Privacy Policy

Who We Are

MarginWorks is a smart systems and AI automation agency for small and mid-size business owners, operating across Canada, Mexico, and Costa Rica. This Privacy Policy explains what data we collect through our website at workwithmargin.com, why we collect it, how we use it, and what rights you have over it.

If you have any questions about this policy or your data, reach out to us at privacy@workwithmargin.com.

What Data We Collect

When you interact with our website, we may collect the following information:

Through our forms (when you submit them):

• Name
• Email address
• Phone number
• Business name
• Business URL
• Job title
• The page URL where you submitted the form
• Timestamp of your submission
• Your consent status

Through cookies and analytics (automatically):

• Pages you visit on our site
• How long you spend on each page
• Where you came from (referral source)
• Your browser type and device
• Your approximate location (country/region level, not precise)

We do not collect payment information through our website. We do not collect sensitive personal data such as health information, government IDs, or financial account details.

How We Collect It

We collect data in two ways:

• Directly from you, when you fill out and submit a form on our website, such as the "Let's Talk" form, the newsletter signup, or any contact form.
• Automatically, through Google Analytics 4 (GA4) and Google Tag Manager (GTM), which use cookies and tracking scripts to understand how visitors use our site.

Why We Collect It

We use your data for the following purposes:

• To respond to your inquiry or form submission
• To send you a welcome email when you reach out
• To send our newsletter if you signed up for it
• To understand how visitors use our website so we can improve it
• To track which pages and content perform best
• To follow up with you about our services if you expressed interest

We do not use your data for any purpose other than what is listed here. We do not sell, rent, or trade your personal data to anyone. That is not how we operate and it never will be.

The Tools That Process Your Data

Your data passes through the following tools as part of how we operate:

• Notion, our CRM where lead records are stored and managed
• n8n, our automation platform that processes form submissions and triggers workflows like welcome emails and follow-ups
• Vercel, hosts our website
• Google Analytics 4 and Google Tag Manager, track website usage and visitor behavior
• Supabase, hosts our blog/news content database
• SMTP Email Service, sends emails from our domain (welcome sequences, newsletters, notifications)

Each of these tools has its own security and privacy practices. We select tools that meet professional security standards and we configure them with access controls, encryption, and authentication.

How We Protect Your Data

We take security seriously. Here is what we have in place:

• All form submissions are transmitted over HTTPS (encrypted connections)
• Our webhook endpoints use HMAC authentication to verify that submissions are legitimate
• All forms include honeypot fields to block automated spam
• Every platform account we use (Notion, n8n, Vercel, Google, Supabase) has multi-factor authentication enabled
• API keys are stored securely and rotated regularly
• Access to your data is limited to the people and systems that need it, nothing more

How Long We Keep Your Data

We retain your data for as long as it is needed to provide our services and maintain our relationship with you. If you request deletion, we will remove your data from our systems within 30 days.

Analytics data collected through Google Analytics is subject to Google's own data retention policies, which you can review in Google's privacy documentation.

Cookies and Tracking

Our website uses cookies through Google Analytics 4 and Google Tag Manager. These cookies help us understand how visitors interact with our site, which pages get visited, how long people stay, and where traffic comes from.

What cookies we use:

• Google Analytics cookies (_ga, ga*), track page views and visitor behavior
• Google Tag Manager, manages tracking scripts

How to opt out:

• You can disable cookies in your browser settings
• You can install the Google Analytics Opt-Out Browser Add-On at tools.google.com/dlpage/gaoptout
• You can use your browser's "Do Not Track" setting

We do not use cookies for advertising or retargeting.

Cross-Border Data

MarginWorks operates across Canada, Mexico, and Costa Rica. Your data may be processed in any of these countries depending on where our systems are hosted and where our team is working. By submitting your information through our website, you acknowledge that your data may be transferred and processed across these jurisdictions.

We ensure that your data is handled with the same level of care and security regardless of where it is processed.

Your Rights

Depending on where you are located, you may have the following rights regarding your data:

• Access, you can request a copy of the data we have about you
• Correction, you can ask us to correct any inaccurate information
• Deletion, you can ask us to delete your data from our systems
• Withdrawal of consent, you can unsubscribe from our emails or ask us to stop contacting you at any time

To exercise any of these rights, email us at privacy@workwithmargin.com. We will respond within 30 days.

Children's Privacy

Our website and services are not directed at individuals under 18 years of age. We do not knowingly collect data from minors. If we learn that we have collected data from someone under 18, we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.

Contact

If you have any questions about this Privacy Policy or how we handle your data:
Email: privacy@workwithmargin.com
General inquiries: hello@workwithmargin.com