Privacy Policy

Last updated: August 17, 2026

Ace Consultants Canada Inc. (“Ace Consultants”, “we”, “us”) respects your privacy. This policy explains what personal information we collect through aceconsultants.ca and in the course of providing our services, how we use it, and the choices you have. We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA).

Information we collect

  • Information you give us — when you fill in our contact form, email us, or call us: your name, email address, phone number and the contents of your message. Contact-form submissions are delivered to us by email and also stored securely on our server so your inquiry is never lost.
  • Client information — when you engage our services: billing details and the business information needed to deliver the work.
  • Technical information — like most websites, our hosting infrastructure records standard server logs (IP address, browser type, pages visited) used for security and troubleshooting.

How we use your information

  • To respond to your enquiries — we aim to reply within 24 hours
  • To provide, invoice and support the services you engage us for
  • To maintain the security and performance of our website and systems
  • To send service updates you have requested

We do not sell, rent or trade your personal information. We do not send marketing email without your consent, and you can withdraw consent at any time.

Sharing of information

We share personal information only with service providers necessary to operate our business (such as web hosting and email providers), only to the extent required, or where disclosure is required by law. Service providers may store data outside Canada; where they do, it is protected by contractual safeguards.

Social media publishing for clients

Where we manage social media accounts as part of a client engagement, we publish to those accounts on the client’s behalf. This section explains what that involves and what we hold.

  • The access we ask for — to publish to a client’s Facebook Page and its connected Instagram account, the client grants us a role on their Facebook Page, using Facebook’s own settings. We do not ask for, and never hold, a client’s Facebook or Instagram password.
  • What we store — for each client: the Facebook Page ID, the Instagram business account ID, and a Facebook Page access token, which is the credential that permits posting to that Page. These are held on our own server with restricted file permissions, are never placed in source code or version control, and are never displayed in full in our administration interface.
  • What we publish — only content prepared for that client as part of an agreed engagement, at times we or the client have scheduled.
  • Images and video — Facebook and Instagram do not accept uploaded files directly; they retrieve media from a public web address. Media awaiting publication is therefore placed on a public Ace web address, where it can be retrieved by anyone who knows the exact address. These folders cannot be browsed or listed, and we do not publish the addresses.
  • How long we keep media — once an item is published, Facebook and Instagram hold their own copy, and the live post does not depend on our file. We keep the source file for seven days after publication — so a client who asks for their files that week can still be given them — and then delete it from our servers. Media still awaiting publication is never deleted.

Withdrawing access at any time. A client can end our access from their own account, without contacting us: remove our application under the Page’s Business Integrations settings, or remove our role from the Page. Either takes effect immediately and the stored credential stops working. Posts already published remain on the client’s own accounts and are unaffected — they belong to the client.

Access credentials are kept for the duration of the engagement; when an engagement ends and the client’s records are removed, the stored credentials are deleted at the same time. Preparing content may involve service providers — for example to draft caption text, generate speech or render video. They receive the material being prepared, never a client’s account credentials.

Retention and security

We keep personal information only as long as needed for the purposes above or as required by law, and protect it with appropriate technical and organizational measures, including encryption in transit (SSL/TLS), access controls and regular security updates.

Cookies and analytics

Our website uses the cookies necessary for its operation, and — only with your consent — analytics cookies (Google Analytics, loaded via Google Tag Manager) that help us understand how visitors use the site. No analytics run unless you choose “Allow analytics” in the consent banner, and declining never limits your access to the site.

You can change your choice at any time using the Cookie Preferences link in the footer, or block cookies entirely in your browser settings. Analytics data is used in aggregate to improve the site; we do not use it to identify individuals.

Your rights

You may ask us at any time to access, correct or delete the personal information we hold about you, or to stop contacting you. Write to us at info@aceconsultants.ca and we will respond within 30 days.

Contact

Questions about this policy or our privacy practices:

Ace Consultants Canada Inc.
6016 David Wiens Street, Stittsville, ON K2S 3H1
info@aceconsultants.ca · +1 343 209 6124

We may update this policy from time to time; the “Last updated” date above reflects the current version.