Privacy Policy

Information you provide directly

Depending on the form and what you choose to provide, an inquiry may include your name, work email, company, phone number, city, company size, service interest, current challenge, current IT setup, expected timeline, and a free-text message. Some fields are optional.

We use this information to:

• Respond to your inquiry and follow up about the services you requested.
• Assess service fit and route the request to the appropriate workflow.
• Manage the inquiry and maintain relevant business records.
• Protect the form from abuse and troubleshoot delivery failures.

Website and technical information

The website and its service providers may process technical or usage information needed to deliver, measure, secure, and troubleshoot the site. This can include the page viewed, landing and conversion pages, referrer, browser or user-agent information, general usage or interaction events, campaign attribution, a form submission identifier, form status, and operational events. The website does not intentionally use this information to build a precise device fingerprint.

Marketing attribution and browser storage

The website reads campaign parameters that are present in a visitor's URL, including UTM source, medium, campaign, term, and content values, as well as GCLID, MSCLKID, and FBCLID click identifiers. It also records trusted route source and landing-page context.

A first-touch record is stored in browser local storage so the original source of a visit is not overwritten by later navigation. A separate converting-touch record reflects the page and campaign context at the time an inquiry is submitted. These values help us understand how visitors found the site and which campaigns or pages generated inquiries. Clearing browser storage may remove the saved first-touch record.

Analytics and performance services

The current website code uses the following measurement and performance services:

• Google Tag Manager loads and manages measurement tags and receives a successful-inquiry event that is designed to exclude contact details and free-text form content.
• Vercel Analytics helps measure website usage and traffic patterns.
• Vercel Speed Insights helps measure page performance and user-experience signals.

Measurement tools may process technical and interaction data under their own terms and the configuration active when the site is used. Changes to the site's analytics or observation tools require this policy to be reviewed.

Form processing through HubSpot

Valid form submissions are sent to HubSpot for contact and lead management, inquiry processing, follow-up, attribution, and reporting. HubSpot may receive the contact and company information you provide, qualification responses, message content, campaign attribution, page context, the submission identifier, and HubSpot browser cookie context when available.

Hosting, operational logs, and failed-delivery recovery

Vercel hosting

Vercel hosts and delivers the website and may process network requests, technical logs, performance information, and operational events. Ordinary lead-submission logs are designed not to contain plaintext lead details. Where possible, operational records use a submission identifier and limited status, route, timing, and error metadata instead.

Encrypted failed-delivery recovery

If delivery to the primary form-processing service fails or times out, a validated submission may be protected with authenticated encryption for temporary operational recovery. Readable lead details are not intentionally written into ordinary operational logs. The encrypted recovery record is used only to reduce the chance of losing a legitimate inquiry during an upstream delivery failure and is not the normal destination for successful submissions or a permanent lead database.

Google Maps, fonts, and external content

The contact page includes Google Maps embeds, and the browser requests the site's fonts from Google Fonts. Loading or interacting with these resources may allow Google to receive technical information such as an IP address, browser information, requested resource, and page context. Other third-party content, if added in the future, may operate under the provider's own privacy terms.

Cookies and local storage

The site uses local storage for first-touch attribution. HubSpot may set or read cookies, including its visitor cookie when available. Tags managed through Google Tag Manager and measurement services may also use cookies or similar technical storage depending on their configuration. Essential browser storage may be used for interface or security functions. You can use browser controls to clear or restrict cookies and local storage, although doing so may affect attribution or site features.

How information is shared

Information is shared only as reasonably needed to operate the website and handle inquiries, including with providers for hosting and infrastructure, CRM and form processing, analytics and conversion measurement, user-experience and performance analysis, and embedded maps or content. Information may also be disclosed where reasonably necessary to protect the site, investigate abuse, comply with applicable legal obligations, or support a business transaction subject to appropriate handling of the information.

International processing

Service providers may process information in Canada, the United States, or other jurisdictions where they operate. Information may therefore be subject to the laws of the jurisdiction in which it is processed. This policy does not promise Canada-only storage or processing.

Retention

Information is retained only as long as reasonably necessary for inquiry handling, relevant business records, security, legal obligations, and operational recovery. Retention may vary by system and purpose. Encrypted failed-delivery records are not intended as permanent lead storage.

Security safeguards

Safeguards used for the website include HTTPS, access controls, input validation, a hidden bot-detection field, restricted handling of secrets, PII-safe operational logging, and authenticated encryption for eligible failed-delivery recovery. No internet transmission or storage system can be guaranteed to be completely secure.

Your choices and requests

You may contact Maximus IT with questions or requests concerning access, correction, deletion, or withdrawal of consent where applicable. Requests are handled subject to applicable obligations and legitimate retention requirements; not every request can necessarily be fulfilled in every circumstance.

Use the contact form or email the existing public business contact at contact@maximusit.ca. Please do not include passwords, access tokens, or other unnecessary sensitive information.

Children

This business website is intended for organizations and business users. It is not directed to children.

External links

The website may link to third-party websites. Their content and privacy practices are governed by their own policies, not this policy.

Changes to this policy

This policy may be updated when the site's tools, data practices, or applicable requirements change. The fixed revision date at the top identifies the version currently published.