Privacy Policy
Effective Date: October 15, 2026
1. Introduction and Company Information
Ximfyl (“Ximfyl,” “we,” “us,” or “our”) respects your privacy and is committed to protecting personal information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (“PIPEDA”) and, where applicable, provincial privacy legislation.
This Privacy Policy explains how Ximfyl collects, uses, discloses, stores, and safeguards personal information when you visit ximfyl.pro, communicate with us, use our services, or otherwise interact with us in connection with our audiovisual post-production business.
Business Name: Ximfyl
Address: Suite 406, 2501 Kingsway, Vancouver, BC V5R 5H3, Canada
Email: [email protected]
Phone: +1 (604) 687-9241
2. Data Collection and Processing
Ximfyl may collect personal information directly from you, automatically through our website, and from third parties where permitted by law. Depending on your relationship with us, the types of personal information we may collect include:
- Identification and contact information: name, company name, email address, phone number, mailing address, and billing details.
- Project and service information: creative briefs, production files, audio-visual materials, feedback, preferences, and communications related to post-production services.
- Technical information: IP address, browser type, device identifiers, operating system, pages viewed, time spent on pages, and referring website.
- Commercial and transactional information: quotes, invoices, payment status, and service history.
- Communication content: emails, messages, call records, and meeting notes.
- Website usage data: cookies, analytics data, and similar technologies used to improve site performance and user experience.
We collect and process personal information only for purposes that are reasonable in the circumstances and, where required, with your knowledge and consent.
3. Purpose of Data Processing
Ximfyl processes personal information for the following purposes:
- to provide audiovisual post-production services and manage client projects;
- to respond to inquiries, prepare quotes, and communicate regarding services;
- to administer accounts, contracts, billing, and payments;
- to review, edit, deliver, and archive project assets;
- to maintain business records and comply with legal and regulatory obligations;
- to improve our website, operations, workflows, and customer experience;
- to detect, prevent, and address fraud, security incidents, or misuse;
- to send administrative or service-related communications;
- to conduct analytics, performance monitoring, and service quality assessments;
- to enforce our agreements and protect our legal rights and interests.
4. Legal Basis for Processing
Under Canadian privacy law, we generally rely on consent, contractual necessity, legal obligations, and legitimate business purposes where permitted. Depending on the context, Ximfyl may process personal information on the following bases:
- Consent: when you provide clear consent for a specific purpose, including receiving communications or allowing certain website cookies.
- Contractual necessity: when processing is necessary to enter into, perform, or manage a contract with you or your organization.
- Legal obligation: when processing is required to comply with applicable laws, tax rules, accounting obligations, or lawful requests from authorities.
- Legitimate purposes: where permitted by law, for example to operate, secure, and improve our services, prevent fraud, or maintain business records.
Where consent is the legal basis, you may withdraw it at any time, subject to legal or contractual restrictions and reasonable notice.
5. Data Sharing and Third Parties
Ximfyl does not sell personal information. We may disclose personal information to third parties only as necessary for the purposes described in this Privacy Policy, including:
- Service providers: hosting providers, cloud storage providers, email service providers, customer relationship management platforms, analytics providers, payment processors, and IT support vendors.
- Professional advisers: lawyers, accountants, auditors, insurers, and similar advisors subject to confidentiality obligations.
- Business partners and contractors: freelancers, editors, sound engineers, visual effects specialists, and other subcontractors involved in project delivery, as needed for service completion.
- Authorities and legal recipients: government bodies, courts, regulators, or law enforcement where required or permitted by law.
- Corporate transactions: in connection with a merger, reorganization, financing, sale of assets, or similar transaction, subject to appropriate protections.
Third parties are required to protect personal information and use it only for authorized purposes. However, their own privacy practices govern their handling of information once disclosed to them.
6. Data Transfer to Third Countries
Ximfyl is based in Canada, but some of our service providers, cloud tools, or collaborators may be located outside Canada, including in countries that may not provide the same level of privacy protection. As a result, personal information may be processed or stored in foreign jurisdictions and may be subject to the laws of those jurisdictions.
Where cross-border transfers occur, Ximfyl uses appropriate contractual, organizational, and technical safeguards designed to protect personal information in accordance with applicable law. By using our services or submitting personal information to us, you understand that your information may be transferred internationally for the purposes described in this Privacy Policy.
7. Storage Duration
Ximfyl retains personal information only as long as reasonably necessary to fulfill the purposes for which it was collected, to comply with legal and accounting obligations, to resolve disputes, and to enforce agreements.
Retention periods vary depending on the nature of the information and the business purpose. For example:
- client account and billing records are typically retained for the period required by law and for a reasonable administrative period thereafter;
- project files and communications are retained for the duration of the project and thereafter as needed for follow-up, archival, or legal purposes;
- website analytics data may be retained for shorter periods consistent with operational needs and legal compliance.
When personal information is no longer required, Ximfyl will delete, anonymize, or securely destroy it in accordance with applicable policies and legal requirements.
8. User Rights
Subject to applicable law, you may have the following rights in relation to your personal information:
- Access: request confirmation of whether we hold personal information about you and obtain access to it.
- Rectification: request correction of inaccurate or incomplete personal information.
- Erasure: request deletion of personal information in appropriate circumstances, subject to legal retention requirements.
- Restriction: request that we limit processing in certain situations, where permitted by law.
- Data portability: request a copy of personal information you provided to us in a structured, commonly used format, where applicable.
- Objection: object to certain processing activities, including where processing is based on legitimate interests or similar grounds recognized by law.
To exercise these rights, please contact us using the details below. We may need to verify your identity before responding to your request. We will respond within a reasonable time and in accordance with applicable legal requirements.
9. Withdrawal of Consent
Where we rely on your consent to process personal information, you may withdraw that consent at any time by contacting Ximfyl using the information below. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.
Please note that withdrawing consent may affect our ability to provide certain services or features, particularly where processing is necessary to complete a project or maintain an account.
10. Right to Complain
If you have concerns about how Ximfyl handles your personal information, we encourage you to contact us first so we can try to resolve the issue directly.
You may also have the right to file a complaint with the Office of the Privacy Commissioner of Canada or with the appropriate privacy regulator in your province, depending on the circumstances and applicable law.
Office of the Privacy Commissioner of Canada
Website: https://www.priv.gc.ca
11. Data Security
Ximfyl uses reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification. These safeguards may include:
- access controls and role-based permissions;
- password protection and authentication measures;
- encrypted or secured data transfer tools where appropriate;
- secure storage and backup procedures;
- staff and contractor confidentiality obligations;
- monitoring and incident response practices.
No method of transmission over the internet or electronic storage is completely secure. While we strive to protect personal information, Ximfyl cannot guarantee absolute security.
12. Contact Information
If you have any questions, requests, or concerns regarding this Privacy Policy or our handling of personal information, please contact:
Ximfyl
Suite 406, 2501 Kingsway
Vancouver, BC V5R 5H3
Canada
Email: [email protected]
Phone: +1 (604) 687-9241
13. Changes to Privacy Policy
Ximfyl may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal obligations, or business operations. When we make material changes, we will post the revised Privacy Policy on our website and update the effective date above, and we may provide additional notice where required by law.
Your continued use of our website or services after the updated Privacy Policy becomes effective constitutes your acceptance of the revised policy, to the extent permitted by law.