Legal

Privacy Policy

This policy explains what personal information Vital Sign Digital collects, why we collect it, who we share it with and the choices you have. We follow Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada’s Anti-Spam Legislation (CASL).

Effective date: October 19, 2026

Who we are

Vital Sign Digital is a marketing agency based at 1290 Central Pkwy W, Suite #1100, Mississauga, ON L5C 4R3, operated by Kahf (“Vital Sign Digital”, “we”, “us”). Our Privacy Officer is Asfand Khan, Founder & CEO. You can reach us at asfand@vitalsigndigital.com or (647) 370-1555.

What we collect

  • Information you give us when you fill in a form, book a call or email us: your name, email address, phone number, business name, website, industry, goals, approximate marketing budget and ad spend, number of locations and anything you write in a message.
  • Booking details: the date and time you choose and the meeting link.
  • Payment details: payments are processed by Stripe. We see your name, business, billing address, the amount and the payment status. We never see or store your full card number.
  • Client account information: if you become a client, the access and information needed to deliver our services, such as your Google Business Profile, ad accounts, website and analytics.
  • Technical information: like most websites, our web hosting provider keeps standard server logs (such as IP address, browser type and pages requested) for security and troubleshooting.

Health information: we do not need, and do not ask for, any patient or client health information. Please do not include it in forms, emails or booking notes. When we work with clinics, our marketing systems are set up so they do not hold patient health information.

How we use it

  • To reply to you, arrange and hold the call you booked, and send booking confirmations and reminders.
  • To prepare audits, proposals and quotes you ask for.
  • To deliver, invoice and report on the services you buy from us.
  • To send you marketing emails, but only where you have given consent or where CASL allows it (for example, after you have asked us about our services). Every marketing email includes an unsubscribe link.
  • To keep our website and systems secure and to meet our legal and tax obligations.

We do not sell your personal information, and we do not use it for any purpose you would not reasonably expect without asking you first.

Who we share it with

We share personal information only with service providers that help us run our business, and only what they need:

  • GoHighLevel (LeadConnector): our customer relationship management, forms and booking calendar.
  • Google Workspace: email, calendar and Google Meet video calls.
  • Stripe: payment processing.
  • Our web hosting provider: hosts this website.

Some of these providers store information outside Canada, including in the United States, where it may be subject to the laws of that country. We choose providers with strong security practices. We may also disclose information if the law requires it.

Cookies

We do not currently use analytics or advertising cookies on this website. Services built into some pages, such as the booking calendar and payment pages, may set cookies they need in order to work. If we add analytics in the future, we will update this policy first.

How long we keep it

We keep enquiry and booking information for as long as needed to follow up and for up to two years after our last contact, unless you become a client. Client records and invoices are kept for as long as our agreement lasts and then for the period required by Canadian tax law (generally seven years). When we no longer need information, we delete or anonymise it.

How we protect it

We use password-protected accounts with two-step verification where available, limit access to the people who need it, and use providers that encrypt data in transit. No system is perfectly secure, but we take reasonable steps to protect your information and will tell you if a breach creates a real risk of significant harm, as PIPEDA requires.

Your choices and rights

  • Access and correction: ask us what personal information we hold about you and ask us to correct it.
  • Withdraw consent: unsubscribe from marketing emails at any time with the link in the email, or by asking us. We will still send messages needed for services you have booked or bought.
  • Deletion: ask us to delete your information where we no longer need it for a legal or business reason.

Email asfand@vitalsigndigital.com and we will respond within 30 days. If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.

Changes to this policy

We may update this policy from time to time. The effective date at the top shows when it last changed.