Privacy Policy

Effective Date: Nov 24th, 2025

1. Introduction

This Privacy Policy explains how Xternal Designs (“we,” “our,” or “us”) collects, uses, discloses, and protects personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA).

By accessing or using our website www.xternaldesigns.ca


2. Information We Collect

We collect personal information only for purposes that a reasonable person would consider appropriate, as required under PIPEDA.

A. Information You Provide

This may include:

  • Name, email address, phone number, or other contact details

  • Information you submit through website forms or inquiries

  • Payment-related information (processed through third-party providers—we do not store credit card details)

B. Information Collected Automatically (Google Analytics GA4 & Cookies)

We use Google Analytics 4 (GA4) and cookies to understand website usage. GA4 collects:

  • Device and browser information

  • Pages viewed, time on site, referral sources

  • Event-based anonymous interaction data

GA4 does not store IP addresses and does not identify you personally.


3. How We Use Your Information

Under PIPEDA, we use personal information only for identified and legitimate purposes, including:

  • Providing and improving our website and digital services

  • Understanding visitor behaviour through analytics

  • Responding to inquiries and communicating with users

  • Preventing security threats or fraudulent activity

  • Fulfilling legal or regulatory obligations

We do not sell or trade your personal information.

If we wish to use your information for a new purpose, we will seek fresh consent as required under PIPEDA.


4. Cookies & Tracking Technologies

Cookies help improve site functionality and performance.

We use:

  • Essential Cookies (required for site operation)

  • Analytics Cookies (Google Analytics GA4)

  • Optional marketing cookies (only if you choose to enable them)

Managing Cookies

You may disable cookies in your browser settings.
You may also opt out of Google Analytics using the GA opt-out tool:
https://tools.google.com/dlpage/gaoptout


5. Third-Party Service Providers

We may disclose limited information to third-party providers that assist us in operating our website or communicating with users, including:

  • Google Analytics GA4 (analytics)

  • Email service providers (for inquiries and communication)

Service providers are permitted to use personal information only for the purposes for which it is provided and must comply with PIPEDA or equivalent protections.


6. Data Security & Retention

We take reasonable safeguards appropriate to the sensitivity of the information, including:

  • SSL encryption

  • Firewalls and monitoring tools

  • Restricted access to personal information

We retain personal information only as long as necessary to fulfill the purposes identified or to meet legal requirements. Once no longer needed, information is securely destroyed or anonymized.


7. Your Rights Under PIPEDA

You have the right to:

  • Request access to the personal information we hold about you

  • Request corrections to inaccurate or incomplete information

  • Withdraw consent (subject to legal or contractual limitations)

  • Ask about how your information is used or disclosed

To make a request, please contact us using the information below. We will respond within the time-frames required under PIPEDA.


8. Changes to This Privacy Policy

We may update this Privacy Policy as needed to reflect changes in practices or legal requirements. The updated version will always be posted on our website. Significant changes will be communicated through a website notice or email.


9. Contact Information

If you have questions about this Privacy Policy or wish to make a privacy request under PIPEDA, please contact: Email: hello@xternaldesigns.ca