What we collect, which is almost nothing.

This website counts page views, and collects nothing about you

The one measurement on this site is a count of page views, taken by Cloudflare Web Analytics. When a page loads, your browser sends Cloudflare the page's address, the address of the page that linked to it, the kind of browser and device you are using, and how long the page took to load, so we can see how many people read what. It sets no cookie, keeps nothing in your browser, and does not fingerprint you: that is how Cloudflare documents the service — no cookie, no local storage, no fingerprinting by address or browser. The request reaches Cloudflare, a United States company with servers around the world, and carries your IP address the way every request on the web does; it is processed outside Canada, under the laws there, and Cloudflare's own privacy policy governs what it keeps. There is no banner asking you to accept tracking, because nothing here tracks you. No tag manager, no advertising pixel, no session recorder, no heatmap. Nothing sets a cookie on any page you can read.

One page does set a cookie, and it is not for visitors: /signin is our own sign-in page, and signing in there sets a session cookie for the person who signed in. If we have never issued you a login, nothing here has ever set one for you.

Two things are written to your browser's storage, and only when you ask for them. The Motion switch at the foot of every page keeps its setting on your device, so the site stays still for you on your next visit; it is one word. And on an industry page, a process you add to the Operations Blueprint is kept on your device so it is still on the map when you come back; it is the words you typed and, if you asked for one, the plan written for it, nothing else. Neither leaves your browser unless you book a call, as the booking section below says, or press “Write my plan” on a process you added, as the next section but one says; clearing your browser data removes both.

The typeface is served from this domain, not from Google. The page-view counter above is the only other party a page load reaches, and what it receives is set out there.

The calculators do not send us your numbers — unless you ask them to

Every figure you enter into a calculator on this site is calculated in your own browser and stays there. Nothing is transmitted while you use it, and nothing is stored — not on our servers, not in your browser. Close the tab and the numbers are gone.

There is one exception, and it only happens when you choose it. Under the result there is a box where you can enter your email address to have the figures sent to you. If you use it, we receive your email address and the figures shown on that page, and nothing else — not your other inputs, not anything about your browser.

That information goes into our customer system, run by HighLevel in the United States, which sends you the email. We may then contact you about it once; we will not add you to a list or share it with anyone.

Before a send reaches us it is checked for automation, because an open form that emails any address anyone types is a gift to a spammer. If that check needs Cloudflare's Turnstile — the same check the booking calendar runs — it loads at the moment you start using the box and never when you open the page, so reading a calculator adds nothing beyond the page-view count above.

You never have to use that box. The result is on the screen before it is offered, and it works exactly the same whether you send it or not.

If you ask for a plan for a process you added

On an industry page you can add a process of your own to the Operations Blueprint. Adding it sends nothing; it is kept in your browser, as above. Under it there is one button, “Write my plan”. Pressing it loads our catalogue of processes for that industry into your browser — a file that is part of this site, like any page — and matches your words to it there. The plan is written in your browser and kept with the process. Nothing you typed is sent to us or to anyone else, at any point, and we have no record that you pressed it.

If nothing in the catalogue fits, the page says so, and the plan is written with you on the call instead. The process stays on your map either way.

The guides ask for your email — and ask separately about the newsletter

The two guides under /guides are free, and each opens after you leave an email address. When you do, we receive your email address, the name of the guide, the page you were on, and your answer to the newsletter box — and nothing else. It goes into the same customer system, run by HighLevel in the United States, which emails you the guide's link. The link opens the PDF for thirty days and carries nothing about you; share it if you like.

The newsletter is a separate question, and the box is unticked. Tick it and the guide email also carries a confirmation link; you are on the list only once you open it and press the button on the page it leads to, and we keep a record of the words you agreed to and when — the tick and the press. Opening the link on its own records nothing, so a mail system that checks the links in incoming email cannot sign you up. Leave the box unticked and you still get the guide, and you hear from us about it once at most. Every newsletter message identifies us, gives our postal address, and carries an unsubscribe link; you can also stop at /unsubscribe, and stopping is acted on at once.

The same automation check applies as on the calculators, and it loads only once you start using the form.

