Privacy Policy

01. About This Privacy Policy

She’s The Niche (“STN,” “we,” “us,” or “our”) is a website design and digital marketing agency based in Thornhill, Ontario, Canada. We provide services that may include website design and development, search engine optimization (SEO), content creation, digital marketing, and Meta advertising for businesses, including those in the beauty, medical aesthetics, and wellness industries.

This Privacy Policy applies when you:

• Visit shestheniche.ca.
• Submit an inquiry or complete a website form.
• Request or book a discovery call.
• Contact us by email, telephone, text message, or social media.
• Purchase, discuss, or receive our services.
• Provide project materials, testimonials, photographs, videos, or other content.
• Subscribe to marketing communications or interact with our advertising.

We handle personal information in accordance with applicable privacy laws, including Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), where applicable, and other laws that may apply to our activities.

This policy covers information we handle for our own business operations. Information processed on behalf of a client may be subject to additional terms, as explained in Section 15.

02. Our Role in Handling Personal Information

Our own business operations

When you visit our website, contact us, inquire about our services, or enter into a business relationship with us, we use your information to manage our own operations. This may include responding to inquiries, preparing proposals, providing services, managing client relationships, processing payments, and improving our business.

Services provided to clients

While delivering website, marketing, advertising, or related services, we may access or process information on behalf of a client. In those circumstances, our client may determine the purposes for which that information is used. Our handling of the information depends on the services provided, the client's instructions, applicable law, and our agreement with that client.

Clients are responsible for ensuring that they have the necessary authority, permissions, and legal basis to provide information to us for the services requested.

03. Personal Information We May Collect

The type of information we collect depends on how you interact with us.

Contact and identification information

• Your name and business name.
• Email address and telephone number.
• Business mailing address, if provided.
• Social media usernames or professional profile links.

Business and project information

• Your website, social media links, and business details.
• Business type, services, target audience, and marketing goals.
• Project requirements, branding preferences, and design references.
• Advertising budgets, campaign objectives, and performance information.
• Information you provide when requesting a proposal or consultation.

Client and transaction information

• Services requested or purchased.
• Contracts, proposals, invoices, and payment status.
• Project timelines, correspondence, and service history.

Payments may be processed by third-party payment providers. Where a provider collects your payment card details directly, those details are handled under that provider's own terms and privacy practices.

Communications and submissions

• Emails, inquiry forms, messages, and project communications.
• Feedback, reviews, testimonials, and approved case-study materials.
• Photographs, videos, logos, written content, and other creative assets you provide.
• Information you choose to share during a discovery call or consultation.

Technical and website information

Depending on the tools and settings enabled on our website, we or our service providers may collect technical information such as your IP address, browser type, device information, referring page, pages visited, approximate location derived from technical information, and interactions with our website.

Marketing and analytics information

Where enabled and permitted by applicable law, we may collect information about website traffic, advertising interactions, campaign performance, referral sources, and engagement with our digital content.

Recruitment information

If you apply to work with us or provide services as a contractor, we may collect your resume, portfolio, work history, contact details, and other information relevant to the application.

04. How We Collect Information

We may collect personal information in the following ways:

• Directly from you: When you complete a form, contact us, book a call, sign an agreement, make a payment, or provide project materials.
• Through our website: Through server logs, cookies, analytics, and similar technologies, depending on the tools enabled and your privacy choices.
• Through social media and advertising platforms: When you interact with our profiles, advertisements, or business communications.
• From clients or business partners: When information is supplied to us to facilitate a project, referral, or service.
• From publicly available sources: Where appropriate, we may review publicly available business websites, professional profiles, or business contact information for legitimate business purposes.

05. How and Why We Use Information

We may use personal information to:

• Respond to inquiries and provide information about our services.
• Assess project requirements and prepare proposals or estimates.
• Provide, administer, and support services under our agreements.
• Communicate about projects, deadlines, payments, and deliverables.
• Manage billing, accounting, recordkeeping, and tax obligations.
• Send marketing communications where permitted by law and, where required, with your consent.
• Operate, maintain, secure, and improve our website and services.
• Measure advertising and marketing performance where permitted.
• Develop business processes and improve the client experience.
• Prevent fraud, address security issues, and enforce our agreements.
• Comply with applicable legal obligations and respond to lawful requests.

We aim to collect and use only the information reasonably necessary for identified purposes. Where consent is required, we will seek it before using personal information for those purposes.

06. Email and Marketing Communications

We may contact you about our services, business updates, offers, or other relevant information where permitted by applicable law.

Marketing emails

We send commercial electronic messages in accordance with applicable requirements, including Canada's Anti-Spam Legislation (CASL), where applicable. We will obtain consent when required. Marketing emails will include an unsubscribe mechanism and the information required by applicable law.

