Privacy Policy

Who I am and what this policy covers

Pokwala is a one-person SEO and GEO consultancy based in Ottawa, Ontario, Canada. George Mangala is the sole owner and operator. The business provides SEO optimization, website design, analytics reporting, and content management services to local businesses, primarily in the Ottawa area.

This Privacy Policy describes what personal information I collect through this website (pokwala.vercel.app), how I use it, how long I keep it, and what rights you have in relation to it. It applies to visitors and prospective clients who interact with this website.

I comply with the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's federal private-sector privacy law, and with Quebec's Act respecting the protection of personal information in the private sector (Law 25), which imposes additional obligations for anyone handling the personal information of Quebec residents.

Pokwala is responsible for personal information under its control and has implemented policies and practices to ensure compliance with applicable privacy laws.

What information I collect

Contact form

When you submit the audit request form on this website, I collect:

• Your name
• Your email address
• Your website URL
• Your business or trade type (selected from a dropdown)
• Any additional information you choose to share in the free-text field

I collect this information only when you voluntarily submit the form. You are not required to provide it. Submitting the form constitutes your express consent, in accordance with applicable privacy laws, to my collecting and using your information for the purpose of responding to your audit request.

Analytics data (Google Analytics 4)

I use Google Analytics 4 (GA4) to understand how visitors find and use this website. GA4 collects data such as pages visited, time on site, approximate geographic region, device type, browser, and traffic source. This data is collected via cookies and is processed by Google on servers located outside Canada, including in the United States.

GA4 data is aggregated and does not directly identify you by name. However, it is associated with a unique analytics identifier stored in a cookie on your device. This qualifies as personal information under both PIPEDA and Quebec Law 25.

GA4 analytics cookies are only placed on your device if you click Accept cookies on the consent banner displayed when you first visit the site. If you click Decline cookies, no analytics cookies are set and no GA4 data is collected about your visit.

Information I do not collect

I do not collect payment information, government ID, health data, or any other sensitive categories of personal information. I do not currently use email marketing platforms, CRM systems, or advertising networks. I do not buy or sell personal information.

How I use your information

I use the personal information I collect for the following purposes:

• To respond to your audit request and communicate with you about my services
• To prepare the free SEO audit you requested
• To answer questions you send me through the contact form
• To understand how visitors use this website so I can improve it (GA4, analytics only with your consent)

I do not use your personal information for automated decision-making, profiling, or any purpose other than those listed above. I do not send unsolicited marketing emails.

Cookies and consent

This website uses two categories of cookies.

Strictly necessary cookies

These cookies are required for the website to function, for example to remember your cookie preference. They do not track user behaviour for analytics or marketing purposes and do not require your consent.

Analytics cookies (GA4)

Google Analytics 4 uses first-party cookies (beginning with _ga) to distinguish visitors and track sessions. These cookies are only set if you actively accept them via the cookie banner. You may withdraw your consent at any time by clearing your browser cookies. The GA4 cookies have a standard expiry of 2 years (_ga) and 24 hours (_ga_[container-id]).

Disclosure and third-party services

I share your information only in the following limited circumstances:

Google Analytics

If you accept analytics cookies, aggregated usage data is transmitted to Google LLC (United States) pursuant to Google's data processing terms. Google's privacy policy is available at policies.google.com/privacy. This transfer is made under standard contractual clauses and Google's Data Processing Amendment. By accepting analytics cookies, you acknowledge that your data will be processed outside Canada. Personal information processed outside Canada may be subject to the laws of those jurisdictions and accessible to local authorities.

Vercel (hosting)

This website is hosted on Vercel Inc. (United States). Vercel may process technical data such as your IP address and server request logs as part of delivering the website. This is necessary for the operation of the site. Vercel's privacy policy is available at vercel.com/legal/privacy-policy.

Legal requirements

I may disclose personal information if required to do so by law, court order, or at the request of a government authority, or where necessary to protect the rights, safety, or property of Pokwala or others.

I do not sell, rent, or trade your personal information to any third party.

How long I keep your information

I retain personal information only as long as necessary to fulfill the purpose for which it was collected, or as required by law.

• Contact form submissions: retained for up to 24 months, then securely deleted
• GA4 analytics data: retained for 14 months within GA4, then automatically deleted by Google
• Email correspondence: retained for up to 24 months after the last communication

When I no longer need personal information, I delete it securely. Paper records (if any) are shredded. Digital records are permanently deleted from all devices and services where they are stored.

Your rights under PIPEDA and Quebec Law 25

You have the following rights in relation to your personal information:

• Access: you may request a copy of the personal information I hold about you
• Correction: you may ask me to correct inaccurate or incomplete information
• Withdrawal of consent: you may withdraw your consent to analytics cookies at any time (see the Cookies section above)
• Deletion: you may ask me to delete your personal information, subject to any legal obligations I may have to retain it
• Complaint: you have the right to file a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, for Quebec residents, with the Commission d'acces a l'information (cai.gouv.qc.ca)

To exercise any of these rights, contact me at the address in the Privacy Officer section below. I will respond within 30 days.

How I protect your information

I take reasonable steps to protect your personal information against loss, theft, and unauthorized access, use, disclosure, or modification. This includes transmitting all data over encrypted HTTPS connections, limiting access to personal information to George Mangala as the sole operator of Pokwala, and using reputable third-party services (Google, Vercel) that maintain their own security programs.

No method of transmission over the internet is 100% secure. If you have reason to believe your personal information has been compromised, please contact me immediately.

If a confidentiality incident involving your personal information occurs and poses a risk of serious harm, I will notify you and the appropriate regulatory authority as required by applicable law, including Quebec's Law 25.

Privacy Officer

As required under PIPEDA and Quebec Law 25, Pokwala has designated a Privacy Officer who is responsible for the protection of personal information and compliance with applicable privacy laws, including Quebec's Law 25.

If you have a question, concern, or complaint about how I handle your personal information, please contact me by email. I will acknowledge your inquiry within 5 business days and respond fully within 30 days. If you are not satisfied with my response, you have the right to escalate your complaint to the applicable privacy regulator (see Your Rights above).

Changes to this policy

I may update this Privacy Policy from time to time to reflect changes in my practices or in applicable law. When I make material changes, I will update the "Last updated" date at the top of this page. I encourage you to review this policy periodically. Your continued use of this website after changes are posted constitutes your acceptance of the updated policy.