Privacy Policy

Zrafted Inc. (“Zrafted,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information entrusted to us.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you:

• Visit zrafted.com or another website operated by Zrafted;
• Complete a website form, advertising lead form, or consultation request;
• Communicate with us by email, phone, SMS, WhatsApp, social media, or another channel;
• Request a proposal, quotation, audit, or consultation;
• Purchase or use our products or services;
• Subscribe to our communications; or
• Otherwise interact with Zrafted.

This policy is intended to reflect applicable Canadian privacy requirements, including the Personal Information Protection and Electronic Documents Act (“PIPEDA”), where applicable.

1. Information We Collect

The information we collect depends on how you interact with us.

Information You Provide

We may collect:

• Your name;
• Business or company name;
• Job title;
• Email address;
• Telephone number;
• Mailing or business address;
• Website address;
• Social media information;
• Project requirements;
• Service interests;
• Budget and anticipated timeline;
• Messages, inquiries, feedback, and consultation notes;
• Billing and transaction information;
• Information contained in documents or files you provide;
• Account, website, platform, or system access information required to deliver contracted services; and
• Any other information you voluntarily provide.

Please do not provide confidential passwords or sensitive personal information through a general website or advertising form. Secure access information should only be shared through a method approved by Zrafted.

Information Collected Automatically

When you visit our websites, we and our technology providers may automatically collect:

• IP address;
• Browser and device type;
• Operating system;
• Approximate geographic location;
• Referring website or campaign;
• Pages viewed;
• Links or buttons selected;
• Time spent on the website;
• Date and time of access;
• Advertising identifiers;
• Cookie identifiers; and
• Website performance, diagnostic, and security information.

We may collect this information using cookies, pixels, tags, analytics tools, server logs, and similar technologies.

Information Received From Other Sources

We may receive personal information from:

• Meta platforms, including Facebook and Instagram lead forms;
• Google and other advertising or analytics platforms;
• Referral partners;
• Social media platforms;
• Public business directories;
• Ecommerce and website platforms;
• Customer relationship management systems;
• Scheduling and communication platforms; and
• Other third parties where you have authorized the disclosure or where permitted by law.

When you submit information through a third-party platform, that platform may also process your information according to its own privacy policy.

2. How We Use Personal Information

Zrafted may use personal information to:

• Respond to inquiries and consultation requests;
• Contact prospective and existing clients;
• Understand your business requirements;
• Prepare proposals, estimates, audits, and recommendations;
• Provide website, ecommerce, marketing, automation, IT, and related services;
• Create and manage client accounts and projects;
• Process payments and maintain transaction records;
• Provide technical support and website maintenance;
• Schedule meetings and follow-up communications;
• Send requested resources, service information, and updates;
• Send promotional communications where we have the required consent or another lawful basis;
• Personalize website and advertising experiences;
• Measure marketing and advertising performance;
• Improve our websites, services, processes, and customer experience;
• Detect fraud, abuse, technical problems, and security threats;
• Enforce contracts and protect our legal rights;
• Meet accounting, tax, regulatory, and legal obligations; and
• Fulfil other purposes identified when the information is collected.

We limit the collection and use of personal information to purposes that a reasonable person would consider appropriate in the circumstances.

3. Meta Lead Advertising

Zrafted may use lead-generation forms on Facebook, Instagram, and other Meta services.

When you complete one of these forms, Meta may provide Zrafted with information such as your name, email address, telephone number, company name, website, service interests, project details, budget, and timeline.

We use this information to:

• Respond to your request;
• Assess your service requirements;
• Provide information, recommendations, or quotations;
• Schedule a consultation;
• Follow up regarding your inquiry; and
• Send marketing communications where permitted and where the required consent has been obtained.

Your use of Meta services remains subject to Meta’s own terms and privacy policy. Zrafted does not control how Meta independently collects or uses information on its platforms.

4. Email, SMS, Phone, and WhatsApp Communications

If you submit an inquiry, request a consultation, become a client, or otherwise authorize us to contact you, we may communicate with you by email, telephone, SMS, WhatsApp, or another method you provide.

Commercial electronic messages will be sent only where we have the required consent or are otherwise permitted to do so under applicable law.

You may withdraw your consent to marketing communications at any time by:

• Using the unsubscribe link included in an email;
• Replying “STOP” to an eligible SMS message;
• Replying to the communication with an unsubscribe request; or
• Contacting Zrafted using the details at the end of this policy.

Withdrawing marketing consent will not prevent us from sending transactional, contractual, security, billing, or service-related communications when necessary.

Message and data rates may apply to SMS or WhatsApp communications.

5. Cookies and Similar Technologies

Our websites may use cookies and similar technologies for:

• Essential website functionality;
• Security and fraud prevention;
• Remembering visitor preferences;
• Understanding website usage;
• Measuring traffic and conversions;
• Improving website performance;
• Personalizing content;
• Measuring advertising campaigns; and
• Delivering or measuring relevant advertising.

These technologies may be provided by services such as Google, Meta, Microsoft, website hosting providers, or other analytics and advertising partners.

You can manage cookies through your browser settings and, where available, through our website’s cookie-preference controls. Disabling certain cookies may affect website functionality.

