomplete data
- Right to erasure: request deletion when data is no longer needed or consent is withdrawn
- Right to restrict processing: limit certain processing in specific cases
- Right to data portability: receive certain data in a structured, commonly used format
- Right to object: object to processing based on legitimate interests
- Right to withdraw consent: at any time, where processing is based on consent
How to exercise rights
Email our privacy inbox at [email protected]. Please include enough detail for us to locate the relevant information, such as the email address you used to contact us and approximate dates.
Cookie-related choices can also be managed locally through your browser. You can clear cookies and site storage, or use the site’s cookie banner controls when it appears.
You can request deletion of contact messages and associated metadata by emailing the privacy inbox. If deletion is not possible due to legal obligations, we will explain the reason and the applicable retention.
Right to complain to a supervisory authority
If GDPR applies to you, you have the right to lodge a complaint with a supervisory authority. For example, in Ireland you can contact the Data Protection Commission (DPC). In other EEA countries, you can contact your local data protection authority. We encourage you to contact us first so we can address concerns directly, but you are not required to do so.
11. Children’s privacy
This site is not directed to children under 16. We do not knowingly collect personal data from children under 16. If you believe that a child has provided personal data to us, please contact [email protected] so we can investigate and take appropriate action, such as deleting the data.
If an inquiry appears to contain information from a minor, we may limit communication and request that a parent or guardian contact us instead. We also encourage caregivers to review browser privacy controls on shared devices.
12. Policy updates
We may update this Privacy Policy to reflect changes in site functionality, legal requirements, or our processing practices. If changes are significant, we will post a prominent notice on the website. Where appropriate, we may also notify users by email if we have a direct relationship through prior correspondence or an optional newsletter.
The “Last Updated” date at the top of this page indicates when the policy was most recently revised. Continued use of the site after an update means you have had the opportunity to review the revised policy.
If we introduce new cookies, analytics features, or marketing pixels, we will update this page and reflect those changes in the cookie consent banner so you can make an informed choice.
13. Contact, DPO, and privacy mailbox
If you have questions about this policy, want to exercise your rights, or want to request deletion, please contact our privacy mailbox. We do not designate a formal Data Protection Officer (DPO) for this publication at this time; however, privacy requests are handled by a dedicated privacy contact. If we determine that a DPO is required due to changes in processing activities, we will update this page.
Privacy email
For faster handling, include “Privacy Request” in the subject line and specify whether your request is about cookies, analytics, or contact messages.
Mailing address
Maple Leaf Digital Insights Inc.
Attn: Privacy
200 Bay Street, Suite 2300
Toronto, ON M5J 2J2
Canada
If you prefer to contact us by phone, call +1 (416) 360-7000.
Unsubscribe and deletion
If a newsletter is introduced, every email will include an unsubscribe link. For any direct communications, you can request that we stop responding or remove stored correspondence by contacting the privacy mailbox. We will confirm what actions were taken and whether any data must be retained for legal reasons.