Privacy Policy
Last Updated: September 1, 2026
1. About This Privacy Policy
1001375418 Ontario Corp., doing business as OrangeFin Agency (“OrangeFin,” “we,” “us,” or “our”), respects your privacy and is committed to handling personal information responsibly.
This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you:
- visit orangefin.ca;
- submit a contact, project, or inquiry form;
- book or request a discovery call;
- purchase services through our website;
- communicate with us by email, phone, or other channels;
- subscribe to marketing communications;
- interact with an OrangeFin AI assistant or chatbot;
- use applications, calculators, portals, recommendation tools, specification tools, demonstrations, or other digital experiences made available through our website; or
- otherwise interact with OrangeFin.
This Privacy Policy applies to personal information under OrangeFin’s control. It does not apply to the independent privacy practices of third parties that operate their own websites, services, platforms, or applications.
2. Who We Are
Legal Entity: 1001375418 Ontario Corp.
Operating Name: OrangeFin Agency
Address: 104 - 360 College Street, Suite 307, Toronto, ON M5T 1S6, Canada
Website: orangefin.ca<br> Email: [email protected]
Phone: 866-738-1020
For privacy-related questions or requests, please contact:
Privacy Contact
OrangeFin Agency
Email: [email protected]
Phone: 866-738-1020
3. Personal Information We Collect
The information we collect depends on how you interact with OrangeFin.
3.1 Information You Provide Directly
We may collect information such as:
- full name;
- work email address;
- telephone number;
- company or organization name;
- job title or business role, where provided;
- project type or service of interest;
- project details;
- business needs, goals, challenges, or requirements;
- information included in free-text message fields;
- information provided during discovery calls or consultations;
- communications and correspondence with OrangeFin;
- newsletter subscription preferences;
- purchase and transaction information;
- billing information;
- account information where an account-based service is offered;
- information submitted through customer or distributor portals;
- information provided to an AI assistant or chatbot; and
- other information you voluntarily provide.
3.2 Project and Business Inquiry Information
When you contact OrangeFin about a project or potential business relationship, we may collect information about:
- your company;
- your market;
- your products or services;
- your customers;
- your marketing activities;
- your website;
- your business goals;
- your technology needs;
- potential application requirements;
- SEO, AEO, or GEO needs;
- conversion challenges;
- customer buying journeys; and
- other business information relevant to assessing or responding to your inquiry.
Some business information may also constitute personal information where it identifies or can reasonably be associated with an identifiable individual.
3.3 Purchase and Transaction Information
If you purchase a service through our website, we may collect or receive information such as:
- purchaser name;
- company name;
- email address;
- telephone number;
- billing address;
- purchased service;
- transaction amount;
- transaction date;
- payment status; and
- limited payment-related information.
Payment information may be processed by the payment provider presented at checkout. The personal information received by OrangeFin depends on the payment provider and the configuration of the transaction.
Unless expressly stated otherwise, OrangeFin does not require you to provide full payment card details directly through ordinary contact or project inquiry forms.
3.4 AI Chatbot and Assistant Information
OrangeFin may provide AI-enabled chatbots, assistants, or conversational tools.
When you interact with these tools, we may collect and retain:
- your questions;
- prompts;
- messages;
- conversation history;
- responses generated during the interaction;
- date and time information;
- technical and device information;
- associated contact information, where provided;
- interaction and usage data; and
- other information you choose to submit.
AI chatbot conversations may:
- be stored in a database;
- be transmitted to OrangeFin by email;
- be processed by third-party AI technology providers;
- be reviewed by OrangeFin personnel;
- be used to respond to inquiries;
- be used to understand customer needs and intent;
- be used to improve our services, subject to applicable law and our internal practices; and
- be retained in accordance with this Privacy Policy.
3.5 Information Collected Automatically
When you visit our website or use our digital services, we may automatically collect information such as:
- IP address;
- browser type;
- browser version;
- device type;
- operating system;
- approximate geographic location derived from IP address;
- referring website or source;
- pages viewed;
- date and time of visits;
- time spent on pages;
- navigation paths;
- clicks;
- scrolling activity;
- interaction events;
- form interaction events;
- conversion events;
- tool usage;
- application usage;
- portal usage;
- repeat visits;
- session information;
- cookie identifiers;
- advertising identifiers, where applicable; and
- other diagnostic, analytics, and technical information.
3.6 Customer Intent and Buying Behaviour Signals
OrangeFin’s services focus on understanding meaningful customer actions, not only basic traffic counts.