You can unsubscribe from marketing emails using the link in the message or by contacting us at chay@shestheniche.ca.

Text messages and telephone communications

If we offer marketing text messages or calls, we will obtain consent where required by law and provide any required disclosures. Message frequency may vary, and standard message or data rates may apply depending on your service provider.

Consent to receive marketing communications is not a condition of purchasing our services unless expressly permitted by applicable law. Where an opt-out method is provided, you may use it to withdraw your consent to marketing messages.

Service-related communications

If you are a client, we may still contact you about active projects, invoices, account administration, or other service-related matters after you unsubscribe from marketing communications.

We do not sell mobile telephone numbers or SMS consent records to third parties for their independent marketing purposes.

07. Cookies, Analytics, and Advertising Technologies

Our website may use cookies, pixels, tags, and similar technologies to support website functionality, understand website usage, and measure advertising effectiveness. The technologies in use may change as our website and services evolve.

Essential technologies

Some cookies or similar technologies may be necessary for basic website functionality, security, or features you request.

Analytics and advertising technologies

Depending on the tools enabled, we may use third-party services such as website analytics tools or the Meta Pixel to understand visits, measure advertising performance, and evaluate interactions with our website. Where required, these technologies will be subject to your consent or other applicable legal requirements.

Your choices

You may be able to manage cookies through a cookie banner or settings tool, if available on our website, and through your browser settings. You can also review privacy and advertising preferences within third-party platforms.

Blocking certain cookies may affect the operation of some website features. Browser-based opt-out signals, including Global Privacy Control, will be handled where required by applicable law.

Third-party platforms may process information according to their own privacy policies and terms. We encourage you to review those policies before interacting with their services.

08. Artificial Intelligence and Automated Tools

We may use digital tools, including artificial intelligence (AI) and automation, to assist with business administration and service delivery. Depending on the tools used, these activities may include drafting communications, organizing project information, supporting content development, managing inquiries, or assisting with scheduling.

Where personal information is processed through these tools, we aim to use it only for appropriate business purposes and subject to applicable privacy obligations and the terms of the relevant provider.

You should not send confidential information, passwords, or sensitive personal information through an AI tool or general-purpose service unless an appropriate process has been established for that information.

Where applicable law grants you rights concerning decisions made through automated processing, you may contact us to ask about the processing involved. Any applicable disclosure, review, or other obligations will be handled in accordance with the law.

09. When We Share Information

We do not sell personal information for money. We may disclose information when reasonably necessary for the purposes described in this policy, including to the following categories of recipients:

• Service providers: Website hosting providers, website platforms, email services, scheduling tools, payment processors, cloud storage providers, and business software providers.
• Marketing and advertising platforms: Platforms used to publish campaigns, manage advertising, or measure performance.
• Professional advisers: Lawyers, accountants, insurers, and other advisers where reasonably necessary.
• Clients and authorized collaborators: Where needed to deliver an agreed project or where you have authorized the sharing.
• Authorities and other parties: Where required or permitted by law, court order, legal process, or to protect rights, property, safety, or security.
• Business transaction parties: In connection with a potential or completed merger, restructuring, financing, sale, or transfer of all or part of our business, subject to applicable law.

We do not authorize service providers to use personal information they process for us for purposes unrelated to their services, except where otherwise permitted by law or agreed with you.

10. International Processing and Transfers

She’s The Niche is based in Canada. Some service providers and digital platforms we use may store or process information in Canada, the United States, or other jurisdictions.

As a result, your information may be subject to the laws of the jurisdiction where it is processed and may be accessible to courts, regulators, or law enforcement authorities in accordance with those laws.

Where appropriate, we take reasonable steps to select service providers and use contractual or other safeguards designed to protect personal information. The safeguards available depend on the provider, the type of information, and the applicable legal requirements.

Where required, we will provide additional information or obtain consent for international processing or transfers.

11. How Long We Keep Information

We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, meet contractual requirements, maintain appropriate business records, resolve disputes, and comply with legal obligations.

Retention periods vary depending on the type of information and the reason it is held. For example:

• Inquiries: Kept as needed to respond, follow up, maintain business records, and manage potential or ongoing projects.
• Client records and contracts: Kept as needed to administer the engagement, document services, and meet applicable legal or accounting requirements.
• Financial records: Retained for the periods required by applicable tax and accounting laws.
• Marketing subscriptions: Retained while appropriate for the relevant communication purpose. We may retain limited suppression records to respect unsubscribe requests.
• Website analytics: Retained according to the settings and retention policies of the analytics services in use.
• Recruitment information: Kept as needed to assess applications and meet relevant legal requirements.

