Privacy Policy

    Last updated: January 14, 2026

    1. Introduction

    Blank Canvas Marketing ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

    We comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws. By using our website, you consent to the data practices described in this policy.

    2. Data Controller

    Blank Canvas Marketing is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, please contact us at:

    3. Information We Collect

    Personal Data

    We may collect the following types of personal data:

    • Contact information (name, email address, phone number)
    • Business information (company name, website, industry)
    • Communication preferences
    • Information provided through contact forms
    • Technical data (IP address, browser type, device information)

    Automatically Collected Data

    When you visit our website, we may automatically collect certain information including:

    • Log data (pages visited, time spent, referring URL)
    • Device information (device type, operating system)
    • Location data (country, city based on IP address)
    • Cookies and similar tracking technologies

    4. Legal Basis for Processing

    Under GDPR, we process your personal data based on the following legal grounds:

    • Consent: Where you have given explicit consent for specific purposes
    • Contract: Where processing is necessary for a contract with you
    • Legitimate Interests: Where we have a legitimate business interest that doesn't override your rights
    • Legal Obligation: Where we need to comply with legal requirements

    5. How We Use Your Information

    We use the information we collect to:

    • Provide and improve our marketing services
    • Respond to your inquiries and communication
    • Send marketing communications (with your consent)
    • Analyze website usage to improve user experience
    • Comply with legal obligations
    • Protect against fraud and unauthorized access

    6. Your Rights Under GDPR

    Under GDPR, you have the following rights:

    • Right of Access: Request a copy of your personal data
    • Right to Rectification: Request correction of inaccurate data
    • Right to Erasure: Request deletion of your personal data
    • Right to Restrict Processing: Request limitation of data processing
    • Right to Data Portability: Receive your data in a structured format
    • Right to Object: Object to processing based on legitimate interests
    • Right to Withdraw Consent: Withdraw consent at any time

    To exercise any of these rights, please contact us via our contact form.

    7. Data Retention

    We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Typically, we retain data for:

    • Contact form submissions: 3 years from last interaction
    • Marketing communications: Until you unsubscribe
    • Client data: Duration of contract plus 7 years
    • Website analytics: 26 months

    8. Data Security

    We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

    • SSL/TLS encryption for data transmission
    • Secure hosting with reputable providers
    • Regular security assessments
    • Access controls and authentication

    9. Third-Party Services

    We may share your data with trusted third-party service providers who assist in our operations:

    • Website hosting providers
    • Analytics services (Google Analytics)
    • Email marketing platforms
    • CRM systems

    All third parties are required to respect the security of your data and treat it in accordance with applicable law.

    10. International Data Transfers

    Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

    11. Changes to This Policy

    We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

    12. Contact Us

    If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

    You also have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.