Where enabled, we may collect information about actions such as:
- using a recommendation tool;
- starting or completing a product selector;
- comparing products;
- completing an ROI calculation;
- downloading a specification;
- using a specification tool;
- using a customer or distributor portal;
- returning to a portal or application;
- interacting with an AI assistant;
- viewing particular products or services;
- beginning a quote request;
- completing a quote request;
- saving or sharing a recommendation;
- repeat use of tools or resources; and
- other activities that may indicate customer interest or buying intent.
This information may be analyzed on an individual, account-level, aggregated, or de-identified basis depending on the service and configuration.
4. Information From Other Sources
We may receive information from sources such as:
- analytics providers;
- advertising platforms;
- CRM systems;
- email systems;
- business partners;
- referral sources;
- public business websites;
- publicly available professional profiles;
- social media platforms;
- search platforms;
- scheduling or communication providers;
- service providers; and
- clients or prospective clients.
We may combine information from these sources with information collected directly through the website.
5. How We Use Personal Information
OrangeFin may use personal information to:
5.1 Respond to You
- respond to questions and inquiries;
- assess project fit;
- arrange discovery calls;
- prepare responses;
- provide requested information;
- communicate about potential projects; and
- maintain business relationships.
5.2 Provide Services
- deliver purchased services;
- manage projects;
- provide applications and digital tools;
- operate portals;
- provide support;
- maintain client relationships;
- process transactions;
- communicate about work; and
- administer service delivery.
5.3 Understand Business Needs
- understand your business;
- assess marketing needs;
- identify conversion opportunities;
- understand technology needs;
- identify customer buying friction;
- prepare recommendations;
- develop proposed strategies; and
- assess whether OrangeFin is a suitable partner.
5.4 Improve Marketing and Conversion
- measure website performance;
- understand traffic sources;
- assess customer journeys;
- measure conversion activity;
- analyze customer intent;
- improve content;
- improve user experience;
- develop better tools;
- improve applications; and
- identify opportunities to help visitors make informed decisions.
5.5 SEO, AEO, and GEO
We may use information to:
- analyze how people find OrangeFin;
- improve traditional search visibility;
- improve visibility in AI-assisted and answer-oriented search environments;
- understand search questions and intent;
- improve website structure;
- develop relevant content; and
- evaluate the effectiveness of search and content strategies.
5.6 Operate and Improve AI-Enabled Services
We may use AI-assisted technology to:
- summarize inquiries;
- organize information;
- assist with drafting communications;
- analyze business needs;
- support research;
- prepare recommendations;
- generate preliminary ideas;
- assist with project planning;
- support customer service;
- operate AI assistants or chatbots;
- analyze patterns and interactions; and
- improve internal efficiency.
5.7 Security and Fraud Prevention
We may use information to:
- protect our website;
- detect abuse;
- prevent spam;
- prevent fraud;
- investigate suspicious activity;
- enforce our Terms of Use;
- protect our systems; and
- maintain records relating to security incidents.
5.8 Legal and Administrative Purposes
We may use information to:
- comply with applicable law;
- respond to legal processes;
- establish or defend legal claims;
- maintain accounting and tax records;
- administer contracts;
- enforce agreements;
- manage disputes; and
- meet regulatory obligations.
6. Use of Artificial Intelligence
OrangeFin actively uses modern artificial intelligence tools as part of its business and service-delivery processes.
Depending on the circumstances, information you provide may be processed using services or technology supplied by providers such as:
- OpenAI;
- Anthropic;
- Google;
- Microsoft; and
- other AI, automation, hosting, or technology providers.
AI-assisted processing may support activities such as:
- summarizing project inquiries;
- drafting responses;
- organizing information;
- analyzing business challenges;
- conducting research;
- developing preliminary strategies;
- preparing recommendations;
- supporting application functionality;
- powering chatbots or assistants; and
- improving internal workflows.
OrangeFin does not represent AI-generated output as automatically correct. Human review may be used where appropriate to the context and purpose.
Unless otherwise disclosed at the relevant time, OrangeFin does not use the public website to make solely automated decisions about individuals that produce legal or similarly significant effects.
Third-party AI providers may process information according to their own contractual terms, privacy practices, system configurations, and applicable laws.
7. Cookies and Similar Technologies
OrangeFin uses or may use cookies, pixels, tags, local storage, analytics technologies, and similar tools.
7.0 What Is Actually In Use Today
Sections 7.1 to 7.5 describe the categories of technology OrangeFin may use. As of the Last Updated date above, what is actually running on this website is narrower, and it is:
- Google Analytics 4 and Microsoft Clarity, and only after you allow analytics. See sections 7.4 and 7.5.
- Cloudflare Turnstile, on our contact and website-audit forms, to tell a person from an automated submission. This is a security control, not a tracking tool, and it runs without consent because those forms cannot be protected otherwise.
