Privacy Policy

Last Updated: September 19, 2026

1. About This Privacy Policy

1001375418 Ontario Corp., doing business as OrangeFin Agency (“OrangeFin,” “we,” “us,” or “our”), respects your privacy and is committed to handling personal information responsibly.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you:

  • visit orangefin.ca;
  • submit a contact, project, or inquiry form;
  • request a project conversation;
  • discuss or enter into a paid engagement with us;
  • communicate with us by email, phone, or other channels;
  • ask to receive marketing communications, where offered;
  • interact with an OrangeFin AI assistant or chatbot;
  • use applications, calculators, portals, recommendation tools, specification tools, demonstrations, or other digital experiences made available through our website; or
  • otherwise interact with OrangeFin.

This Privacy Policy applies to personal information under OrangeFin’s control. It does not apply to the independent privacy practices of third parties that operate their own websites, services, platforms, or applications.

Back to contents

2. Who We Are

Legal Entity: 1001375418 Ontario Corp.
Operating Name: OrangeFin Agency
Address: 104 - 360 College Street, Suite 307, Toronto, ON M5T 1S6, Canada
Website: orangefin.ca; Email: [email protected]
Phone: 866-738-1020

For privacy-related questions or requests, please contact:

Privacy Contact
OrangeFin Agency
Email: [email protected]
Phone: 866-738-1020

Back to contents

3. Personal Information We Collect

The information we collect depends on how you interact with OrangeFin.

3.1 Information You Provide Directly

We may collect information such as:

  • full name;
  • work email address;
  • telephone number;
  • company or organization name;
  • job title or business role, where provided;
  • project type or service of interest;
  • project details;
  • business needs, goals, challenges, or requirements;
  • information included in free-text message fields;
  • information provided during project conversations or consultations;
  • communications and correspondence with OrangeFin;
  • marketing communication preferences, where offered;
  • transaction information, where a paid engagement begins;
  • billing information provided for a paid engagement;
  • account information where an account-based service is offered;
  • information submitted through customer or distributor portals;
  • information provided to an AI assistant or chatbot; and
  • other information you voluntarily provide.

3.2 Project and Business Inquiry Information

When you contact OrangeFin about a project or potential business relationship, we may collect information about:

  • your company;
  • your market;
  • your products or services;
  • your customers;
  • your marketing activities;
  • your website;
  • your business goals;
  • your technology needs;
  • potential application requirements;
  • SEO, AEO, or GEO needs;
  • conversion challenges;
  • customer buying journeys; and
  • other business information relevant to assessing or responding to your inquiry.

Some business information may also constitute personal information where it identifies or can reasonably be associated with an identifiable individual.

3.3 Purchase and Transaction Information

The Website does not currently accept online orders or payment. If online payment is added, we may collect or receive information such as:

  • purchaser name;
  • company name;
  • email address;
  • telephone number;
  • billing address;
  • purchased service;
  • transaction amount;
  • transaction date;
  • payment status; and
  • limited payment-related information.

Any future checkout will identify the payment provider before payment. The personal information received by OrangeFin will depend on the payment provider and the configuration of the transaction.

Unless expressly stated otherwise, OrangeFin does not require you to provide full payment card details directly through ordinary contact or project inquiry forms.

3.4 AI Chatbot and Assistant Information

OrangeFin may provide AI-enabled chatbots, assistants, or conversational tools.

When you interact with these tools, we may collect and retain:

  • your questions;
  • prompts;
  • messages;
  • conversation history;
  • responses generated during the interaction;
  • date and time information;
  • technical and device information;
  • associated contact information, where provided;
  • interaction and usage data; and
  • other information you choose to submit.

AI chatbot conversations may:

  • be stored in a database;
  • be transmitted to OrangeFin by email;
  • be processed by third-party AI technology providers;
  • be reviewed by OrangeFin personnel;
  • be used to respond to inquiries;
  • be used to understand customer needs and intent;
  • be used to improve our services, subject to applicable law and our internal practices; and
  • be retained in accordance with this Privacy Policy.

