Privacy Policy

Last updated: September 16, 2026

12567351 Canada Inc. DBA Limitless Marketing ("we", "us") operates this website and provides marketing services to business clients. This policy explains what personal information we collect, why we collect it, and what we do with it.

Information we collect

• Information you give us. If you email or call us, we receive your name, contact details, and anything else you choose to share about your business.
• Technical information. Our web host records standard server logs, including IP address, browser type, and the pages requested. These are used for security and to keep the site running.
• Client data. When we deliver services, we process data belonging to our clients, such as advertising performance data and customer records held in their systems. We handle that data on the client's instructions and on their behalf.

How we use information

• To respond to enquiries and to provide the services a client has engaged us for.
• To operate, secure, and improve this website.
• To meet legal, accounting, and regulatory obligations.

We do not sell personal information, and we do not share it with third parties for their own marketing purposes.

Advertising platforms and analytics

In the course of delivering services we operate advertising accounts on platforms such as Meta and Google on behalf of our clients. Those platforms collect and process data under their own privacy policies. Where campaign data is matched back to a client's records, it is done using the platform's documented tools and only with the client's authorisation.

Google API Services and the Google Ads API

We use Google’s APIs — in particular the Google Ads API — to manage and measure advertising for the businesses that engage us. This section sets out exactly what that involves.

What we access

With the advertiser’s authorisation we connect to Google Ads accounts that we manage. Through the API we read campaign, ad group, ad, and conversion-action details together with their performance statistics, and we upload offline conversion events back into the account. We request only the https://www.googleapis.com/auth/adwords scope, which is limited to Google Ads data.

Whose data it is

The Google Ads account and everything in it belong to the advertiser. We access it solely as their service provider, on their instructions, and only for accounts they have explicitly granted us access to. Access is granted through Google’s standard OAuth consent screen and can be withdrawn by the advertiser at any time from their Google Account, without contacting us.

Offline conversion uploads

So that advertisers can see which ads produced real customers, we send conversion events from the advertiser’s own records back to Google Ads. Those events may contain a Google click identifier (GCLID, GBRAID or WBRAID) captured when the person clicked the ad and, where Enhanced Conversions are used, an email address and phone number that are hashed with SHA-256 on our own servers before transmission. We do not transmit plain-text email addresses or telephone numbers to Google for this purpose, and we do not attempt to re-identify hashed values.

How we use it

Only to operate, report on, and improve the advertiser’s own campaigns. We do not use Google Ads data to build independent profiles of individuals, to target people outside that advertiser’s campaigns, or for any purpose unrelated to the services the advertiser engaged us to perform.

What we do not do

• We do not sell Google Ads data, or data derived from it.
• We do not transfer it to third parties, other than the infrastructure providers described below that host or operate our systems on our behalf.
• We do not use it to serve advertising for anyone other than the advertiser it belongs to.
• We do not use it to train generalised machine-learning or AI models.

Storage, security, and retention

OAuth credentials and campaign data are held on access-controlled servers that we operate, transmitted only over encrypted connections, and reachable by the small number of personnel who need them to deliver the service. We retain Google Ads data only while we are engaged by the advertiser and for as long as reporting requires. When an engagement ends, or on request, we delete the data we hold and revoke our access.

Questions

For anything concerning our use of Google APIs, contact [email protected] and we will respond within 30 days.

Service providers

We use a small number of vendors to run our business, including cloud hosting, email, and customer relationship software. They may process personal information on our behalf and are required to protect it and to use it only for the services they provide to us.

Retention

We keep personal information only as long as needed for the purpose it was collected for, or as long as required by law, and then delete or anonymise it.

Your rights

Subject to applicable law, you may request access to the personal information we hold about you, ask us to correct it, or ask us to delete it. Contact us using the details below and we will respond within the timeframe the law requires.

Security

We use access controls, encryption in transit, and limited staff access to protect personal information. No method of transmission or storage is completely secure, but we take reasonable measures appropriate to the sensitivity of the data.

Children

Our services are directed at businesses. We do not knowingly collect personal information from children.

Changes to this policy

We may update this policy from time to time. The date at the top of the page shows when it was last revised.

Contact us

12567351 Canada Inc. DBA Limitless Marketing
110 James St, St. Catharines, ON L2R 7E8, Canada
[email protected]
647-880-4410