- Local storage, holding one value: your answer to the analytics question, so we do not ask again on every page.
Nothing else in this section is enabled at present. Where a section says "where enabled", read it as describing what would apply if we turned that technology on, not as a description of the current website. If we enable one, this policy is updated first.
7.1 Essential Technologies
Essential technologies may be used to:
- operate the website;
- maintain security;
- prevent fraud and spam;
- remember privacy preferences;
- support forms;
- maintain sessions; and
- provide core functionality.
These technologies may be necessary for the website to function correctly.
7.2 Analytics Technologies
We use or may use analytics technologies to understand:
- website traffic;
- visitor behaviour;
- page performance;
- traffic sources;
- conversions;
- application usage;
- customer journeys; and
- technical performance.
Current or anticipated tools may include:
- Google Analytics 4;
- Google Search Console;
- website and server analytics; and
- similar analytics services.
7.3 Advertising and Conversion Technologies
Where enabled, OrangeFin may use technologies such as:
- LinkedIn Insight Tag;
- Meta Pixel;
- Google Ads conversion tracking; and
- similar advertising or conversion technologies.
These tools may help us:
- measure campaign performance;
- understand whether advertising leads to meaningful actions;
- build or measure audiences;
- understand referrals;
- improve marketing; and
- deliver or measure relevant advertising.
7.4 User Experience and Session Analytics
Where enabled, we may use tools such as:
- Microsoft Clarity;
- Hotjar; and
- similar user-experience analytics technologies.
Depending on configuration, these services may collect information about:
- clicks;
- scrolling;
- navigation;
- interaction patterns;
- device information;
- session behaviour; and
- other website usage information.
7.5 Cookie Consent
Analytics does not load until you allow it. On your first visit you are asked once, and until you answer, no analytics script is requested and no analytics cookie is set. Declining is a single click, in the same place and the same size as accepting.
You can change your answer at any time through the Cookie settings link in the site footer. Withdrawing consent stops analytics from loading on the pages you visit afterwards; it cannot retroactively unload a script that has already run on the page you are currently reading.
Your answer is stored in your browser's local storage, not in a cookie, so declining does not itself leave anything behind that identifies you. Clearing your browser storage clears the answer, and we will ask again.
Our contact page loads no analytics at all, regardless of your answer.
Declining analytics does not affect any part of the website's functionality. It only means we cannot see which pages are useful.
8. Spam and Abuse Prevention
OrangeFin may use security and anti-abuse technologies such as:
- Cloudflare Turnstile;
- CAPTCHA technologies;
- rate limiting;
- IP-based security controls; and
- other fraud, spam, or abuse-prevention systems.
These technologies may process technical information required to determine whether an interaction appears legitimate.
9. When We Disclose Personal Information
We may disclose personal information to service providers and other parties where reasonably necessary for the purposes described in this Privacy Policy.
These may include:
- hosting providers;
- infrastructure providers;
- Cloudflare hosting and edge-computing environments;
- database providers;
- Supabase;
- MySQL infrastructure providers;
- email providers;
- CRM providers;
- analytics providers;
- advertising platforms;
- AI providers;
- cloud providers;
- payment processors;
- security providers;
- spam-prevention providers;
- professional advisers;
- accountants;
- lawyers; and
- other technology or business service providers.
We may also disclose information:
- with your consent;
- to complete a transaction;
- to deliver requested services;
- to comply with law or legal process;
- to investigate fraud or security threats;
- to enforce agreements;
- to protect OrangeFin, our clients, users, or others; or
- as part of a corporate transaction such as a financing, restructuring, sale, merger, or transfer of business assets, subject to applicable requirements.
OrangeFin does not sell personal information in the ordinary meaning of selling personal information for money.
10. Databases and Storage
OrangeFin may store information using systems that include:
- Supabase;
- MySQL databases;
- email systems;
- CRM systems;
- website hosting infrastructure;
- cloud services; and
- other business technology systems.
Contact and project inquiries may be:
- delivered directly to OrangeFin by email; and
- stored in a database.
AI chatbot conversations may similarly be:
- stored in a database; and
- delivered to OrangeFin by email.
11. International and Cross-Border Processing
OrangeFin serves clients in Canada and the United States and uses technology providers that may operate in multiple countries.
Personal information may therefore be:
- stored outside Ontario;
- processed outside Ontario;
- transferred outside Canada; or
- accessible to service providers in other jurisdictions.
When information is processed in another jurisdiction, it may be subject to the laws and lawful access requirements of that jurisdiction.
OrangeFin remains responsible for personal information under its control as required by applicable law.
12. Marketing Communications and Newsletter
OrangeFin may offer a newsletter or other marketing communications.
Where required, we will seek appropriate consent before sending commercial electronic messages.
