Privacy Policy

Effective date: 25 September 2026
Last updated: 25 September 2026

1. Who we are

Web Worx Labs is a marketing agency serving regulated industries. This policy explains what personal information we collect through webworxlabs.com, why we collect it, who we share it with, and the choices you have.

In this policy, “we”, “us” and “our” mean Web Worx Labs. “You” means anyone who visits our website, submits a form, downloads a report, or otherwise contacts us.

For privacy questions, to request access to your information, or to ask us to delete it:

Email: info@webworxlabs.com
New York: +1 917 633 9376
Toronto: +1 647 252 7883

We are the party responsible for the personal information described here. Under laws that use the term, we act as the data controller.

2. What this policy covers

This policy applies to webworxlabs.com and to the landing pages, forms, research reports and email we operate from it. It does not cover third party websites we link to, which have their own policies.

3. Information you give us directly

When you request a research report or contact us through a form, we ask for and store:

• Your name
• Your work email address
• Your firm or company name
• A direct telephone number
• Your role, selected from a list

When you email or call us, we keep the content of that correspondence and our replies.

If you leave a comment on our site, we collect the comment text, the name and email you supply, your IP address and your browser user agent string.

We only ask for what we need. If you would rather receive a report without giving a phone number, email us and we will send it.

4. Information collected automatically

When you visit our site, we and the providers listed in section 6 automatically collect:

• IP address and approximate location derived from it, typically city level
• Browser type and version, operating system and device type
• Screen size and language settings
• Pages visited, time on page, scroll depth and the order in which pages were viewed
• The website or advertisement that referred you, including advertising click identifiers
• Date and time of your visit

5. Session recording

We use Microsoft Clarity, which records how people interact with our pages. This includes mouse movement, clicks, scrolling and page navigation, and it can reconstruct your visit as a replay that we can watch afterwards.

We use these recordings to find usability problems, for example a form field people abandon or a section nobody scrolls to.

Clarity is configured to mask text input by default, so what you type into form fields is not intended to be captured. We do not use session recordings to identify individual visitors, and we do not attempt to match a recording to a named person.

If you would prefer not to be recorded, section 11 explains how to opt out.

6. Cookies and tracking technologies we use

We use the following. Each is named so you can make an informed decision rather than guess.

• Google Tag Manager. Loads and manages the tags below. It does not itself collect personal information.
• Google Analytics 4. Measures how people find and use the site, in aggregate. Operated by Google LLC.
• Google Ads conversion tracking. Records when a visit that came from one of our ads results in a report request, so we can tell which advertising works. It also supports remarketing, meaning you may later see our ads elsewhere on Google’s network.
• Microsoft Clarity. Session recording and heatmaps, as described in section 5. Operated by Microsoft Corporation.
• LinkedIn Insight Tag. Measures conversions from LinkedIn advertising, enables remarketing to people who have visited our site, and provides aggregated, anonymised reporting on the professional attributes of our visitors. Operated by LinkedIn Corporation.
• Meta Pixel. Measures conversions from our advertising on Facebook and Instagram and enables remarketing to people who have visited our site. Operated by Meta Platforms, Inc.
• Strictly necessary cookies. Set by WordPress and our caching and security layers to keep the site working, remember your comment details and maintain logged in sessions. These cannot be switched off without breaking the site.

We may add further advertising measurement tools in future. We will update this policy before we do.

Most browsers let you block or delete cookies through their settings. Blocking them may stop parts of our site from working properly.

7. Enhanced conversions and hashed data

Where enabled, we use Google’s enhanced conversions feature. When you submit a form, your email address is converted into an irreversible hashed value in your browser before it is sent to Google, so that Google can match the conversion to an ad click. Google receives the hashed value, not your email address in readable form. We do not send Google your name, phone number or firm for this purpose without telling you here first.

8. Information from other sources

We obtain business contact and company information from public records and third party data providers to identify organisations that may be interested in our services. This is information about businesses, not about individuals in a personal capacity.

9. AI, chat and automated processing

AI assisted tools

We use AI assisted tools in our work, including to help produce research and marketing material and to help draft and organise our replies to enquiries. Where an enquiry is processed using such a tool, that provider acts on our instructions and is not permitted to use your information to train its models.

Chat assistant

Our site offers a chat assistant. When you use it, we collect the messages you send, any contact details you provide in the conversation, and technical information such as the page you were on and the time of the conversation. Conversations are stored so we can follow up and improve the service.

The chat assistant is automated and you are not speaking to a person unless we tell you otherwise. You can ask at any point to be put in touch with a person, and we will provide a way to reach us.

Please do not enter sensitive personal information, passwords, financial account details or confidential material into the chat. It is not a secure channel for that kind of information.

Automated screening of form submissions

Form submissions on our site are screened automatically before they reach us. This screening checks the format of the details supplied and filters out submissions that appear to be automated, promotional or otherwise unsolicited. A submission that fails these checks may be declined without a person reviewing it. If you believe a genuine enquiry was declined, contact us using the details in section 1 and we will deal with it manually.

Limits on automated decisions

We do not use automated processing to make decisions that produce legal effects or similarly significant effects about you. We do not use AI to assess your creditworthiness, employment or eligibility for any service.

