The legal stuff, without the legalese

Privacy policy

Last updated September 30, 2026

The short version is that I collect only what I need to help you, I never sell your information, and you can ask me what I have about you or ask me to delete it, any time, by emailing hello@stacyyourbizbff.com.

Who I am

Stacy Your Biz BFF is a registered sole proprietorship in Ontario, Canada. I build websites, set up and look after Google Business Profiles, and handle social media and ads on Facebook, Instagram and Google for owners of local service businesses. This policy explains how I handle personal information on this website (stacyyourbizbff.com) and in my work, in line with Canada's federal privacy law, the Personal Information Protection and Electronic Documents Act (PIPEDA).

The person accountable for privacy here is me, Stacy Walton, the owner. Email is the fastest way to reach me, at hello@stacyyourbizbff.com, and my mailing address is available on request.

What I collect

What you tell me on the Free Online Audit form. That's your name, your business name, what kind of business you run, your email, your mobile number and any links you add (your website, your Instagram and your Facebook). It's also your answers about where your business is located, your rough annual revenue range if you share it, where most new customers come from, the one thing you want in the next 90 days, what's going on in the business, whether you're ready to put money into fixing what the audit finds and when you'd like to start, plus whether you ticked the box for my tips.
How you found the page. If the link you clicked had a label on it, for example from one of my ads, my business card or a post, the form saves that label (it's the part of the link called utm_source, utm_medium, utm_campaign or src) so I know which ones work. Those labels never include your name or anything personal. The form also saves which next step it showed you, like the calendar or the email screen, and a short note for me that helps me plan the call.
Booking a call. If you pick a time, Calendly collects the time you picked and anything you type there. To save you typing it twice, the page passes your name and email from the form to Calendly so they're already filled in.
What you send me directly. Anything you share by email, text, phone or on our calls.
Client work. If you hire me, you may give me access to business accounts (for example your website, Google Business Profile or social media) so I can do the work we agreed on. I only use that access for the work, and only for as long as we're working together.
Basic technical data. Like almost every website, my hosting provider automatically logs basic technical details of visits (such as IP address and browser type) to keep the site running and secure.
Ad measurement, only if you say yes. If you accept the cookie banner, the Meta Pixel tells Meta which pages you visited here, whether the form sent you through to my calendar, and whether you booked a call. There's more on this under Cookies and the Meta Pixel.

Why I collect it

To look your business up and prepare your Free Online Audit
To check that a call makes sense and to plan it. Your revenue and budget answers are only used for that
To email you about your Free Online Audit and your call, including the reminders before it, and to text you about the call if I need to
To send you my tips by email, only if you ticked the box
To see which of my Facebook and Instagram ads bring people here, only if you click Accept on the cookie banner
To do the work you hire me for
To keep basic business records (like invoices) that the law requires

That's it. I never sell or rent your information to anyone.

Emails and texts

When you send the Free Online Audit form, you're asking me to review your business, so I'll email you about your Free Online Audit and your call, and I might text you about the call too. That includes things like your booking details and the reminder emails Calendly sends before the call. If the timing isn't right yet, or a call isn't the best next step, I may follow up with you myself by email about your Free Online Audit in the weeks after, and you can reply to any of those and tell me to stop. If I ever text you, it comes from my business number, and you can reply STOP and the texts stop.

My tips list is separate, and it's opt-in only. If the tips box is on the form, you're only added if you tick it, the box is never ticked for you, and every tips email has an unsubscribe link. Every email and text from me says who it's from and how to reach me. The form keeps a record of when you sent it and whether you ticked the tips box, so there's a clear record of what you said yes to.

By sending a form on this site, booking a call or hiring me, you're consenting to me using your information for the purposes above. You can withdraw that consent at any time by emailing me, and I'll stop, subject to any records I'm legally required to keep.

Cookies and the Meta Pixel

This site doesn't set advertising or tracking cookies unless you say yes. To see which Facebook and Instagram posts and ads actually bring people here, I can use a tool from Meta (the company that owns Facebook and Instagram) called the Meta Pixel.

The Pixel only runs if you say yes. When it's switched on, you'll see a small banner the first time you visit, and if you click Accept, the Pixel loads and tells Meta that this browser viewed a page here, went through to my calendar after the Free Online Audit form, or booked a call. If the form points you somewhere other than the calendar, the Pixel isn't told anything about that. I've set it up so it doesn't send your form answers, your name, your email or your phone number. Meta may set its own cookies (like one called _fbp) and may connect the visit to a Facebook or Instagram account you're logged into, and it handles that under Meta's privacy policy. If you click No thanks, or you never click anything, the Pixel doesn't load at all, and if you say yes and change your mind later, I delete the Facebook cookie too. If you never saw a banner, the Pixel isn't running on this site.

Your browser remembers your choice (in its own storage on your device, not in a cookie) so you're not asked on every page. You can change your mind any time with the button below, or by clearing this site's data in your browser.

The booking calendar (Calendly) may set its own cookies to make scheduling work, and those are covered by Calendly's privacy policy.

Who else touches your data

I use a small number of trusted service providers to run my business. They each process some of your information on my behalf, under their own security and privacy commitments.

Netlify hosts this website and receives and stores what you send on the Free Online Audit form
Calendly handles call booking, sends the booking confirmation and the reminder emails before the call, and gets your name and email from the form so they're filled in for you
Google provides my business email and video calls (Google Meet)
Meta (Facebook and Instagram) runs the Meta Pixel, only if you click Accept
The phone service behind my business number carries any text I send you about your call
AI tools help me prepare for our call and do the work. That can include your form answers as well as public information about your business, like your Google listing, your website, your Instagram and your Facebook. I use established providers (for example Claude, made by Anthropic), and the tools I use may change over time. They don't use what I share to contact you, and I review everything myself before you see it

Most of these providers are in the United States, so your information may be stored or processed outside Canada and can be subject to the laws of those countries while it's there. I choose established providers with strong security practices, and this site is served over an encrypted connection (HTTPS).

How long I keep things

Only as long as I need them. Free Online Audit answers and inquiries I keep for up to 12 months after we last spoke, and then I delete them. Client information I keep for the length of our work together plus whatever business records tax law requires me to hold. You can also ask me to delete your information sooner.

How I protect it

Your information lives in a small number of reputable, access-controlled services, and I'm the only person on my side with access. The providers listed above only see the part they need to do their job, and nothing is stored on paper or shared beyond them. No system is perfectly secure, but if I ever became aware of a breach creating real risk of harm, I would notify you and the Privacy Commissioner as PIPEDA requires.

Your rights

You can ask me, at any time, for any of these.

What personal information I have about you
To correct it if it's wrong
To delete it
To stop using it (withdraw consent)

Email hello@stacyyourbizbff.com and I'll respond within 30 days. If you're ever unhappy with how I've handled your information, you also have the right to complain to the Office of the Privacy Commissioner of Canada.

A few last things

This site isn't directed at children, and I don't knowingly collect information from anyone under 18. If I update this policy, the new version will be posted here with a new date at the top. If I ever make a change that meaningfully affects information you've already given me, I'll tell you directly.