Privacy Policy

Culture Cartel Inc. (“Culture Cartel,” “we,” “us,” or “our”) is a creative and marketing agency based in Toronto, Ontario, Canada.

Data Controller / Privacy Contact

Culture Cartel Inc.

Toronto, Ontario

Canada

Email: info@culturecartel.ca

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you visit our website, contact us, submit a form, sign up for updates, request a proposal, apply to work with us, or otherwise interact with us online.

This Privacy Policy applies to the Culture Cartel website and any related web pages, landing pages, forms, campaigns, and digital experiences operated by Culture Cartel that link to this policy.

By using our website or providing us with your information, you acknowledge that you have read and understood this Privacy Policy.

Where required by law, we will ask for your consent to collect, use, or disclose your personal information. In other cases, we may rely on another lawful basis, such as fulfilling a contract, taking steps at your request before entering into a contract, complying with legal obligations, or pursuing our legitimate business interests where permitted by law. GDPR privacy notice rules require organizations to explain these basics clearly when data is collected.  

We may use personal information to:

• respond to inquiries, quote requests, bookings, and proposals

• provide services and manage client relationships

• communicate about projects, deliverables, billing, and support

• send newsletters, updates, insights, or promotional communications where permitted

• improve our website, user experience, offers, and marketing

• analyze trends, performance, and campaign effectiveness

• maintain records and internal administration

• recruit, evaluate, and communicate with candidates

• protect our rights, business, website, and users

• comply with legal, regulatory, tax, accounting, or contractual requirements

We only use personal information for purposes that are reasonable in the circumstances and connected to our business operations.

If you subscribe to our newsletter, download a resource, request a proposal, or otherwise opt in to hearing from us, we may send you marketing or promotional messages.

You can unsubscribe at any time by:

• clicking the unsubscribe link in the email, or

• contacting us directly using the details above

Canada’s anti-spam legislation generally requires consent, sender identification, and an unsubscribe mechanism for commercial electronic messages.  

We do not knowingly send mass marketing emails in violation of applicable law.

Depending on where you are located, we may rely on one or more of the following legal bases:

• your consent

• performance of a contract or pre-contractual steps requested by you

• compliance with legal obligations

• our legitimate interests, such as operating, securing, improving, and marketing our business, where those interests are not overridden by your rights

If we rely on consent, you may withdraw it at any time, subject to legal or contractual restrictions and reasonable notice.

Our website may use cookies and similar technologies to understand how users interact with the site and to improve performance, content, and marketing.

These technologies may include:

• essential cookies

• analytics cookies

• functionality cookies

• advertising or remarketing cookies, where applicable

You can usually control cookies through your browser settings. Blocking some cookies may affect website functionality.

We may use analytics tools such as Google Analytics or similar services to understand traffic and usage patterns. These tools may collect information such as IP address, device information, browser type, and interaction data.

PIPEDA guidance for businesses stresses meaningful consent and transparency around data practices, and many businesses also provide users with access rights and response timelines. 

Google Analytics

If we use Google Analytics, Google may process data about your use of the site in accordance with its own privacy terms. You may be able to opt out through available browser tools or settings.

We may use advertising and remarketing tools, including tools provided by platforms such as Meta, LinkedIn, Google, or other advertising services, to:

• measure campaign performance

• understand audience behavior

• show more relevant ads

• build audiences for future campaigns

These tools may use cookies, pixels, or similar technologies. Any ads you see on third-party platforms are also subject to those platforms’ own privacy policies and settings.

We do not sell your personal information.

We may share your information in the following circumstances:

• with service providers who help us run our business and website

• with professional advisors such as lawyers, accountants, insurers, or auditors

• with payment providers and financial institutions where relevant

• with marketing, analytics, CRM, hosting, email, automation, or scheduling providers

• with government authorities, regulators, or law enforcement where required by law

• in connection with a merger, acquisition, restructuring, financing, sale of assets, or similar business transaction

• where you have asked us to do so or consented to it

We require third-party service providers to handle personal information appropriately and only for authorized purposes.

Culture Cartel is based in Canada, but some of the third-party tools and service providers we use may store or process data outside your province, territory, or country, including in the United States or other jurisdictions.

As a result, your information may be subject to the laws of those jurisdictions and may be accessible to courts, law enforcement, or regulatory authorities there.

Where required, we take reasonable steps to ensure appropriate safeguards are in place for cross-border transfers.

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:

• to provide services

• to manage our business relationship with you

• to maintain business and financial records

• to comply with legal, accounting, tax, insurance, and regulatory obligations

• to resolve disputes

• to enforce our agreements

Retention periods may vary depending on the type of information and the reason it was collected.

When personal information is no longer required, we will delete it, anonymize it, or securely destroy it, subject to legal and operational requirements.

Depending on where you live and the laws that apply, you may have the right to:

• request access to the personal information we hold about you

• request correction of inaccurate or incomplete information

• request deletion of your information

• withdraw consent where processing is based on consent

• object to or restrict certain processing

• request portability of certain data

• complain to a privacy regulator or supervisory authority

Under PIPEDA, individuals generally have a right to access personal information held by organizations, and organizations are generally expected to respond within 30 days, subject to limited exceptions. 

To exercise your rights, contact us using the information listed above. We may need to verify your identity before processing your request.

Where allowed by law, you may authorize an agent to make a privacy request on your behalf. We may require proof of the agent’s authority and may also take reasonable steps to verify your identity.

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification.

That said, no website, platform, storage system, or electronic transmission is ever completely secure. While we take security seriously, we cannot guarantee absolute security.

You provide information at your own risk.

Our website may contain links to third-party websites, platforms, or services. We are not responsible for the privacy practices, content, or security of those third parties.

We encourage you to review their privacy policies before providing personal information.

Our website and services are intended for business use and are not directed to children under 13. We do not knowingly collect personal information from children.

If you believe a child has provided us with personal information, please contact us and we will take appropriate steps.

In some cases, Culture Cartel may process personal information on behalf of clients as part of delivering marketing, creative, CRM, advertising, automation, analytics, website, or related services.

In those situations, our role may be that of a service provider or processor, and the client’s own privacy policy or data processing terms may also apply.

Where applicable, we handle that data according to our contractual obligations and applicable law.

Culture Cartel may interact with users on social media platforms such as Instagram, LinkedIn, Facebook, TikTok, X, YouTube, or others.

If you engage with us on social media, including by tagging us, messaging us, or interacting with our content, we may collect or use information you make available through those platforms in order to:

• respond to you

• understand audience engagement

• monitor brand mentions

• improve our marketing and community engagement

Your use of those platforms is also governed by the platform’s own privacy policy and settings.

If you apply to work with us, we may collect information such as:

• your name and contact information

• resume or CV

• portfolio

• employment and education history

• references

• any other information you choose to provide

We use this information to assess your application, communicate with you, and manage recruitment.

We aim to make this Privacy Policy clear, transparent, and easy to understand. GDPR transparency rules require privacy notices to be concise, accessible, and written in plain language. 

If you do not agree with this Privacy Policy, please do not use our website or provide personal information through it.

We may update this Privacy Policy from time to time to reflect changes to our business, services, website, technologies, or legal requirements.

When we do, we will update the “Last updated” date at the top of this page. If changes are material, we may provide additional notice where appropriate.

If you have questions, requests, or complaints about this Privacy Policy or our privacy practices, contact:

Culture Cartel Inc.

Toronto,

Canada

Email: info@culturecartel.ca