Privacy Policy

This policy explains what personal information Keyo Agency collects, why we collect it, how we use and protect it, and the choices you have. We keep it in plain language because you should not need a lawyer to understand it.

Last updated September 17, 2026Keyo Agency Inc., Toronto

The short version

A plain summary. The full text below is what applies.

What we collectWhat you send us through forms, calls, texts and email, plus basic site analytics.
Why we use itTo reply to you, run your engagement, send invoices and keep the site working.
Who sees itOnly the tools and advisers we need. We never sell it. Some tools store data outside Canada.
Your controlAsk to see, correct or delete your information at any time. We reply within 30 days.

Jump to a section

1Who we are

Keyo Agency Inc. ("Keyo", "we", "us") is a search engine optimization and website design agency headquartered at 1423 Yonge St, Toronto, Ontario, Canada. We work with businesses across the Greater Toronto Area and in other markets, including Los Angeles and Dubai.

We are responsible for the personal information under our control and have named a Privacy Officer who is accountable for our compliance with this policy. Contact details are at the end of this page.

2What this policy covers

This policy applies to personal information we collect through keyoagency.com (the "Site"), through inquiries, calls, texts, emails and booked consultations, and in the course of providing services to our clients. It is written to meet our obligations under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL).

Google user data accessed through our internal tool, Keyo GBP Review Automation, is also covered by our App Privacy Policy.

3Information we collect

Information you give us

Inquiries and contact forms: your name, business name, email address, phone number, website, the services and cities you are interested in, your approximate marketing spend, and anything else you choose to write.
Consultation bookings: your name, email, phone number and the time you book when you schedule a call through our booking tool.
Calls, texts, WhatsApp and email: your contact details and the content of the messages, photos and files you send us.
Client engagements: business details, billing contacts, login or delegated access to accounts we manage for you (for example Google Business Profile, Google Search Console, your website platform or domain registrar), photos and media, and approvals and feedback on our work.
Client portal: the information needed to create and use your client login.

Information collected automatically

Usage and device data: pages viewed, referring pages, approximate location based on IP address, browser and device type, and time on site.
Cookies and similar technologies: see section 9.
Spam protection: our forms use Google reCAPTCHA, which collects device and interaction data to tell people from bots.

Information from our clients' platforms

While managing a client's online presence, we may see personal information belonging to that client's customers, such as names in Google reviews, messages sent through a Google Business Profile, or form submissions on the client's website. We handle this information only to deliver the services the client has engaged us for.

4How we use it

To reply to your inquiry and assess whether we are a good fit for your business.
To schedule and hold consultations.
To deliver, report on and improve the services in your engagement.
To send quotes, scopes, invoices and account notices.
To operate, secure and improve the Site.
To send occasional updates about our services where you have agreed to receive them (see section 10).
To meet our legal, tax and accounting obligations and to protect our rights.

We do not sell personal information, and we do not use it for purposes unrelated to those above without asking you first.

6Client content and job photos

Clients can send us job-site photos and other media to use in Google Business Profile posts, on their website, and in their portfolio. Before sending photos, clients are responsible for making sure they have the right to share them and that any identifiable people, homes, vehicles or licence plates are appropriate to publish.

If a client tells us not to post a photo, it stays private and is used only for internal reference. We do not publish anything about a client's business that the client has not approved.

With a client's permission, we may feature their business name, logo and results in our case studies and on the Site.

8Where it is stored

Keyo is based in Canada, but many of the tools we rely on store data in the United States and other countries. Information stored outside Canada is subject to the laws of those countries and may be accessible to their courts, law enforcement and national security authorities.

9Cookies and analytics

The Site runs on Squarespace, which uses cookies that are necessary for the Site to work and cookies that measure how visitors use it. Squarespace's analytics tell us things like which pages are popular and where visitors come from. Google reCAPTCHA also sets cookies on pages with forms.

You can control or delete cookies through your browser settings. Blocking some cookies may affect how the Site works. To learn more about the cookies Squarespace uses, see Squarespace's cookie guide.

10Emails, calls and texts

When you contact us, we reply using the channel you used. We send commercial electronic messages only where we have your consent or another basis permitted under CASL, such as an existing business relationship or an inquiry you made.

Every marketing email we send includes a way to unsubscribe. You can also reply "STOP" to a text, or email us, and we will stop marketing messages within 10 business days. We may still contact clients about active work, invoices and account matters.

11How long we keep it

We keep personal information only as long as we need it for the purposes above. In general:

Inquiries that do not become engagements are kept for up to 24 months, then deleted.
Client records are kept for the length of the engagement and for as long afterward as needed for tax, accounting and legal purposes.
Account access is returned or removed when an engagement ends.

When information is no longer needed, we delete it or make it anonymous.

12How we protect it

We use reasonable physical, organizational and technical safeguards appropriate to the sensitivity of the information, including access controls, two-factor authentication where available, delegated access in place of shared passwords where platforms allow it, and verified backups before we edit client websites.

No method of transmission or storage is completely secure. If a breach of security safeguards creates a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as the law requires.

13Your rights

You can ask us to:

tell you what personal information we hold about you and how it has been used and shared;
correct information that is inaccurate or incomplete;
delete information we no longer need; and
stop sending you marketing messages.

Send requests to the contact details below. We will respond within 30 days, and we may need to confirm your identity first. If we cannot fulfil a request, we will explain why.

Depending on where you live, including California or the United Arab Emirates, you may have additional rights under local law. Contact us and we will help.

If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada.

14Children

Our services are for businesses. The Site is not directed to children, and we do not knowingly collect personal information from anyone under 16.

15Other websites

The Site links to other websites, including client websites, Google reviews and social media. Those sites have their own privacy practices, and we are not responsible for them.

16Changes to this policy

We may update this policy as our services, tools or legal obligations change. The "last updated" date at the top of this page shows when it was last changed. If we make a significant change, we will take reasonable steps to let clients know.

17Contact us

Questions, requests or complaints about privacy can be sent to our Privacy Officer at Keyo Agency Inc., by email at info@keyoagency.com, by phone at (647) 717-7785, or by mail to 1423 Yonge St, Toronto, Ontario.