How EXFETCH collects, uses, stores, and protects information in connection with the Digital Profile build service and general engagement with EXFETCH as a company.
EXFETCH ("we", "our", "us") provides digital experience design services to franchise brands and multi-location businesses. This Privacy Policy applies to our current service offering — the Digital Profile — a production-grade franchise website system built and delivered by EXFETCH.
This policy explains how we collect, use, store, share, and protect information when you engage with EXFETCH, including during pre-build consultation, the build process itself, and post-delivery communication.
By engaging with EXFETCH in any capacity, you agree to this Privacy Policy.
This data is used solely to build and deploy your Digital Profile. It is not used for any other purpose, shared with third parties beyond the service providers listed in Section 5, or retained beyond the periods specified in Section 6.
We do not sell personal data. We may share information only in the following limited circumstances:
Where required by law, court order, or regulatory authority, we may disclose information to the extent necessary to comply.
In the event of a merger, acquisition, or business restructuring, data may be transferred to a successor entity subject to equivalent data protections.
| Data Type | Retention Period |
|---|---|
| Project files and brand assets | 90 days after project delivery, then deleted on request or automatically |
| Contact and account information | Duration of the client relationship plus 90 days |
| Billing and financial records | Up to 7 years (legal compliance) |
| Communication records | Up to 3 years |
| Website analytics and logs | Up to 12 months |
Clients may request deletion of personal data at any time by contacting hello@exfetch.com, subject to legal and contractual requirements.
We implement appropriate technical and organizational safeguards including:
No system is completely secure. We cannot guarantee absolute protection against all threats. We will notify affected Clients of any material data breach in accordance with applicable law and as promptly as practicable.
Depending on your jurisdiction, you may have the right to:
To exercise any of these rights, contact us at hello@exfetch.com. We will respond within 30 days.
The EXFETCH website (exfetch.com) uses cookies and similar technologies. When you first visit, a cookie consent banner is displayed. Analytics cookies are only activated after you explicitly accept.
You can accept or decline non-essential cookies at any time via the banner that appears on your first visit. To reset your preference, clear your browser's local storage for exfetch.com. Declining non-essential cookies does not affect your ability to use our website.
EXFETCH implements Google Consent Mode v2 on all pages. Analytics and advertising signals are blocked by default and are only enabled after you grant consent. This ensures compliance with GDPR, UK GDPR, and Google's EU User Consent Policy.
We do not use marketing, behavioural, or retargeting cookies. The Digital Profile delivered to Clients does not include third-party tracking cookies by default — the Client is responsible for any analytics or cookie consent mechanisms they implement post-handoff.
EXFETCH is committed to compliance with the General Data Protection Regulation (EU GDPR) and the UK GDPR as they apply to our operations and client relationships. Where we act as a data controller — for example, in collecting contact and business information during the sales and onboarding process — we do so on the lawful basis of legitimate interests or contractual necessity.
If you are located in the UK or EU, you have the right to access, rectify, erase, restrict, or port your personal data, and to object to processing. To exercise these rights, contact hello@exfetch.com. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or the relevant EU supervisory authority.
EXFETCH uses a small set of third-party services to deliver and operate the Digital Profile build process, including hosting providers, communication tools, and payment processors. We are not responsible for the privacy practices or availability of third-party services.
The Digital Profile may incorporate third-party services such as mapping tools or font providers as part of the build. These are clearly documented at delivery. Clients should review the privacy policies of any services embedded in their site.
EXFETCH operates in Toronto, Ontario, Canada and London, England. Data submitted as part of the Digital Profile build process may be processed or stored using infrastructure in jurisdictions outside Canada and the United Kingdom. Where required by applicable law — including the UK GDPR and Canadian PIPEDA — appropriate safeguards are applied to ensure adequate protection of personal data during international transfers.
EXFETCH services are directed at business clients and are not intended for individuals under the age of 16. We do not knowingly collect personal data from minors. If you believe a minor has provided data through our systems, please contact hello@exfetch.com and we will take appropriate action.
We may update this Privacy Policy periodically to reflect changes in our services, legal requirements, or data practices. Material changes will be communicated via email to the registered Client contact with a minimum of 30 days' notice. The most current version is always published at exfetch.com. Continued use of EXFETCH services after the effective date of changes constitutes acceptance of the updated policy.