Privacy Policy

1. Introduction

PappyDeez Investment Group Inc. ("we," "our," or "us") is a corporation registered in Ontario, Canada. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit pappydeezig.com (the "website"), use our cryptocurrency security education services, and interact with our publishing imprint, The Warden's Grimoire Press. References to "we" include the imprint, which is not a separate legal entity.

We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act ("PIPEDA") and, where applicable, other privacy laws including Quebec's Law 25, the EU/UK General Data Protection Regulation ("GDPR"), and United States state privacy laws.

Please read this Privacy Policy carefully. By accessing or using our website, you acknowledge that you have read and understood it. If you do not agree with its terms, please do not access or use our services.

Questions about this policy, or requests to exercise your privacy rights, can be directed to our Privacy Officer using the contact details in Section 15.

2. Information We Collect

2.1 Information You Provide to Us

We may collect personal information that you voluntarily provide to us when you:

• Fill out contact forms on our website
• Schedule consultations through our booking system
• Sign up to be notified when a book or series is released
• Communicate with us via email or other channels
• Participate in surveys or feedback requests

This information may include:

• Name and contact information (email address, phone number)
• Book series you asked to be notified about, and your preferred formats
• Who you are reading for, if you choose to tell us (for example, yourself, your children, or a classroom)
• Communication preferences
• A record of the consent you gave, including the date and time, the page you signed up from, and the version of the consent wording shown to you
• Any other information you choose to provide

We never ask for, and you should never send us, cryptocurrency private keys, seed phrases, recovery phrases, wallet passwords, or exchange credentials. No legitimate security consultant requires this information. Any message purporting to be from us that asks for it is fraudulent.

2.2 Automatically Collected Information

When you visit our website, certain information about your device and visit is collected automatically, including:

• Browser type, version, and language settings
• Operating system and device type (desktop, mobile, tablet)
• IP address (see Section 2.4 for how this is handled by our analytics provider)
• Approximate geographic location, derived from IP address at the city or region level
• Pages visited, time spent on pages, and navigation paths through the site
• Referring website addresses and search terms that brought you to our site
• Screen resolution and similar device characteristics

This information is collected in aggregate and is not used to identify you personally.

2.3 Cookies, Local Storage, and Similar Technologies

We use cookies and similar technologies on our website. A cookie is a small text file stored on your device; local storage is a similar browser mechanism that stores settings without sending them to a server.

The technologies used on this site are:

• Theme preference (local storage, key: theme) — Remembers whether you selected light or dark mode. This is stored entirely in your browser and is never transmitted to us or to any third party. It persists until you clear your browser data.
• Google Analytics cookies (_ga, _ga_7VB22XE5DL) — First-party cookies used to distinguish visitors and maintain session state for analytics. Default lifespan is 2 years. See Section 2.4.
• Third-party service cookies — Our scheduling and form-handling providers may set their own cookies when you interact with their embedded features. See Section 2.5.

You can control or delete cookies through your browser settings, and you can opt out of analytics specifically using the methods described in Section 10. Disabling cookies may limit some website functionality.

2.4 Google Analytics

We use Google Analytics 4, a web analytics service provided by Google LLC ("Google"), to understand how visitors find and use our website. Our Google Analytics property identifier is G-7VB22XE5DL.

How it works: When you visit a page on our site, a Google Analytics tag loads and sends information about that visit to Google's servers for processing. Google Analytics assigns your browser a randomly generated identifier (a "client ID"), stored in the cookies listed in Section 2.3. This identifier allows us to recognize repeat visits from the same browser without knowing who you are.

What it collects: The categories of information described in Section 2.2, associated with the client ID.

How IP addresses are handled: In Google Analytics 4, IP addresses are used to derive approximate geographic location and are not stored or made available to us. We cannot see the IP address of any individual visitor in our analytics reports.

What we do not do: We do not send personally identifying information — names, email addresses, phone numbers, or any data that could reasonably be linked to you — to Google Analytics. Doing so is prohibited by Google's terms and by our own practice. We do not use Google Analytics to build advertising profiles, and we do not link our Google Analytics property to any advertising account.

Google's role: Google processes this data on our behalf and also uses it in accordance with its own terms. For information about how Google uses data collected from sites that use its services, see How Google uses information from sites or apps that use our services and the Google Privacy Policy.

Opting out: See Section 10.

2.5 Other Third-Party Services Embedded in Our Site

Certain features of our website are provided by third parties. When these load, your browser contacts their servers directly, which means your IP address and basic request information are visible to them:

• Google Tag Manager / gtag.js (googletagmanager.com) — Delivers the Google Analytics measurement code described above.
• Calendly — Powers consultation booking. Information you enter when booking (name, email, scheduling details) is collected and stored by Calendly under its own privacy policy, and shared with us so we can conduct your consultation.
• Formspree — Processes submissions from our contact forms and relays them to us by email.
• Web hosting and content delivery providers — Maintain server logs, which may include IP addresses, as a normal part of operating and securing the site.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide and maintain our services: Responding to your inquiries, scheduling and conducting consultations, and delivering educational content
• To improve our website and services: Analyzing aggregate usage patterns to enhance user experience and identify which educational resources are useful
• To communicate with you: Sending educational materials and updates you have requested, and responding to your messages
• To ensure security: Protecting against fraud, unauthorized access, and other security issues
• To comply with legal obligations: Meeting regulatory requirements and responding to lawful requests
• With your consent: For any other purpose disclosed to you at the time of collection

Under PIPEDA, we rely on your consent to collect, use, and disclose your personal information for these purposes. Consent may be express (for example, submitting a contact form or booking a consultation) or implied by your use of the site for purposes a reasonable person would consider appropriate in the circumstances. Where the GDPR applies, our legal bases are your consent, the performance of a contract with you, and our legitimate interests in operating and securing our website.