10. How we use your information

We use personal information to:

• Send you the research report or other material you asked for
• Reply to your enquiry and follow up about it
• Contact you about our services where you have asked us to or where we have a relationship with you
• Understand which marketing channels and pages produce enquiries, and improve them
• Measure and optimise our advertising
• Detect and block spam, fraudulent and automated submissions
• Keep records we are required to keep, and establish or defend legal claims

We do not sell your personal information for money.

11. How to opt out of tracking and advertising

You can limit tracking in these ways:

• Google Analytics: install Google’s browser opt out add on
• Google ads personalisation: adjust your settings at myadcenter.google.com
• Microsoft Clarity: Microsoft honours the Global Privacy Control signal, and you can also block the clarity.ms domain
• LinkedIn: adjust advertising preferences in your LinkedIn account settings
• All of the above: use your browser’s cookie controls, an ad blocker, or enable Global Privacy Control if your browser supports it

We respond to the Global Privacy Control signal where our providers support it.

12. Legal bases, for visitors in the European Economic Area and the United Kingdom

Where the GDPR or UK GDPR applies, we rely on:

• Consent, for non essential cookies, analytics, session recording and advertising technologies, and for marketing email. You can withdraw consent at any time.
• Contract, to deliver a report or service you have asked for.
• Legitimate interests, to secure our site, prevent abuse, and understand in aggregate how our site performs, balanced against your rights.
• Legal obligation, where we must keep records.

13. Commercial email

If you give us your email address to receive a report or make an enquiry, we may send you related material and occasional messages about our services.

Every commercial email we send identifies us, gives our contact details and includes a working unsubscribe link. Unsubscribing takes effect promptly and at the latest within ten business days, as required by Canada’s Anti Spam Legislation. You can also unsubscribe by replying to any message or emailing us directly.

14. Who we share information with

We share personal information with service providers who process it on our behalf, under contract, and only for the purposes we specify:

• Our website host and content delivery provider, to serve the site
• Our email delivery provider, to send reports and replies
• Asan CRM, where enquiries are stored and managed. Asan CRM is a separate company under common ownership with Web Worx Labs.
• Our chat assistant provider, to operate the chat described in section 9
• Google, Microsoft, LinkedIn and Meta, as described in section 6, for measurement and advertising

We may also disclose information where we are required to by law, by court order or by a regulator, and in connection with a sale or reorganisation of our business, in which case we will tell you.

15. International transfers

We operate from Canada and serve clients in Canada and the United States. Our service providers are located in the United States and elsewhere. This means your information may be stored and processed outside the country where you live, including in jurisdictions whose privacy laws differ from your own and where courts and law enforcement may be able to access it.

Where we transfer personal information out of the EEA or the UK, we rely on Standard Contractual Clauses or another lawful transfer mechanism.

16. How long we keep information

We keep enquiry records, correspondence and chat conversations for as long as they remain useful for the purposes described in section 10. We do not apply a fixed deletion date to them, because our relationship with a business contact can resume years after the first conversation.

That is balanced by a straightforward commitment: you can ask us to delete your information at any time, for any reason, and we will do it. You do not need to give us a reason and we will not ask for one. Write to info@webworxlabs.com and we will confirm once it is done.

Some information is held on timescales we do not control, because our providers set them:

• Website analytics: up to 14 months, as set in Google Analytics
• Session recordings: up to 30 days, as set by Microsoft Clarity

Comments and their metadata are kept so that follow up comments can be recognised, unless you ask us to remove them. Records we are required to keep for tax or legal reasons are kept for the period the law requires, and we cannot delete those on request until that period ends.

17. Security

We use HTTPS across the site, restrict access to enquiry records to people who need it, and require authentication for our systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your information and creates a real risk of significant harm, we will notify you and the relevant regulator as the law requires.

18. Your rights

If you are in Canada

Under PIPEDA you may ask what personal information we hold about you, how we have used it and who we have disclosed it to. You may ask us to correct inaccurate information and withdraw consent, subject to legal and contractual limits. We will respond within 30 days. If you are not satisfied, you may complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

If you are in California

You may request to know the categories and specific pieces of personal information we have collected, the sources, our purposes and the categories of third parties we disclose to. You may request deletion or correction. You may opt out of the sharing of personal information for cross context behavioural advertising, which is what the advertising technologies in section 6 involve. You have the right not to be discriminated against for exercising these rights. We do not sell personal information for money and we do not knowingly process the personal information of anyone under 16. To exercise any of these rights, email us using the address in section 1.

If you are in the European Economic Area or the United Kingdom

You may request access, correction, deletion, restriction of processing, portability of your data, and you may object to processing based on legitimate interests. Where we rely on consent, you may withdraw it at any time without affecting processing already carried out. You may complain to your national supervisory authority.

We will verify your identity before acting on a request, and we will not charge you for a reasonable request.

19. Children

Our site and services are intended for business users. We do not direct them at children and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, contact us and we will delete it.

20. Links to other sites

Our site and reports link to other websites. We are not responsible for their content or their privacy practices, and this policy does not apply to them.

21. Changes to this policy

We may update this policy. When we do, we will change the last updated date at the top. If a change materially affects how we use your personal information, we will take reasonable steps to tell you.

22. Contact

Web Worx Labs
Email: info@webworxlabs.com
New York: +1 917 633 9376
Toronto: +1 647 252 7883