3.5 Information Collected Automatically

When you visit our website or use our digital services, we may automatically collect information such as:

  • IP address;
  • browser type;
  • browser version;
  • device type;
  • operating system;
  • approximate geographic location derived from IP address;
  • referring website or source;
  • pages viewed;
  • date and time of visits;
  • time spent on pages;
  • navigation paths;
  • clicks;
  • scrolling activity;
  • interaction events;
  • form interaction events;
  • conversion events;
  • tool usage;
  • application usage;
  • portal usage;
  • repeat visits;
  • session information;
  • cookie identifiers;
  • advertising identifiers, where applicable; and
  • other diagnostic, analytics, and technical information.

3.6 Customer Intent and Buying Behaviour Signals

OrangeFin’s services focus on understanding meaningful customer actions, not only basic traffic counts.

Where enabled, we may collect information about actions such as:

  • using a recommendation tool;
  • starting or completing a product selector;
  • comparing products;
  • completing an ROI calculation;
  • downloading a specification;
  • using a specification tool;
  • using a customer or distributor portal;
  • returning to a portal or application;
  • interacting with an AI assistant;
  • viewing particular products or services;
  • beginning a quote request;
  • completing a quote request;
  • saving or sharing a recommendation;
  • repeat use of tools or resources; and
  • other activities that may indicate customer interest or buying intent.

This information may be analyzed on an individual, account-level, aggregated, or de-identified basis depending on the service and configuration.

Back to contents

4. Information From Other Sources

We may receive information from sources such as:

  • analytics providers;
  • advertising platforms;
  • email systems;
  • business partners;
  • referral sources;
  • public business websites;
  • publicly available professional profiles;
  • social media platforms;
  • search platforms;
  • scheduling or communication providers;
  • service providers; and
  • clients or prospective clients.

We may combine information from these sources with information collected directly through the website.

Back to contents

5. How We Use Personal Information

OrangeFin may use personal information to:

5.1 Respond to You

  • respond to questions and inquiries;
  • assess project fit;
  • arrange project conversations;
  • prepare responses;
  • provide requested information;
  • communicate about potential projects; and
  • maintain business relationships.

5.2 Provide Services

  • deliver purchased services;
  • manage projects;
  • provide applications and digital tools;
  • operate portals;
  • provide support;
  • maintain client relationships;
  • process transactions;
  • communicate about work; and
  • administer service delivery.

5.3 Understand Business Needs

  • understand your business;
  • assess marketing needs;
  • identify conversion opportunities;
  • understand technology needs;
  • identify customer buying friction;
  • prepare recommendations;
  • develop proposed strategies; and
  • assess whether OrangeFin is a suitable partner.

5.4 Improve Marketing and Conversion

  • measure website performance;
  • understand traffic sources;
  • assess customer journeys;
  • measure conversion activity;
  • analyze customer intent;
  • improve content;
  • improve user experience;
  • develop better tools;
  • improve applications; and
  • identify opportunities to help visitors make informed decisions.

5.5 SEO, AEO, and GEO

We may use information to:

  • analyze how people find OrangeFin;
  • improve traditional search visibility;
  • improve visibility in AI-assisted and answer-oriented search environments;
  • understand search questions and intent;
  • improve website structure;
  • develop relevant content; and
  • evaluate the effectiveness of search and content strategies.

5.6 Operate and Improve AI-Enabled Services

We may use AI-assisted technology to:

  • summarize inquiries;
  • organize information;
  • assist with drafting communications;
  • analyze business needs;
  • support research;
  • prepare recommendations;
  • generate preliminary ideas;
  • assist with project planning;
  • support customer service;
  • operate AI assistants or chatbots;
  • analyze patterns and interactions; and
  • improve internal efficiency.

5.7 Security and Fraud Prevention

We may use information to:

  • protect our website;
  • detect abuse;
  • prevent spam;
  • prevent fraud;
  • investigate suspicious activity;
  • enforce our Terms of Use;
  • protect our systems; and
  • maintain records relating to security incidents.

We may use information to:

  • comply with applicable law;
  • respond to legal processes;
  • establish or defend legal claims;
  • maintain accounting and tax records;
  • administer contracts;
  • enforce agreements;
  • manage disputes; and
  • meet regulatory obligations.

Back to contents

6. Use of Artificial Intelligence

OrangeFin actively uses modern artificial intelligence tools as part of its business and service-delivery processes.

