Privacy Policy

Last updated: [DATE]. This is a template. Have a qualified lawyer review it before you publish.

AI for Small Business (https://example.com), operated by the business at Your Business Name, 123 Street, Toronto, ON, Canada, is the controller of personal information collected through this website. Contact: [email protected].

What we collect

Server logs: IP address, browser, pages visited and timestamps, kept for security and troubleshooting (up to 30 days).
Comments: the name you enter and your comment. Your email address, if requested, is stored only as a one-way hash.
Ratings: your rating and a one-way hash of your IP address to prevent duplicate votes.
Newsletter: your email address, the date and a hash of your IP address as proof of consent.
Contact form: your name, email address and message.
Cookies and similar technologies: see our cookie policy.

Why we use it, and our legal basis

We process data to run the site and respond to you (legitimate interests or contract), to send the newsletter (your consent), and to show advertising and measure usage (your consent where required by law). You may withdraw consent at any time.

Who receives it

Hosting provider: [name], servers in [country].
Mailgun (Sinch): delivers our emails.
Cloudflare Turnstile (or Google reCAPTCHA): protects forms from spam. It processes technical signals such as IP address.
Google AdSense: shows ads. Google and its partners may use cookies and similar identifiers to personalize ads where you consent. Learn more at How Google uses information. We do not sell your personal information. We do not share it for cross-context behavioral advertising except through the advertising partners above, and you can opt out using the privacy choices link in the footer or the consent message shown to you.

Retention

Newsletter data is kept until you unsubscribe, unconfirmed sign-ups are deleted after 7 days, contact messages after 12 months, and comments until you ask us to remove them.

Your rights

Europe and UK (GDPR/UK GDPR): access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and the right to complain to your supervisory authority. California and other US states (CCPA/CPRA and similar laws): the right to know, delete, correct, and to opt out of sale or sharing of personal information. We do not sell personal information. Canada (PIPEDA, CASL, Quebec Law 25): access and correction rights, and we only send commercial email with your express consent. Every email identifies us and contains a working unsubscribe link. To exercise any right, email [email protected]. We respond within 30 days.

International transfers

Our providers may process data outside your country. Where required we rely on appropriate safeguards such as standard contractual clauses.

Children

This site is not directed to children under 16 and we do not knowingly collect their data.

Security

We use HTTPS, hashed identifiers, access controls and regular backups. No system is perfectly secure.

Changes

We will post changes here and update the date above.

Last updated October 24, 2026