Legal

Privacy Policy

Last updated August 31, 2026

Papaya Group Inc. ("Papaya Group", "we", "us") operates papayagroupinc.co. This policy explains what personal information we collect, why we collect it, how we use it and what rights you have over it. We handle personal information in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), and where the General Data Protection Regulation (GDPR) applies to visitors in the European Union and the United Kingdom, we honour those rights as well.

Who is responsible for your information

Papaya Group Inc. is the organisation responsible for the personal information described here.

What we collect

Information you give us. When you complete a form on this site, book a call with us or email us, we collect the details you provide. That typically includes your name, work email address, company name, website, the service you are interested in, an indicated budget range and whatever you write in the message field.

Information collected automatically. When you visit the site we and our analytics providers may collect your IP address, browser type and version, device type, operating system, referring page, the pages you view, and the time and date of your visit. This is used in aggregate to understand how the site performs.

Booking information. Discovery calls are scheduled through a third party booking tool. When you book, that tool collects your name, email address, chosen time slot and any answers you give to its intake questions, and shares them with us.

We do not knowingly collect information from anyone under the age of 16, and we do not collect sensitive categories of personal information.

Why we use it

  • To reply to your enquiry and to run the discovery call and audit you asked for.
  • To prepare and send a proposal, and to deliver work you have engaged us for.
  • To manage our contractual and accounting obligations, including invoicing.
  • To understand how the website is used so we can improve it.
  • To send occasional updates, only where you have asked to receive them.

Where the GDPR applies, our legal bases are your consent (for optional analytics and any marketing email), the performance of a contract or steps taken at your request before entering one (for enquiries, proposals and delivery), our legitimate interest in operating and improving our business, and compliance with legal obligations such as tax record keeping.

How long we keep it

Enquiries that do not become a client relationship are kept for up to 24 months and then deleted. Client records are kept for the duration of the engagement and for seven years afterwards, which is the retention period required for Canadian business and tax records. Website analytics data is retained according to the settings of the analytics tool, typically 14 months.

Who we share it with

We do not sell personal information and we never have. We share it only with service providers who help us run the business, and only to the extent they need it. These currently include our website host, our email provider, our booking tool, our analytics provider, our CRM and our accounting software. Each of these processes information on our instructions and under contract.

We may also disclose information where we are required to by law, by a court, or by a regulator, and in connection with a merger, acquisition or sale of assets, in which case you would be notified.

International transfers

We are based in Canada and some of our service providers are located in the United States and the European Union. Where personal information is transferred outside your country of residence, we rely on the recipient's own adequacy status, on Standard Contractual Clauses, or on comparable safeguards. Canada holds an adequacy decision from the European Commission for commercial organisations subject to PIPEDA.

Cookies

This site uses cookies and similar technologies. Strictly necessary cookies keep the site working and cannot be switched off. Analytics cookies help us understand which pages are used and where visitors drop off. Any advertising or conversion tracking cookies are used to measure the performance of campaigns we run.

You can block or delete cookies through your browser settings at any time. Blocking strictly necessary cookies may stop parts of the site from working.

Your rights

Depending on where you live, you have some or all of the following rights over your personal information:

  • To be told what we hold about you and to receive a copy of it.
  • To have inaccurate information corrected.
  • To have your information deleted where we have no continuing need for it.
  • To restrict or object to certain processing, including direct marketing.
  • To receive your information in a portable format.
  • To withdraw consent at any time, without affecting processing carried out before withdrawal.

To exercise any of these, email hello@papayagroupinc.co. We will respond within 30 days. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada, or to your local supervisory authority if you are in the European Union or the United Kingdom.

Security

We use industry standard measures to protect personal information, including encryption in transit, access controls limited to the people who need the data, and reputable providers for hosting and storage. No system is perfectly secure, and we cannot guarantee absolute security, but we take this seriously and we will notify you and the relevant authority without undue delay if a breach creates a real risk of significant harm.

Third party links

This site links to third party websites and tools, including our booking calendar. We are not responsible for their privacy practices and we encourage you to read their policies before providing information to them.

Changes to this policy

We may update this policy from time to time. The version in force is always the one published here, with the date shown at the top of the page. Material changes will be flagged on the site.

Contact

Questions about this policy or about how we handle your information can go to hello@papayagroupinc.co or by post to Papaya Group Inc., 14 Leswyn Rd, North York, Ontario M6K 1K3, Canada.