Depending on the circumstances, information you provide may be processed using services or technology supplied by providers such as:

  • OpenAI;
  • Anthropic;
  • Google;
  • Microsoft; and
  • other AI, automation, hosting, or technology providers.

AI-assisted processing may support activities such as:

  • summarizing project inquiries;
  • drafting responses;
  • organizing information;
  • analyzing business challenges;
  • conducting research;
  • developing preliminary strategies;
  • preparing recommendations;
  • supporting application functionality;
  • powering chatbots or assistants; and
  • improving internal workflows.

OrangeFin does not represent AI-generated output as automatically correct. Human review may be used where appropriate to the context and purpose.

Unless otherwise disclosed at the relevant time, OrangeFin does not use the public website to make solely automated decisions about individuals that produce legal or similarly significant effects.

Third-party AI providers may process information according to their own contractual terms, privacy practices, system configurations, and applicable laws.

Back to contents

7. Cookies and Similar Technologies

OrangeFin uses or may use cookies, pixels, tags, local storage, analytics technologies, and similar tools.

7.0 What Is Actually In Use Today

Sections 7.1 to 7.5 describe the categories of technology OrangeFin may use. As of the Last Updated date above, what is actually running on this website is narrower, and it is:

  • Google Analytics 4 and Microsoft Clarity, and only after you allow analytics. See sections 7.4 and 7.5.
  • ProductChat IQ, on pages where the assistant is offered. Opening the assistant loads its conversation interface. It processes the messages you choose to submit and related technical and usage information.
  • Cloudflare Turnstile, on our contact and website-audit forms, to distinguish a person from an automated submission. This security control protects the forms from spam and automated abuse.
  • Local storage, holding one value: your answer to the analytics question, so we do not ask again on every page.
  • Session storage, with analytics permission, retaining campaign attribution for the paid-search project form as described below.

Embedded YouTube videos load only after you choose to play one and use YouTube's privacy-enhanced domain. No other advertising pixels or session analytics tools are enabled as of the date above. Where a section says "where enabled", it describes what would apply if we turned that technology on. If we enable one, this policy is updated first.

With analytics permission, our manufacturer and distributor landing page stores campaign parameters, advertising click identifiers, the landing-page address, the referring site and a first-touch timestamp in session storage for up to 30 minutes, or until the tab closes. When you submit the project form, these details accompany your enquiry so we can assess which campaigns lead to useful project conversations. Declining analytics leaves campaign storage and these optional fields off; the form still sends your enquiry and its page address. Names, email addresses, company names and your message are not sent as analytics event parameters.

7.1 Essential Technologies

Essential technologies may be used to:

  • operate the website;
  • maintain security;
  • prevent fraud and spam;
  • remember privacy preferences;
  • support forms;
  • maintain sessions; and
  • provide core functionality.

These technologies may be necessary for the website to function correctly.

7.2 Analytics Technologies

We use or may use analytics technologies to understand:

  • website traffic;
  • visitor behaviour;
  • page performance;
  • traffic sources;
  • conversions;
  • application usage;
  • customer journeys; and
  • technical performance.

Current tools include:

  • Google Analytics 4;
  • Microsoft Clarity; and
  • website and server analytics.

7.3 Advertising and Conversion Technologies

Where enabled, OrangeFin may use Google Ads conversion tracking or similar advertising and conversion technologies.

These tools may help us:

  • measure campaign performance;
  • understand whether advertising leads to meaningful actions;
  • build or measure audiences;
  • understand referrals;
  • improve marketing; and
  • deliver or measure relevant advertising.

7.4 User Experience and Session Analytics

Where enabled, we may use Microsoft Clarity or similar user-experience analytics technologies.

Depending on configuration, these services may collect information about:

  • clicks;
  • scrolling;
  • navigation;
  • interaction patterns;
  • device information;
  • session behaviour; and
  • other website usage information.

Analytics does not load until you allow it. On your first visit you are asked once, and until you answer, no analytics script is requested and no analytics cookie is set. Declining is a single click, in the same place and the same size as accepting.