Submitting a general contact form, project inquiry, or discovery-call request does not automatically mean that you have subscribed to the OrangeFin newsletter.
Where a newsletter subscription is offered:
- subscription will be based on an appropriate consent mechanism;
- communications will identify the sender as required;
- an unsubscribe method will be provided; and
- unsubscribe requests will be processed in accordance with applicable requirements.
You may also contact us at:
to request removal from marketing communications.
Transactional, service-related, project-related, or legally required messages may still be sent where permitted.
13. Retention of Personal Information
OrangeFin retains information only for as long as reasonably necessary for the purposes for which it was collected, for legitimate business purposes, or as required or permitted by law.
Our general retention approach is:
13.1 Unsuccessful Project Inquiries
Information relating to inquiries that do not become clients may generally be retained for up to:
24 months after the last meaningful interaction
unless a longer period is reasonably required for legal, security, dispute, recordkeeping, or other legitimate purposes.
13.2 Active Leads and Prospects
Information may be retained while:
- there is an active opportunity;
- there is an ongoing business relationship;
- follow-up remains reasonably relevant; or
- another legitimate business purpose continues.
After the last meaningful interaction, prospect information will generally be retained for up to:
24 months
unless a different period is justified.
13.3 Client Records
Client records may generally be retained for up to:
7 years after the client relationship ends
where reasonably required for:
- tax;
- accounting;
- contract administration;
- dispute management;
- legal claims;
- professional records; or
- other legitimate obligations.
13.4 Analytics and Technical Data
Analytics, cookies, security records, server logs, and similar information may be retained according to:
- our configured retention settings;
- provider capabilities;
- security requirements; and
- legitimate operational needs.
13.5 Legal Holds
Information may be retained longer where required to:
- comply with law;
- respond to legal process;
- manage disputes;
- investigate fraud;
- address security incidents; or
- establish, exercise, or defend legal claims.
When information is no longer reasonably required, OrangeFin may delete, destroy, anonymize, or de-identify it, subject to technical and legal limitations.
14. Security
OrangeFin uses reasonable administrative, technical, and organizational safeguards appropriate to the nature of the information and the risks involved.
Measures may include:
- access controls;
- authentication controls;
- password protection;
- multi-factor authentication where available;
- secure hosting practices;
- database access controls;
- encryption where appropriate and available;
- backups;
- monitoring;
- anti-spam systems;
- security updates;
- restricted access; and
- service-provider controls.
No website, database, transmission system, cloud service, or security measure can be guaranteed to be completely secure.
15. Your Privacy Choices and Rights
Subject to applicable law, you may request to:
- access personal information OrangeFin holds about you;
- correct inaccurate personal information;
- update incomplete information;
- withdraw consent where processing depends on consent, subject to legal and contractual limitations;
- unsubscribe from marketing;
- change cookie preferences;
- ask questions about OrangeFin’s privacy practices; or
- challenge our compliance with applicable privacy requirements.
To make a request, contact:
We may need to verify your identity before completing certain requests.
Some information may be exempt from access, correction, deletion, or other requests where permitted or required by law.
Withdrawing consent may affect our ability to provide certain services.
16. Third-Party Websites and Services
Our website may contain links to:
- third-party websites;
- client websites;
- social networks;
- software platforms;
- booking tools;
- payment providers;
- technology providers; and
- other external services.
OrangeFin does not control the independent privacy practices of these third parties.
We encourage you to review their applicable policies.
17. Demo Tools and Applications
OrangeFin may provide demonstrations of:
- recommendation tools;
- calculators;
- portals;
- AI assistants;
- specification tools;
- product selectors; and
- other applications.
Unless expressly stated otherwise, OrangeFin demo applications are not intended to retain the substantive information entered into the demo itself.
However, general analytics or technical information about demo usage may still be collected, such as:
- whether the demo was opened;
- interactions;
- completion events;
- device information; and
- other usage signals.
A specific tool may have additional privacy notices where its operation differs from this general approach.
18. Children
The OrangeFin website is intended for business and professional audiences and is not directed to children.
We do not knowingly design our services for the collection of personal information from children.
19. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- changes to our services;
- changes to technology;
- new tools;
- changes to our business;
- changes to legal requirements; or
- changes to our privacy practices.
The updated version will be posted on this website with a revised “Last Updated” date.
Where required, we may provide additional notice or seek consent for material new practices.
20. Contact Us
For questions, privacy requests, or concerns:
OrangeFin Agency
1001375418 Ontario Corp.
104 - 360 College Street, Suite 307
Toronto, ON M5T 1S6
Canada
Email: [email protected]
Phone: 866-738-1020
Website: orangefin.ca
See also our Terms of Use.