Privacy Policy

This Privacy Policy explains how 16805418 Canada Inc., operating as Hyperreality Digital ("we," "us," "our"), collects, uses, shares, and protects your personal information when you visit hyperreality.digital (the "Site") or contact us. We are based in Cobourg, Ontario, Canada, and we serve clients globally.

We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec's Act respecting the protection of personal information in the private sector (Law 25), the EU and UK General Data Protection Regulation (GDPR/UK-GDPR), and the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA).

1. Who is responsible for your data

The data controller is 16805418 Canada Inc. o/a Hyperreality Digital, Cobourg, Ontario, Canada.

Our designated Privacy Officer is Tara Everding, Founder and Privacy Officer. You can reach the Privacy Officer at hey@hyperreality.digital for any privacy question, request, or complaint.

2. Personal information we collect

We only collect what we need:

• Contact form submissions. Your name, email address, company (optional), and message content when you use the contact form. Form submissions are processed and stored by our hosting provider, Netlify.
• Direct email. If you email us at hey@hyperreality.digital, we receive your email address and whatever content you send.
• Analytics data (consent-based). If you grant consent, Google Analytics 4 collects device and usage information (approximate location derived from a truncated IP, browser type, pages viewed, time on page, referring site). IP addresses are anonymized by GA4 by default. We have not enabled Google Signals, Google Ads linking, or cross-device tracking.
• Server logs. Our hosting provider (Netlify) automatically logs basic technical information (IP address, timestamp, request path, user agent) for security and operational purposes. These logs are retained for a limited period by Netlify.

We do not knowingly collect special categories of personal data (racial or ethnic origin, political opinions, religious beliefs, health data, etc.), and we do not collect biometric or financial information through this Site.

3. Why we use your information, and our legal basis

4. Who we share your information with

We do not sell your personal information. We share limited data with the following service providers ("processors") who help us run the Site:

• Netlify, Inc. — website hosting, CDN, and contact-form processing. Data may be processed in the United States and other regions.
• Google LLC — Google Analytics 4 (web analytics, consent-gated) and Google Calendar (for the "Book a Call" scheduling link). Data may be processed in the United States.

We may also disclose information if required by law, to protect our rights, or with your explicit consent.

5. International data transfers

Because our processors are based in the United States, your personal information may be transferred outside Canada, the EU, and the UK. We rely on the European Commission's Standard Contractual Clauses (SCCs) and equivalent UK International Data Transfer Addendum for transfers from the EU/UK, and on our processors' published data-processing terms (Google's Controller-Processor Data Protection Terms and Netlify's DPA).

6. How long we keep your information

• Contact-form submissions and email correspondence: up to 24 months after our last exchange, unless we enter a client relationship (in which case project records are retained per our engagement terms).
• Google Analytics event data: 14 months (Google's default, configured in GA4).
• Server logs: retained by Netlify per its published policies.

7. Your rights

Depending on where you live, you have some or all of the following rights:

• Access — ask what personal information we hold about you.
• Correction — ask us to correct inaccurate or incomplete information.
• Deletion / erasure — ask us to delete your personal information, subject to legal exceptions.
• Restriction — ask us to limit how we use your information.
• Portability — receive your information in a structured, commonly used, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — at any time, for processing based on consent (e.g., analytics). Withdrawing consent does not affect prior processing.
• Complain — lodge a complaint with a privacy regulator (see Section 11).

To exercise any of these rights, email hey@hyperreality.digital. We will respond within 30 days (or the period required by applicable law). We may need to verify your identity before acting on a request.

8. California residents (CCPA / CPRA)

If you are a California resident, you have the right to know, delete, correct, and limit the use of your personal information, and the right to opt out of the "sale" or "sharing" of your personal information. You also have the right not to be discriminated against for exercising these rights.

We do not sell your personal information for money. We also do not engage in cross-context behavioral advertising ("sharing" under the CPRA). Google Analytics is configured without advertising features, Google Signals, or ads-data linking.

Global Privacy Control (GPC). We honor the GPC browser signal. If your browser transmits GPC, we automatically treat your visit as a request to opt out of any sale or sharing and we block analytics cookies without requiring further action from you.

Do Not Sell or Share / limit use requests. To submit a request, email hey@hyperreality.digital with the subject line "California Privacy Request." You can also change your analytics preference any time via the Cookie Preferences link in our footer.

An authorized agent may submit requests on your behalf with signed written permission.

9. Cookies and similar technologies

We use two categories of cookies/storage on this Site:

• Strictly necessary — required to operate the Site. Includes a small localStorage entry (hd-consent) that remembers your cookie preferences so we don't ask again on every page load. Always on.
• Analytics (consent-based) — Google Analytics 4 cookies (_ga, _ga_*). Set only after you click "Accept All" or enable Analytics in the preferences panel. Blocked by default under Google Consent Mode v2.

You can change your choice at any time by clicking Cookie Preferences in the footer, or by clearing your browser storage for this Site.

10. Security

We implement reasonable administrative and technical safeguards to protect personal information against unauthorized access, disclosure, or loss. No method of transmission or storage is 100% secure, but we use reputable processors (Netlify, Google) with industry-standard security practices.

11. How to complain to a privacy authority

• Canada — Office of the Privacy Commissioner of Canada: priv.gc.ca
• Quebec — Commission d'accès à l'information du Québec: cai.gouv.qc.ca
• EU — your local data protection authority (directory at edpb.europa.eu)
• UK — Information Commissioner's Office (ICO): ico.org.uk
• California — California Privacy Protection Agency: cppa.ca.gov

12. Children's privacy

This Site is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact the Privacy Officer and we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will update the "Last updated" date above and, for material changes, post a notice on the Site.

14. Contact

Questions, requests, or complaints:
Tara Everding, Privacy Officer
hey@hyperreality.digital