You can change your answer at any time through the Cookie settings link in the site footer. Withdrawing consent stops analytics from loading on the pages you visit afterwards; it cannot retroactively unload a script that has already run on the page you are currently reading.

Your answer is stored in your browser's local storage, not in a cookie, so declining does not itself leave anything behind that identifies you. Clearing your browser storage clears the answer, and we will ask again.

Our contact page loads no analytics at all, regardless of your answer.

Declining analytics does not affect any part of the website's functionality. It only means we cannot see which pages are useful.

Back to contents

8. Spam and Abuse Prevention

OrangeFin may use security and anti-abuse technologies such as:

  • Cloudflare Turnstile;
  • CAPTCHA technologies;
  • rate limiting;
  • IP-based security controls; and
  • other fraud, spam, or abuse-prevention systems.

These technologies may process technical information required to determine whether an interaction appears legitimate.

Back to contents

9. When We Disclose Personal Information

We may disclose personal information to service providers and other parties where reasonably necessary for the purposes described in this Privacy Policy.

These may include:

  • hosting providers;
  • infrastructure providers;
  • Cloudflare hosting and edge-computing environments;
  • database providers;
  • Supabase;
  • email delivery providers, including Resend;
  • analytics providers;
  • advertising platforms;
  • AI providers;
  • cloud providers;
  • ProductChat IQ and its hosting or database providers;
  • video platforms when you choose to play embedded video;
  • security providers;
  • spam-prevention providers;
  • professional advisers;
  • accountants;
  • lawyers; and
  • other technology or business service providers.

We may also disclose information:

  • with your consent;
  • to complete a transaction;
  • to deliver requested services;
  • to comply with law or legal process;
  • to investigate fraud or security threats;
  • to enforce agreements;
  • to protect OrangeFin, our clients, users, or others; or
  • as part of a corporate transaction such as a financing, restructuring, sale, merger, or transfer of business assets, subject to applicable requirements.

OrangeFin does not sell personal information in the ordinary meaning of selling personal information for money.

Back to contents

10. Databases and Storage

OrangeFin may store information using systems that include:

  • Supabase;
  • email systems;
  • website hosting infrastructure;
  • cloud services; and
  • other business technology systems.

Contact and project inquiries may be:

  • delivered directly to OrangeFin by email; and
  • retained in OrangeFin's email and business records.

AI chatbot conversations may be stored by ProductChat IQ and reviewed by OrangeFin as described in section 3.4.

Website Audit submissions and reports are handled by audit.orangefin.ca and may be retained as needed to deliver the report, keep consent and security records, and prevent abuse.

Back to contents

11. International and Cross-Border Processing

OrangeFin uses technology providers that may operate in multiple countries.

Personal information may therefore be:

  • stored outside Ontario;
  • processed outside Ontario;
  • transferred outside Canada; or
  • accessible to service providers in other jurisdictions.

When information is processed in another jurisdiction, it may be subject to the laws and lawful access requirements of that jurisdiction.

OrangeFin remains responsible for personal information under its control as required by applicable law.

Back to contents

12. Marketing Communications and Newsletter

OrangeFin does not currently offer a public newsletter signup. If one is added, or if other marketing communications are offered, the following terms apply.

Where required, we will seek appropriate consent before sending commercial electronic messages.

Submitting a general contact form, project inquiry, or project-conversation request does not automatically mean that you have subscribed to the OrangeFin newsletter.

Where a newsletter subscription is offered:

  • subscription will be based on an appropriate consent mechanism;
  • communications will identify the sender as required;
  • an unsubscribe method will be provided; and
  • unsubscribe requests will be processed in accordance with applicable requirements.

You may also contact us at:

[email protected]

to request removal from marketing communications.

Transactional, service-related, project-related, or legally required messages may still be sent where permitted.

Back to contents

13. Retention of Personal Information

OrangeFin retains information only for as long as reasonably necessary for the purposes for which it was collected, for legitimate business purposes, or as required or permitted by law.

Our general retention approach is:

13.1 Unsuccessful Project Inquiries

Information relating to inquiries that do not become clients may generally be retained for up to:

24 months after the last meaningful interaction

unless a longer period is reasonably required for legal, security, dispute, recordkeeping, or other legitimate purposes.