The newsletter can be asked for on its own

On /newsletter, and beneath the guides, you can ask for the newsletter without a guide. When you do, we receive your email address and the page you were on — nothing else — and the words you agreed to, which are printed beside the button. It goes into the same customer system, run by HighLevel in the United States, which emails you a confirmation link.

You are on the list only once you open that link and press the button on the page it leads to. Until then you are not on it, and if you never press it you hear from us about it once at most. An address typed in by someone else, or a link opened by a mail system checking incoming email, puts nobody on the list. The same automation check applies as on the other forms, and it loads only once you start using the form.

What our host records

This site is hosted by Vercel. Like any web host, Vercel's servers record standard technical information about requests — the page requested, the time, the browser's user agent, and the IP address the request came from. We use this only to keep the site running and to investigate faults. We do not combine it with anything else or use it to build a profile of you.

If you book a call

The booking calendar is operated by HighLevel, a third-party provider based in the United States, and it runs on our contact page rather than on theirs. It is a window onto their system: loading it fetches their code, shows them the address your request came from, and runs a bot check by Cloudflare inside the window before it will take a booking. What you type into it — typically your name, email address and anything you write in the form — goes to them, so that we can receive it and meet you.

It loads when you ask for it. Press “Book a pilot call” anywhere on this site and the calendar is there when the page opens, because that is what you pressed. Arrive at the contact page any other way and you get a short panel and a button instead, and nothing reaches HighLevel or Cloudflare until you press it.

Information you enter into the booking form is processed outside Canada and is subject to the laws of the country it is processed in, including lawful access requests there. If you prefer not to use it, email us instead and we will arrange a time by reply.

The booking form is also told which page of this site you came from — the page address, nothing else — so we know what you were reading when you decided to book. It is carried on the link you pressed, not stored in your browser. If you added processes to that page's Operations Blueprint, their names go with it as one line, so the call can start from your map. Those two things are all this site adds to what you give the calendar.

If you email us

Email you send to support@mexabuild.com reaches us with whatever you chose to put in it. We keep it while we are in contact about the thing you wrote about, and we delete it on request.

If we contacted you first

We do some of our own outreach. If a message from us arrives without you having asked for it, your address came from information your business publishes about itself — your own website, your listing, the contact page of the business you run. Canada’s anti-spam law treats a business address published without a statement against unsolicited mail as permission to write to you about that business, and that is the only basis we use. We do not buy lists and we do not scrape private addresses.

Every message we send identifies us, gives our postal address, and carries a way to stop. You can reply with the word stop, use the unsubscribe link in the message, or go to /unsubscribe and enter your address. We act on it at once; the law allows ten business days and we do not use them.

Stopping is permanent. To make it permanent we have to keep a record that you asked — an address on a do-not-contact list is the only way to be sure the next message is never sent — and that record is used for nothing else.

How long we keep things

• —A calculator result you emailed yourself, or a guide you asked for, and the address you gave: while we are in contact about it, and deleted twenty-four months after the last contact if it never became an engagement.
• —Your newsletter consent — the words you agreed to and when: for as long as you are subscribed, and after you unsubscribe only as the record that you did.
• —A booking and what you wrote in it: the same — twenty-four months after we last spoke, unless it became an engagement.
• —An engagement: the agreement, the findings, the baseline figures, the accounts and the invoices, for seven years after it ends — longer than the six years Canadian tax law requires of the records behind an invoice.
• —An unsubscribe: kept indefinitely, on purpose, because a forgotten unsubscribe is a broken promise.
• —Anything you email us: while we are in contact about it, and deleted on request.

What we do not do

• —We do not sell personal information, and we never will.
• —We do not share it with anyone for their own marketing.
• —We do not use it to train an AI model.
• —We do not buy contact lists or enrich what you give us from third-party data brokers.

Your rights

Under the Personal Information Protection and Electronic Documents Act (PIPEDA) you can ask what personal information we hold about you, ask for a copy of it, ask us to correct it if it is wrong, and ask us to delete it. Write to support@mexabuild.com and we will answer within thirty days, which is the period the Act allows.

If you are not satisfied with how we handle a privacy question, you can take it to the Office of the Privacy Commissioner of Canada, which is the body that oversees this Act.

Changes

If this policy changes in a way that affects you, the date below changes with it, and if you are on the newsletter, we say so there. Nobody else is on a list we could notify.