When information is no longer needed, we will take reasonable steps to delete it, securely dispose of it, or de-identify it, subject to applicable legal and operational requirements.

12. How We Protect Information

We take reasonable administrative, technical, and organizational measures designed to protect personal information against loss, unauthorized access, disclosure, copying, alteration, or misuse.

The safeguards used may include access restrictions, account security measures, secure service providers, confidentiality practices, and appropriate handling of business records.

Access to personal information is limited where reasonably possible to people and service providers who need it for legitimate business purposes.

No method of transmitting or storing information is completely secure. Although we take reasonable precautions, we cannot guarantee absolute security. You should use care when transmitting information online and avoid sending sensitive information through unsecured channels.

13. Privacy Incidents and Breach Notification

If we become aware of a security incident involving personal information, we will take reasonable steps to assess, contain, investigate, and address it.

Where applicable law requires notification, we will notify affected individuals, relevant regulators, or other parties within the prescribed timeframes. We will also maintain any records of privacy breaches that we are legally required to keep.

14. Your Privacy Rights and Choices

Depending on the applicable law and the circumstances, you may have the right to:

• Request access to personal information we hold about you.
• Request corrections to inaccurate or incomplete information.
• Withdraw consent where our processing relies on consent.
• Unsubscribe from marketing communications.
• Ask questions about how your personal information is collected, used, or disclosed.
• Request deletion or restriction of certain information where applicable law provides that right.
• Exercise additional rights available under privacy laws that apply to you.

These rights are subject to applicable legal limitations, exceptions, and verification requirements. For example, we may need to retain certain information to comply with legal obligations or establish, exercise, or defend legal claims.

How to submit a privacy request

Email us at chay@shestheniche.ca with “Privacy Request” in the subject line. Please describe your request clearly. We may ask for information to verify your identity before responding.

We will respond within the time required by applicable law. If we cannot fulfill a request, we will explain the reason where required and advise you of any available complaint or review options.

Canadian privacy complaints

If you have a concern about how we handle personal information, please contact us first so we can attempt to address it.

You may also contact the Office of the Privacy Commissioner of Canada or the applicable provincial privacy regulator, depending on the circumstances and the law that applies.

If you are located outside Canada, you may have additional rights under local privacy legislation. We will consider applicable obligations when responding to requests.

15. Information We Process on Behalf of Clients

When delivering services to a client, we may access or process information that belongs to or relates to that client's customers, prospective customers, website visitors, or other contacts.

This may occur when we provide services such as:

• Website design, development, maintenance, or technical support.
• Digital advertising and campaign management.
• Website analytics or marketing performance reporting.
• Content creation and management of approved digital assets.
• Other services requiring access to a client's website or business platforms.

In these circumstances, our role depends on the service and the applicable agreement. Where we process information on a client's behalf, we generally handle it according to the client's documented instructions and our contractual obligations.

• The client is generally responsible for determining the purposes for which customer or visitor information is collected and used, and for providing any required privacy notices or obtaining any required consents.
• Requests about client-controlled information should generally be directed to the relevant client. We will reasonably assist the client where required by our agreement or applicable law.
• We do not use client information for our own unrelated marketing purposes unless authorized and legally permitted.
• Access and retention are governed by the applicable service agreement, the client's instructions, and relevant legal requirements.

We do not represent that every service we provide is designed or certified to process regulated health information. Any applicable healthcare privacy or data-processing obligations must be assessed for the particular client, service, and jurisdiction.

16. Third-Party Websites and Platforms

Our website, communications, and services may contain links to or integrations with third-party websites, booking systems, social media platforms, payment providers, advertising services, or other tools.

These third parties operate under their own terms and privacy policies. We do not control their independent privacy practices and are not responsible for their content, security, or handling of information.

We encourage you to review the relevant privacy policies before submitting personal information to a third-party website or platform.

Information you choose to publish publicly, such as a public review, comment, or social media post, may be viewed, collected, or used by other people. Consider carefully what you choose to share publicly.

17. Children's Privacy

Our services and website are intended primarily for businesses and adults. We do not knowingly seek to collect personal information directly from children under the age of 13 through our website.

If you believe a child has submitted personal information to us, please contact us at chay@shestheniche.ca. We will review the matter and take appropriate steps in accordance with applicable law.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, website, services, technology, or legal obligations.

When we make changes, we will update the “Last Updated” date at the beginning of this policy. Where required by law, we will provide additional notice or obtain consent for material changes.

We encourage you to review this page periodically so you remain informed about how we handle personal information.

19. Contact She’s The Niche

If you have questions about this Privacy Policy, how we handle personal information, or wish to submit a privacy-related request, please contact us using the details below.

She’s The Niche · Privacy Policy · Last Updated October 25, 2026