You may also manage advertising preferences directly through the relevant advertising platform.

6. Consent

We obtain consent for the collection, use, and disclosure of personal information where required.

Consent may be express or implied depending on:

• The sensitivity of the information;
• The reason it is being collected;
• Your relationship with Zrafted; and
• Applicable legal requirements.

You may withdraw consent, subject to reasonable notice and any legal or contractual restrictions. Withdrawal may affect our ability to provide certain services.

7. How We Share Personal Information

Zrafted does not sell or rent personal information.

We may disclose information to service providers that help us operate our business, including providers of:

• Website hosting and infrastructure;
• Cloud storage;
• Customer relationship management systems;
• Email and communication services;
• SMS and telephone services;
• Scheduling tools;
• Payment processing;
• Accounting;
• Website analytics;
• Digital advertising;
• Cybersecurity;
• Automation tools;
• Project management; and
• Professional, legal, or technical services.

These providers may only receive the information reasonably required to perform their services.

We may also disclose information:

• With your consent or at your direction;
• To comply with a court order, legal process, or regulatory requirement;
• To investigate fraud, security incidents, or unlawful activity;
• To protect Zrafted, our clients, users, or the public;
• To establish, exercise, or defend legal claims;
• During a proposed or completed business transaction, such as a merger, financing, acquisition, reorganization, or sale of assets; or
• Where otherwise permitted or required by law.

8. Client Data Processed Through Our Services

When Zrafted provides website development, ecommerce, managed IT, marketing, automation, virtual-assistant, or related services, we may process information on behalf of a client.

This may include information relating to the client’s customers, employees, users, leads, transactions, or systems.

In these circumstances:

• The client generally determines why and how the information is collected and used;
• Zrafted processes the information to deliver the contracted services;
• The client is responsible for its own privacy notices, consent practices, and legal obligations; and
• Requests relating to information controlled by a Zrafted client may need to be directed to that client.

Zrafted will use client-controlled information only as required to provide services, follow documented instructions, protect systems, comply with the law, or fulfil contractual obligations.

9. Payments

Payments may be processed through third-party payment providers, such as Stripe or another provider selected for the transaction.

Zrafted does not ordinarily receive or store complete payment-card numbers. Payment providers process payment information according to their own privacy policies and security practices.

We may retain invoices, payment status, billing contact details, transaction references, and other records required for accounting, tax, dispute-resolution, and legal purposes.

10. International Processing

Zrafted works with team members and service providers in Canada and other countries.

As a result, personal information may be accessed, processed, or stored outside your province or country. Information processed in another jurisdiction may be subject to that jurisdiction’s laws and may be accessible to courts, governments, or law-enforcement authorities in accordance with local law.

Zrafted uses reasonable contractual, administrative, and technical measures to protect information entrusted to service providers.

11. Information Security

We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information.

These measures may include:

• Access restrictions;
• Password protection;
• Multi-factor authentication where available;
• Secure hosting and cloud services;
• Encryption where appropriate;
• Software and system updates;
• Internal confidentiality requirements;
• Limited access based on business need; and
• Security monitoring and incident-response procedures.

No internet transmission or electronic storage system can be guaranteed to be completely secure. Accordingly, we cannot guarantee absolute security.

12. Data Retention

We retain personal information only for as long as reasonably necessary to:

• Provide requested or contracted services;
• Maintain business and project records;
• Complete transactions;
• Meet legal, accounting, tax, and regulatory requirements;
• Resolve disputes;
• Enforce agreements;
• Prevent fraud and maintain security; and
• Fulfil the purposes described in this policy.

When information is no longer required, we may securely delete, destroy, or anonymize it, subject to technical, legal, and contractual limitations.

13. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

• Ask whether we hold personal information about you;
• Request access to your personal information;
• Request correction of inaccurate or incomplete information;
• Withdraw consent where processing is based on consent;
• Opt out of marketing communications;
• Ask questions about how your information has been used or disclosed;
• Request deletion of certain information, subject to legal and contractual limitations; and
• Challenge our compliance with applicable privacy requirements.

We may need to verify your identity before completing a request. In some circumstances, access or deletion may be limited by law, privilege, security requirements, the rights of another person, or our legitimate record-retention obligations.

14. Children’s Privacy

Our websites and services are intended for businesses and adults. They are not directed toward children under 13, and we do not knowingly collect personal information from children through our business websites.

If you believe a child has provided personal information to us without appropriate authorization, please contact us.

15. Third-Party Websites

Our websites may contain links to third-party websites, platforms, plugins, or services.

Zrafted is not responsible for the content, security, or privacy practices of third parties. We encourage you to review their privacy policies before providing personal information.

16. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our services, technology, business practices, or legal obligations.

The updated version will be posted on our website with a revised “Last updated” date. Material changes may also be communicated through other reasonable methods where appropriate.

17. Contact Zrafted

Questions, complaints, access requests, correction requests, and consent-withdrawal requests may be directed to:

Contact Information: https://zrafted.com/contact

Please include enough information for us to understand and respond to your request. Do not include sensitive passwords or unnecessary confidential information in your initial message.

We will review privacy concerns and respond within a reasonable period, subject to applicable legal requirements.