Privacy Policy

Last updated: 13 September 2026

Pakhiateau & Co Digital Marketing Agency (P&C, "we", "us", "our") respects your privacy. This policy explains how we handle personal information through pcmarketing.agency and in our business relationships, why we use it, and the choices you have. We operate from Saskatoon, Canada. Applicable privacy rights and obligations depend on the information and activities involved.

Who we are

Yasmin Pakhlevanyan, carrying on business as Pakhiateau & Co Digital Marketing Agency (P&C), is responsible for your information. P&C is a sole proprietorship. You can reach us at online@pcmarketing.agency.

What we collect

Information you give us. When you enquire, email us or engage us, we receive the contact details, business information and correspondence you provide, and relevant contract, billing and working records.
Information collected automatically. Our website uses cookies and analytics which may record approximate location, device and browser type, and how you use the site. See our Cookie Policy.
Client service information. We use information and account access needed for agreed work, generally advertising, analytics, reporting and product data. We do not routinely receive customer-level customer relationship management (CRM), point-of-sale (POS), email/phone lists or offline-conversion files. Please do not send passwords or customer datasets through our enquiry form or ordinary email.

Why we use it

We use information to respond to enquiries, provide and administer agreed services, prepare reports, manage contracts and payments, improve our services, maintain security, meet legal duties and resolve disputes. We send marketing where you have agreed or where otherwise lawfully permitted, with a way to opt out. We seek consent where required and limit use to the stated purposes or another basis permitted by applicable law.

Cookies and analytics

Our website is built on Squarespace and uses cookies and third-party analytics. You can control cookies through the consent options on our site and through your browser. See our Cookie Policy for detail.

Who we share it with

We do not sell personal information. Where needed for the relevant purpose, we use suppliers in these categories: website hosting; cloud email and storage, including Google Workspace/Gmail and Google Drive; advertising and analytics platforms; reporting and data-integration tools; feed and product-data tools; professional technology and artificial intelligence (AI) tools subject to the limits below; and banking and payment providers. Not every supplier receives personal information or is used for every client. Client-contracted platforms may have their own roles and privacy terms. We may also disclose information to professional advisers or where law requires or permits it.

Technology and AI tools

P&C may use professional technology and AI tools in service delivery, including with client context and human review. We do not intentionally submit client-identifiable customer data, credentials, raw customer lists, CRM/POS/customer exports or similar sensitive datasets to general AI tools unless appropriately authorised and protected. Any proposed exception requires a review of purpose, data minimisation, supplier terms and safeguards before use. Confidentiality obligations continue to apply.

Processing for clients

We use a Data Processing Agreement (DPA) where we actually process personal information on a client's behalf, with details appropriate to that engagement. A separate DPA is not automatically required for every Audit or Revenue Operating System engagement using only aggregate, non-identifiable advertising or analytics data. Future customer-level processing must be scoped and authorised before it starts; account access can involve personal information even without a downloaded file.

Where your information is held

We work in Canada and use cloud and platform providers whose storage or support operations may involve other countries. Locations depend on the provider, service and account settings; we do not promise Canada-only storage. Information processed abroad may be subject to the laws and lawful access powers of that country. Before new client personal-information processing, we review the relevant supplier arrangements, locations and protections and address any notices, authorisations or transfer safeguards required for that activity. Contact us for information about the arrangements relevant to your data.

How long we keep it

Retention depends on the type of record and its purpose. We do not apply one universal retention period.

Prospect and enquiry information: up to 24 months after the last meaningful interaction, unless a legal, tax or dispute-related need requires longer retention.
Client working files: during the engagement and up to 24 months afterwards where reasonably needed for continuity, reference or dispute resolution. We delete files sooner when no longer needed.
Temporary local downloads: deleted when no longer required for the task.
Credentials and account access: retained only while needed; access and stored credentials are removed promptly when no longer required, subject to an expressly agreed necessary handover.
Contracts, invoices, accounting and tax records: retained for the legally required business-record periods.
Customer-level personal information, if received: retained only as long as necessary for the agreed task, then returned or deleted where practical under the agreed instructions. It is not automatically retained for the general client-file period.
Legal, tax or dispute holds: relevant records are retained as long as necessary for the hold and then reviewed for deletion.
Technical logs and backup copies: retention and expiry depend on the relevant system and provider. Where immediate deletion is unavailable, we limit further use and access as far as practical and do not claim immediate erasure from every backup.

Your rights

You can ask to access, correct or delete your information, and withdraw consent to marketing at any time. Depending on applicable law, you may also have rights to restrict or object to processing or request data portability. These rights are subject to applicable conditions and lawful retention requirements. To make a request, email online@pcmarketing.agency. We may need to verify your identity. For information we process on a client's behalf, we may refer your request to that client and assist them as appropriate.

If you are unhappy with how we handle your information, contact us or the relevant privacy regulator, including the Office of the Privacy Commissioner of Canada at priv.gc.ca, the relevant provincial regulator, or, where UK law applies, the Information Commissioner's Office at ico.org.uk.

Security

We use reasonable technical and organisational safeguards appropriate to the information and risks. These include multi-factor authentication on important systems where available and appropriate; separate user access and reasonable access restrictions; encrypted, password-protected devices with auto-lock and security updates; controlled cloud storage; prompt removal of access when no longer needed; and deletion of temporary local downloads when no longer required for the task. We take reasonable steps to assess and contain incidents, address their effects and make notifications required by applicable law or agreement. No system or internet transmission is completely secure.

Children

Our site is for businesses and adults. We do not knowingly collect information from children.

Changes

We may update this policy from time to time. The last-updated date shows the current version.

Contact

Questions about this policy: online@pcmarketing.agency.