A ClickStarters product - Visit ClickStarters → Client Login →
Privacy & Data Practices

We take Canadian privacy law seriously.

ClickWorks is a Canadian business operating under Canadian law. This page explains how we handle data, why we take privacy seriously, and what we do to help our clients stay compliant.

Privacy isn't a checkbox. It's how we operate.

Canadian privacy legislation - including PIPEDA and provincial equivalents - sets clear standards for how businesses collect, use, and store personal information. As a Canadian company serving Canadian businesses, we consider compliance a baseline, not an optional extra.

We also recognize that global privacy norms are evolving quickly. GDPR in Europe, evolving cookie consent requirements, and Canada’s proposed Bill C-27 reforms are all pushing organizations to be more transparent and intentional about data. ClickWorks stays current on these changes and helps clients navigate them.

  • Operating under PIPEDA and applicable provincial privacy law
  • CASL-compliant communication practices by default
  • Cookie consent implementation available for client landing pages
  • Data minimization: we only collect what is needed to operate campaigns
  • Client-owned lead data: all CRM data belongs to the client

You own your lead data. Every contact, form fill, and phone lead captured through your ClickWorks campaign lives in your CRM account. It belongs to you. We never sell, share, or repurpose it.

Global privacy awareness. We monitor developments in Canadian, American, and European privacy law and proactively update our practices and client recommendations when standards shift.

PIPEDA, provincial law, and what it means for your campaigns.

The Personal Information Protection and Electronic Documents Act (PIPEDA) governs how private-sector organizations collect, use, and disclose personal information in commercial activities.

🇨🇦

PIPEDA Compliance

ClickWorks collects personal information (name, email, phone, business details) only for the purposes disclosed to the individual - specifically, to respond to their service inquiry. We do not use this data for secondary marketing without consent.

🔏

Consent-Based Collection

Every lead capture form on our client landing pages includes a clear disclosure that the submission constitutes a request for service contact. We recommend clients review and confirm this language meets their specific business and provincial requirements.

🗃️

Data Retention

Lead data is retained in the client’s CRM for the duration of the engagement and for a reasonable period thereafter. Upon contract termination, client data export is available and data can be removed from ClickWorks-managed systems on request.

🔐

Security Safeguards

Lead data is stored within enterprise-grade CRM infrastructure with industry-standard security controls, including role-based access, encryption in transit, and regular platform security audits by the underlying platform provider.

👁️

Access & Correction

Individuals who submit their information through a ClickWorks-managed landing page have the right to request access to their data or request correction. These requests should be directed to the service business (our client), who holds the data in their CRM.

📋

Accountability

ClickWorks is accountable for the personal information under its management. Questions about our data practices can be directed to us via the contact page. We respond to privacy inquiries within 10 business days.

CASL-compliant by design.

Canada’s Anti-Spam Legislation (CASL) sets strict rules around sending commercial electronic messages (CEM) - including promotional emails and, by industry interpretation, certain SMS messages. ClickWorks builds its automation workflows in alignment with CASL requirements.

Our automated follow-up sequences are triggered by an express action - a form submission that constitutes a request for contact. This provides implied consent under CASL, enabling the follow-up communication. We include unsubscribe mechanisms in all ongoing communication sequences and respect opt-out requests immediately.

  • All automated messages triggered by express consent actions
  • Business identification included in all communications
  • Unsubscribe mechanism in every email sequence
  • Opt-out requests processed immediately in CRM
  • No cold outreach lists or purchased lead data ever used

CASL does not prohibit fast follow-up. When a homeowner submits a form requesting a quote, following up immediately is both legally appropriate and expected. Our 60-second automated response is compliant and effective.

Client responsibility. CASL compliance is a shared responsibility. We build compliant workflows, but clients are responsible for their own ongoing communication practices outside of ClickWorks-managed automations.

We understand cookie consent. We can implement it.

Cookie consent requirements vary by jurisdiction. While Canadian law (currently) does not require opt-in cookie consent the way GDPR does in Europe, best practices - and growing user expectations - favour transparency.

🍪

Cookie Consent Implementation

ClickWorks has experience implementing cookie consent banners on client landing pages and existing sites. We can configure consent management that complies with GDPR requirements for any clients with European site visitors, and meets Canadian best-practice standards for all others.

Cookie consent can be scoped to apply to Google Analytics, Google Ads conversion tracking, remarketing pixels, and any third-party scripts on the landing page network.

📊

Analytics & Tracking Transparency

Every ClickWorks campaign uses Google Tag Manager (GTM) and Google Analytics 4 (GA4) for conversion tracking and performance measurement. These tools collect anonymized usage data about visitor behaviour.

We configure GA4 with IP anonymization enabled by default and advise clients on their obligations to disclose analytics tracking in their privacy policy. We can help draft or update a compliant privacy disclosure on request.

If your business serves European customers or operates in a jurisdiction with opt-in cookie consent requirements, please mention this during onboarding. We will configure a cookie consent management platform (CMP) for your landing pages at no additional charge.

The tools we use, and their data practices.

ClickWorks integrates with several third-party platforms to deliver our service. Each has its own privacy and data handling commitments.

🔍

Google Ads & Google Tag

Google Ads and Google Tag Manager are used to run advertising campaigns and track conversions. Data collected is governed by Google’s privacy policy. ClickWorks configures these tools with privacy best practices, including IP anonymization and restricted data processing where available.

📱

CRM Platform (GoHighLevel)

Lead and contact data is stored in a GoHighLevel-powered CRM. GoHighLevel maintains SOC 2-aligned security practices. All client data is stored in accounts owned and controlled by the client. ClickWorks holds a managed access role but does not independently own or control client data.

📁

Google Drive Workspace

Client collaboration, billing statements, and campaign reporting are shared via Google Drive. Files shared in this workspace are governed by Google’s privacy and data handling policies. Clients control their own Drive folder and can revoke access at any time.

What we collect on clickworks.ca.

We’re happy to talk through our data practices.

If you’re evaluating ClickWorks and have questions about how we handle your customers’ data, we’re an open book. Contact us any time.

Contact Us →
Get a Free Quote → 📞
🔧 Try the Demo