Privacy  Policy

This policy explains how BoldZee Tech Ventures Inc. (“BoldZee”, “we”, “us”), a company incorporated in British Columbia, Canada, collects, uses, discloses and protects personal information. It applies to boldzee.com, to reports.boldzee.com, and to every service we sell.

We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), British Columbia's Personal Information Protection Act, Quebec's Law 25 where it applies, and applicable United States state privacy laws including the California Consumer Privacy Act as amended.

Our Privacy Officer can be reached at privacy@boldzee.com.

We collect the following categories of information.

Information you give us when you order. Your name, business name, email address, billing address and the details you enter into the intake form: the URL to be reviewed, your goal for it, your primary call to action, your current challenge, your target audience, your traffic source and any notes you add.

Payment information. Handled by our payment processor. We receive confirmation that a payment succeeded, the amount, the currency and the last four digits of the card. We never receive or store full card numbers.

Information about your website or account. The public content of the pages you ask us to review, technical measurements taken from them, screenshots, and, where a service requires it and you grant it, read access to an analytics or advertising account. This is covered in more detail in section 05.

Information collected automatically. IP address, browser and device type, pages viewed, referring source and interactions with the site, gathered through cookies and analytics as described in section 04.

Information you send us directly. Anything in an email, a contact form submission or a support conversation.

Information from third parties. Order and account details from our e-commerce platform, and engagement data from our email platform such as whether a message was opened.

We use personal information for the following purposes and no others:

We use cookies and similar technologies for three purposes: to make the site function, including the cart and checkout; to understand how the site is used through analytics; and, where you consent, to measure the performance of our advertising.

Essential cookies are required for the site to work and cannot be switched off. Analytics and advertising cookies are optional, and where required by law we ask for your consent before setting them. You can change your choice at any time through our cookie settings, and you can block or delete cookies in your browser, though doing so may prevent checkout from working.

Performing an audit means examining the asset you submit. Depending on the service, this may include loading and crawling the pages within scope, measuring their technical performance, capturing screenshots and recordings of them, and reviewing their public content and code.

Where a service states that account access is required, such as read access to an analytics or advertising account, you grant that access at your discretion and may revoke it at any time after delivery. We ask for the lowest level of access that allows the work to be done, we do not change settings in your accounts unless the service you bought is an implementation service that says we will, and we do not access anything outside the scope on the product page.

Screenshots and measurements taken during an audit are stored with your report. If your site displays personal information publicly, it may appear incidentally in a screenshot; we redact it where we notice it, and you can ask us to redact anything you spot.

Our services do not require access to your customers' personal information, and we ask you not to provide it. Please do not send us customer lists, exports, database dumps, payment card data, health information, government identification numbers or other sensitive personal information.

If you send us material of this kind, we will tell you, and we will delete it rather than store it, unless doing so would compromise work already in progress. Where an implementation service genuinely requires access to a system containing customer data, we will say so on the product page and agree the handling with you in writing before we start.

We use a small number of service providers to run the business. Each receives only what it needs, is bound by contract to protect it, and may not use it for its own purposes.

BoldZee operates from Canada. Some of our service providers store or process information in the United States and other countries, which means information may be transferred outside the province and outside Canada, and may be accessible to authorities in those countries under their laws.

We select providers that offer protection comparable to what is required here, and we contract for that protection. If you would like a list of the countries where your information may be processed, email privacy@boldzee.com and we will tell you.

We keep personal information only as long as it serves the purpose it was collected for, or as long as the law requires.

We apply security measures proportionate to the sensitivity of what we hold: encryption in transit, access limited to the people who need it, individual accounts with multi-factor authentication, private unlisted links for delivered reports, and vetted providers for storage and processing.

No system is perfectly secure, and we do not claim otherwise. If a breach occurs that creates a real risk of significant harm, we will notify you and the relevant privacy regulators as the law requires, and we will tell you what happened rather than minimising it.

We derive anonymised, aggregated insight from the work we perform, in order to improve our services and to build benchmark datasets describing common patterns across the businesses we review.

This data never identifies you, your business, your URLs or any individual, and it cannot be reversed to do so. We will not publish your name, your logo, your report or any identifiable detail as a sample, case study or marketing material without your prior written permission.

We send marketing email only where you have consented, in line with Canada's Anti-Spam Legislation. Every marketing message carries an unsubscribe link that works immediately and permanently, and we identify ourselves and our contact details in every message.

Messages about an order you placed, such as confirmations, status updates and delivery, are transactional rather than marketing, and you receive them regardless. If you unsubscribe from marketing, you will still receive those.

You have the right to:

Our services are sold to businesses and are not directed at children. We do not knowingly collect personal information from anyone under the age of majority in their jurisdiction. If we learn that we have, we delete it.

We use artificial intelligence tools to accelerate parts of our analysis, such as processing technical measurements and organising findings. A specialist reviews, authors and is responsible for every report and every recommendation we deliver. AI does not produce the deliverable and does not replace professional judgment.

We do not use AI to make automated decisions about individuals that produce legal or similarly significant effects. We do not use your personal information to train publicly available AI models. Where a tool is used to process material you submit, we select providers that do not train their models on customer data.

We may update this policy. The updated date at the top of the page always reflects the current version. Where a change materially affects how we handle your personal information, we will notify you directly rather than relying on you noticing.

Contact our Privacy Officer at privacy@boldzee.com with any question, concern or complaint. We take complaints seriously and will investigate and respond in writing.

If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada, to the Office of the Information and Privacy Commissioner for British Columbia, to the Commission d'accès à l'information du Québec if you are in Quebec, or to the privacy regulator in your own jurisdiction. We will tell you how to reach the relevant one if you ask.