Privacy Policy

Who we are

Xpromo.ca (5035074 Manitoba Ltd.) is a registered Canadian corporation based out of Winnipeg, MB.

Our Stance On Your Privacy

We believe in upholding the privacy of our customers and website visitors to the greatest extent possible. While your privacy is of our utmost concern, we also need to be able to see how users are making use of this website. In order to meet both of these needs as best as possible, we have refrained from using third-party analytics tools such as Google Analytics. Likewise, we have chosen to minimize the use of any third party scripts into our website such as social media logins or integrations or any other potentially invasive software.

This page will attempt to detail the privacy implications of all significant software or scripts used on this website.

Website Analytics

Many websites utilize third party analytics software such as Google Analytics. While attractive because they are free and easy to set up, the true cost of these services is the data collected itself. Rather than being utilized solely by the organization hosting a specific website, this data is typically aggregated and used to build online profiles for the purposes of advertising.

We have instead chosen to conduct our website analytics through the self-hosted open source Matomo analytics suite. This software is hosted on a server and domain (analytics.headforwardsolutions.com) under our control and the data collected through it is not shared outside of our own organization or its direct contractors. It is collected for the purpose of improving our services and ensuring that we are able to provide products and solutions that our customers are specifically looking for.

Our analytics software is configured to respect your browser’s “Do not track” settings, but should you wish to directly opt out of being tracked by our analytics software while using this website, please utilize the form below. Please note that this form operates by setting a cookie in your browser to disable the analytics tracking. As such, cookies need to be enabled in your browser for the form to work correctly.


This website, like most, utilizes cookies. The use of cookies during your browsing session will depend on how you interact with the website.

Our site and ecommerce functions are powered by WordPress and WooCommerce. Please click the preceding links for details on how cookies are utilized by these platforms.

Our website’s analytics software also uses cookies. However, this software has specifically been configured to respect the “Do Not Track” settings in your browser, so you will automatically be opted out of analytics tracking should you have this feature enabled.

Contact Forms & CAPTCHA

This website utilizes a contact form plugin which users may optionally use as a convenient way to email us a message. These messages are routed through secure email servers but you should nonetheless take regular email precautions such as not sending your credit card info or other private data.

This contact form sets no cookies and does not track users in any way. A copy of your message will be stored on our secure servers and will be emailed to a relevant email address under our control. Regardless, you are always free to avoid the use of the contact form and email us directly at the email address listed on the contact page.

In addition to the contact form itself, we use the hCaptcha service to reduce automated spam sent through our contact form. hCaptcha is a privacy-focused alternative to Google’s reCaptcha service.

According to hCaptcha’s FAQ:

hCaptcha collects information like mouse movements, scroll position, keypress events, touch events, and gyroscope / accelerometer information as applicable.

This data is used to determine human confidence, as well as aggregate overall captcha completion.

Unlike competitors, we are not in the business of selling individually targeted ads. We work to protect your personal data and limit collection rather than selling it to others. Please see our Privacy Policy for more details.

Please note that the hCaptcha privacy policy linked to above also covers the use of their website itself rather than just the service. As such, it may outline privacy implications that don’t have an effect on your use of our own website.

Mailing List & Sign-Up Form

Xpromo.ca maintains an email mailing list for people interested in receiving news updates and marketing messages. Email list subscribers may from time to time be offered exclusive promos but otherwise subscription is not required to use our website or its services.

Sign-up forms may be embedded throughout our websites. These forms are powered by our email list service, Mailerlite. More information on the privacy impact of this service and its contact forms can be found on their own privacy policy page.

What Data Do We Track?

In addition to the use of cookies, our website(s) and analytics software may track and store numerous types of data, including (but not necessarily limited to) the following.

Should you register for an account on our website, we will request and/or store:

  • Your name
  • Address(es)
  • Contact details such as email address and phone number
  • Your order history

Should you utilize our website without having enabled “Do Not Track” functionality in your browser or otherwise using third-party scripts that block tracking (such as some ad blockers), our self-hosted analytics software will track and/or store:

  • The website from which you visited us from
  • The parts of our site you visit
  • The date and duration of your visit
  • Your IP address
  • Your geographical location (city/country)
  • Information about the device (device type, operating system, screen resolution, language, country you are located in, and web browser type) you used during your visit
  • Searches you perform within our website
  • If also logged into your account on our website, your email address
  • Possibly more


Should you sign up for our email marketing list:

  • Your email address
  • The name you used to sign up
  • Your IP address
  • Possibly more

Embedded content from other websites

Certain pages within this site, such as those hosting embedded contact forms, may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Please note that due to these privacy implications, we attempt to the greatest degree possible to only ever make use of embedded content to convey any necessary information. An example of this is the embedded OpenStreetMap map on our contact page to show where we are located. OpenStreetMap is a non-profit privacy-oriented alternative to Google Maps.

Who we share your data with

We do not knowingly or willingly share user data collected through this website with any third parties unless specifically required by Canadian law. The only exception to this rule is information stored by third-party services such as the email list described in a preceding section of this page.

How long we retain your data

Most data collected through this website is retained indefinitely outside of the removal possibilities outlined in the following section.

What rights you have over your data

If you have an account on this website you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Data collected through our analytics software can generally be deleted on an individual basis but due to its partially-anonymized nature special considerations will apply. If you have visited our website while logged into your account we may be able to search by your email address. Generally, however, we will need you to provide the external IP address of any device(s) you visited our website from in order to pull up and delete any tracking data.

Please understand that in order to protect the privacy and data of our customers and website visitors, we will require proof that you are who you say you are before we comply with any requests for data export or deletion.


Please contact us at [email protected] and we’ll be happy to help.