Privacy, in plain language.
We build websites with nothing to breach and nothing to patch — and we hold this site to the same standard. Here is everything elephant.ca collects, why, and what you can do about it. No legalese padding.
What this site collects
Contact form. When you write to us through the site, your name, email address, and message are delivered to our inbox by Web3Forms, a form-delivery service that acts as a mail relay. We use what you send us to reply to you — nothing else. We don't add you to a mailing list.
Hosting logs. Our host keeps standard, short-lived server logs (IP address, pages requested) for security and reliability. We don't use them to identify visitors.
One advertising tracker — only if you allow it. Details below.
The one tracker
We advertise on LinkedIn, and we use LinkedIn's Insight Tag — a single pixel — to know whether those ads bring people here. If you consented via the banner, the tag tells LinkedIn you visited, which lets us measure ad performance and show ads to people who visited us. LinkedIn receives your IP address, browser data, and the pages you viewed, and associates them with your LinkedIn account if you have one. LinkedIn explains its side in its privacy policy.
Whether it loads depends on where you are. If you're in Quebec — or if we can't tell where you are — the tag does not load until you accept the banner, as Quebec's Law 25 requires. In the rest of Canada, the United States, and Mexico, the tag loads with this page as your notice, and you can switch it off for good with the button below. Anywhere else in the world — including the EU — the tag never loads at all.
How we know where you are. When the page loads, our own hosting edge (Cloudflare) reads the country and region your IP address resolves to — never your precise position, never GPS — and uses it for exactly one thing: deciding which consent rules apply to you. Your IP is not sent to any third-party geolocation service, the result is not stored on our side, and your browser keeps it only for the length of your visit. Either way, if your browser sends a Global Privacy Control signal, nothing ever loads — no banner, no pixel. A stored choice is remembered for six months, then we ask again.
You can also opt out on LinkedIn's side, regardless of what you chose here: LinkedIn ads opt-out.
— this clears your stored answer and shows the banner again.
What we don't do
No analytics suites, no session recording, no fingerprinting, no ad networks beyond the pixel above, no data brokers, no selling or renting of anything you give us. This site sets no cookies of its own; your consent choice lives in your own browser's storage and never leaves it.
Your rights
Canada. Under PIPEDA — and Quebec's Law 25 if you're in Quebec — you may ask what personal information we hold about you, correct it, or withdraw consent. The consent banner Quebec visitors see before any tracking loads is Law 25's opt-in default at work; visitors we can't locate get the same treatment.
United States. Depending on your state, you may have rights to access, delete, or opt out of the "sharing" of personal information for targeted advertising. Declining via the "change your tracking choice" button above — or sending a Global Privacy Control signal, which we honor — is exactly that opt-out.
Mexico. Under the LFPDPPP you hold ARCO rights: access, rectification, cancellation, and opposition regarding your personal data. This page is our privacy notice (aviso de privacidad) for the data described above.
To exercise any of these, email [email protected] — it goes to a person, and we reply within two business days.
Effective July 28, 2026 · If we change what we collect, this page changes first.