Privacy Policy

Who we are

Help Me Marketing Inc. ("we", "us", "our") is a marketing agency serving DTC, SaaS, healthcare, and finance. This policy describes how we handle personal information we collect through this website and in the course of providing services to our clients.

For regulated client engagements, such as healthcare work involving Protected Health Information (PHI), finance work involving regulated client data, or any engagement requiring enhanced data handling, separate Business Associate Agreements (BAAs), Data Processing Agreements (DPAs), or equivalent contracts govern our obligations and take precedence over this policy.

Information we collect

On this website, we collect only what you actively submit through a form (name, email, company or brand, website, phone, message) and a small set of analytics signals (pages viewed, referrer, approximate region). If you choose to allow session recordings, we also receive recordings of how you use our pages; they are off unless you turn them on.

When you send our contact form, a security check from Cloudflare Turnstile reads a few technical signals from your browser, such as your IP address and browser type, to tell people apart from automated spam. It is not used to identify, profile or target you.

When working with a client, we process information strictly defined in scope. We do not receive or process PHI unless a BAA is in place, and we do not process other regulated personal data outside the terms of the governing DPA.

• We do not sell personal information.
• We do not use PHI or regulated client data in advertising platforms.

Cookies and analytics

We use Google Tag Manager to load a small set of measurement tools. Google Analytics counts visits and enquiries so we can see how the site is used (pages viewed, referrer, approximate region). Hotjar and Microsoft Clarity record how pages are used, such as clicks and scrolling, so we can fix confusing ones, and they run only if you allow session recordings. These tools may set cookies in your browser.

Where we ask first. If you visit from Quebec, the European Union or European Economic Area, the United Kingdom or Switzerland, or we cannot tell where you are, a banner asks you before we turn on analytics or session recordings. Both stay off until you accept.

Everywhere else. Google Analytics is on by default and we do not show a cookie banner. Session recordings are off unless you turn them on. You can switch analytics off at any time with Privacy choices, in the footer of every page and below.

To decide whether to ask you first, our host works out your approximate location from your IP address when you first arrive. We use that only to decide whether to show the banner, and we do not store it.

• If your browser sends a Global Privacy Control signal, we treat it as an opt-out and keep analytics and recordings off until you choose otherwise.
• Your choice is stored in your browser and applied on future visits. Turning session recordings off takes effect from the next page you open.
• We do not use these tools to identify you personally.
• The spam check on our contact and audit forms is a security measure, not analytics, so it runs whatever you choose.
• You can change your choice at any time with Privacy choices, or by clearing cookies and site data for this site in your browser.

How we use information

To respond to your enquiry, schedule a call, or provide services under contract.

To maintain the security and performance of our website and client campaigns, including screening form submissions for automated spam.

To comply with legal, tax and auditing obligations.

Legal bases (GDPR)

Where applicable, we rely on your consent, the performance of a contract, our legitimate interests in operating the business, or compliance with a legal obligation.

Sharing & subprocessors

We share information with a short list of vetted subprocessors (hosting, email, analytics, CRM and spam protection), each bound by data protection terms. A current list is available on request.

The measurement tools we use are Google (Google Analytics and Google Tag Manager), Hotjar and Microsoft (Clarity). Hotjar and Clarity run only if you allow session recordings.

The spam check on our contact form is provided by Cloudflare, Inc. through its Turnstile service. Cloudflare acts as our processor for that check and describes how it handles the data in its Turnstile Privacy Addendum.

We do not share personal data with advertising networks in ways that would identify an individual client, patient, or prospective buyer.

Retention

Marketing enquiries are retained for up to 24 months from last contact. Client records are retained for the duration of the engagement and 7 years thereafter for tax and audit purposes, or as otherwise required by contract.

Your rights

Depending on your jurisdiction (PIPEDA, PHIPA, GDPR, CCPA), you may request access, correction, deletion, portability or restriction of your personal information, and withdraw consent at any time.

If you are in Quebec, analytics and session recordings stay off until you accept. If you are in California or another US state with an opt-out right, you can opt out of analytics with Privacy choices, and we treat a Global Privacy Control signal as that opt-out.

To exercise a right, email privacy@helpmemarketing.com. We respond within 30 days.

Security

We use encryption in transit and at rest, role-based access, MFA on all accounts with access to client data, and quarterly access reviews. Incidents are disclosed under applicable breach-notification laws.

Our contact form is screened for automated submissions by Cloudflare Turnstile, together with our own checks.

International transfers

Data may be processed in Canada, the United States and the European Economic Area. Cross-border transfers are governed by Standard Contractual Clauses or equivalent safeguards.

Cloudflare's spam check runs on its global network, so that step may be processed in the data centre nearest to you.

Changes & contact

We may update this policy. Material changes will be noted on this page with a revised "Last updated" date.

Contact: privacy@helpmemarketing.com.