Last updated: 28 July 2026
This policy explains what personal information 7 Riverside collects when you use this website or work with us, why we collect it, and what you can ask us to do with it. It is written to be read, not to be survived.
7 Riverside is a digital marketing agency operating in Toronto, Ontario, Canada. In this policy «we», «us» and «our» mean 7 Riverside; «you» means anyone visiting 7riverside.ca or contacting us.
We are the party responsible for the personal information described here. We do not have a designated Data Protection Officer, because we are not required to appoint one. Questions go to the address in section 12 and reach a person, not a queue.
If you become a client, you may grant us access to advertising, analytics or CRM accounts that contain personal information about your own customers. We access that data only to perform the services you have engaged us for, we do not copy it into our own systems beyond what reporting requires, and you remain responsible for it as the controller. Our access ends when the engagement does.
| Purpose | Legal basis |
|---|---|
| Answering your enquiry, preparing an audit or proposal | Steps taken at your request before entering a contract |
| Delivering services you have engaged us for | Performance of a contract |
| Sending marketing emails you have asked for | Your consent, withdrawable at any time |
| Understanding how the site is used and improving it | Our legitimate interest in running a functioning website |
| Meeting tax, accounting and legal obligations | Legal obligation |
We do not sell your personal information. We have never done it and there is no version of this business where that changes.
This site uses cookies and similar technologies. Some are necessary for the site to work; the rest help us understand what people actually do here and measure whether our advertising is worth what it costs.
You can block or delete cookies in your browser settings. Blocking essential cookies will break parts of the site; blocking the others will not. You can also opt out of Google Analytics through the browser add-on Google provides.
We share personal information only with service providers who help us run the business, and only to the extent they need it. Each of them is bound by their own terms and, where required, by an agreement with us.
We may also disclose information where the law requires it, or where it is necessary to establish or defend a legal claim.
Some of these providers store or process data outside Canada, including in the United States. Where that happens, the information is subject to the laws of that country and may be accessible to its authorities. We rely on the providers' contractual safeguards for those transfers.
| Information | Retention |
|---|---|
| Enquiries that did not become clients | 24 months from last contact |
| Client records and correspondence | 7 years after the engagement ends, for tax and legal reasons |
| Newsletter subscribers | Until you unsubscribe, then 12 months to honour the opt-out |
| Website analytics | 26 months, then aggregated |
Under Canadian privacy law, and under the GDPR if you are in the European Economic Area or the UK, you can ask us to:
Write to the address in section 12 and we will respond within 30 days. There is no charge. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada, or to your local supervisory authority if you are in the EEA or the UK.
We send marketing emails only to people who asked for them, in line with Canada's anti-spam legislation. Every email includes an unsubscribe link that works immediately and does not require you to explain yourself. Unsubscribing does not affect emails about work we are doing for you.
We use encrypted connections, access controls and two-factor authentication on the systems that hold personal information, and we limit access to those who need it. No system is perfectly secure, and we will not pretend otherwise. If a breach affects your information in a way that creates a real risk of significant harm, we will notify you and the Privacy Commissioner as the law requires.
This site is intended for business audiences and is not directed at children under 13. We do not knowingly collect their personal information. If you believe a child has provided us with information, contact us and we will delete it.
When this policy changes we update the date at the top. If a change materially affects how we handle your information, we will say so on the site and, where we hold your address, by email. Older versions are available on request.
Questions, requests or complaints about privacy go to:
We answer privacy requests within 30 days, as required by Canadian law. Usually much sooner.