13.2 Active Leads and Prospects

Information may be retained while:

  • there is an active opportunity;
  • there is an ongoing business relationship;
  • follow-up remains reasonably relevant; or
  • another legitimate business purpose continues.

After the last meaningful interaction, prospect information will generally be retained for up to:

24 months

unless a different period is justified.

13.3 Client Records

Client records may generally be retained for up to:

7 years after the client relationship ends

where reasonably required for:

  • tax;
  • accounting;
  • contract administration;
  • dispute management;
  • legal claims;
  • professional records; or
  • other legitimate obligations.

13.4 Analytics and Technical Data

Analytics, cookies, security records, server logs, and similar information may be retained according to:

  • our configured retention settings;
  • provider capabilities;
  • security requirements; and
  • legitimate operational needs.

Information may be retained longer where required to:

  • comply with law;
  • respond to legal process;
  • manage disputes;
  • investigate fraud;
  • address security incidents; or
  • establish, exercise, or defend legal claims.

When information is no longer reasonably required, OrangeFin may delete, destroy, anonymize, or de-identify it, subject to technical and legal limitations.

Back to contents

14. Security

OrangeFin uses reasonable administrative, technical, and organizational safeguards appropriate to the nature of the information and the risks involved.

Measures may include:

  • access controls;
  • authentication controls;
  • password protection;
  • multi-factor authentication where available;
  • secure hosting practices;
  • database access controls;
  • encryption where appropriate and available;
  • backups;
  • monitoring;
  • anti-spam systems;
  • security updates;
  • restricted access; and
  • service-provider controls.

No website, database, transmission system, cloud service, or security measure can be guaranteed to be completely secure.

Back to contents

15. Your Privacy Choices and Rights

Subject to applicable law, you may request to:

  • access personal information OrangeFin holds about you;
  • correct inaccurate personal information;
  • update incomplete information;
  • withdraw consent where processing depends on consent, subject to legal and contractual limitations;
  • unsubscribe from marketing;
  • change cookie preferences;
  • ask questions about OrangeFin’s privacy practices; or
  • challenge our compliance with applicable privacy requirements.

To make a request, contact:

[email protected]

We may need to verify your identity before completing certain requests.

Some information may be exempt from access, correction, deletion, or other requests where permitted or required by law.

Withdrawing consent may affect our ability to provide certain services.

Back to contents

16. Third-Party Websites and Services

Our website may contain links to:

  • third-party websites;
  • portfolio and project websites;
  • social networks;
  • video platforms;
  • software platforms;
  • technology providers; and
  • other external services.

OrangeFin does not control the independent privacy practices of these third parties.

We encourage you to review their applicable policies.

Back to contents

17. Demo Tools and Applications

OrangeFin may provide demonstrations of:

  • recommendation tools;
  • calculators;
  • portals;
  • AI assistants;
  • specification tools;
  • product selectors; and
  • other applications.

The Website Audit is a live tool, not a no-storage demo. It sends the website address, first name, work email, policy versions, and security token to audit.orangefin.ca, reviews public pages, displays a score, and emails the report.

Unless expressly stated otherwise, OrangeFin demo applications are not intended to retain the substantive information entered into the demo itself.

However, general analytics or technical information about demo usage may still be collected, such as:

  • whether the demo was opened;
  • interactions;
  • completion events;
  • device information; and
  • other usage signals.

A specific tool may have additional privacy notices where its operation differs from this general approach.

Back to contents

18. Children

The OrangeFin website is intended for business and professional audiences and is not directed to children.

We do not knowingly design our services for the collection of personal information from children.

Back to contents

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • changes to our services;
  • changes to technology;
  • new tools;
  • changes to our business;
  • changes to legal requirements; or
  • changes to our privacy practices.

The updated version will be posted on this website with a revised “Last Updated” date.

Where required, we may provide additional notice or seek consent for material new practices.

Back to contents

20. Contact Us

For questions, privacy requests, or concerns:

OrangeFin Agency
1001375418 Ontario Corp.
104 - 360 College Street, Suite 307
Toronto, ON M5T 1S6
Canada

Email: [email protected]
Phone: 866-738-1020
Website: orangefin.ca

Back to contents

See also our Terms of Use.