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

4. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties, and we do not share it for cross-context behavioural advertising. We may share your information in the following limited circumstances:

4.1 Service Providers

We share information with the third-party service providers that operate parts of our website and business:

• Google LLC (Google Analytics, Google Tag Manager)
• Calendly (consultation scheduling)
• Formspree (contact form and notify-me form processing, and storage of those submissions)
• Web hosting and infrastructure providers
• Our business email provider, used to correspond with you and to send release notices
• Video conferencing providers used to deliver consultations

These providers are permitted to use the information only to perform services for us, subject to their contractual terms and applicable law.

4.2 Legal Requirements

We may disclose your information when required by law or in response to valid requests by public authorities, including to meet national security or law enforcement requirements.

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

4.4 With Your Consent

We may share your information for any other purpose with your explicit consent.

5. Affiliate Links and Referral Tracking

Our website includes affiliate links to hardware wallet manufacturers and other security products we recommend. If you click one of these links and make a purchase, we may earn a commission at no additional cost to you.

When you click an affiliate link, the destination merchant may set a cookie in your browser or record a referral identifier in order to attribute the resulting purchase to us. This tracking is performed by the merchant, not by us, and is governed by that merchant's privacy policy. We receive only aggregate or transactional commission reporting; we do not receive your name, address, payment details, or order contents.

Our recommendations reflect our own assessment of these products. An affiliate relationship does not change what we recommend or what we teach.

6. Release Notifications and Email Communications

Release notifications. If you complete a notify-me form on our website, we add your email address to a list used for one purpose: telling you when a book or series you selected is released. You choose which series you hear about, and we send a short notice only when one of those titles actually goes live. We do not send general marketing, promotional newsletters, or messages about titles you did not select, and we do not share or sell this list.

Consent. We add you to this list only when you tick the consent box on the form. This is express consent under Canada's Anti-Spam Legislation ("CASL"). We keep a record of that consent, including when you gave it and the exact wording you agreed to, so that we can demonstrate it if asked.

How we send these messages. Release notices are sent manually by us from our own business email account. We do not use a bulk email platform, and your address is not uploaded to a third-party marketing service. Recipients are always blind-copied, so no subscriber can see any other subscriber's email address.

Unsubscribing. Every release notice identifies us as the sender, includes our mailing address, and provides a way to unsubscribe. You may unsubscribe using the link provided in any message, by replying to any message with the word "unsubscribe," or by contacting our Privacy Officer. We honour unsubscribe requests promptly and, in any event, within 10 business days, and we keep a minimal suppression record afterwards so that we do not contact you again by mistake.

Other email. We also use your email address to correspond with you directly: replying to inquiries you send us, and confirming and following up on consultations you book. You may ask us to stop contacting you at any time.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using SSL/TLS protocols
• Regular security assessments and updates
• Limited access to personal information on a need-to-know basis
• Secure data storage practices
• Multi-factor authentication on the accounts used to administer this website and our service provider accounts

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

If a breach of security safeguards occurs that creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as required by PIPEDA.

8. Data Retention

We retain personal information only as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer period is required or permitted by law. Our current retention periods are:

• Contact form submissions and email correspondence: 24 months from our last exchange with you
• Consultation booking records: 24 months following the consultation
• Release notification subscriber records: Until you unsubscribe, plus a minimal suppression record (your email address only) retained afterwards so that we do not contact you again
• Records of consent given under CASL: 3 years following unsubscribe or withdrawal of consent, as evidence that consent was properly obtained
• Google Analytics event data: 2 months, after which Google automatically deletes event-level data
• Google Analytics user data: 14 months, after which Google automatically deletes the user-level data associated with a client ID. Aggregate, non-identifying reporting is not subject to these periods and may be retained by Google indefinitely.
• Server and security logs: As retained by our hosting provider, typically 30 to 90 days
• Records required for tax, accounting, or legal purposes: As required by Canadian law, generally 7 years

When information is no longer needed, we delete it or render it anonymous.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: You may request access to the personal information we hold about you and information about how it has been used and disclosed
• Correction: You may request that we correct inaccurate or incomplete information
• Deletion: You may request that we delete your personal information, subject to legal retention requirements
• Objection or restriction: You may object to, or ask us to restrict, our processing of your personal information
• Data portability: You may request a copy of information you provided to us in a structured, commonly used, machine-readable format
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect processing already carried out, and may mean we can no longer provide certain services
• Non-discrimination: We will not deny you services, charge different prices, or provide a different quality of service because you exercised a privacy right

To exercise any of these rights, contact our Privacy Officer using the details in Section 15. We will respond within 30 days, as required by PIPEDA, or within any shorter period required by the law applicable to you. We may need to verify your identity before acting on a request.

Complaints. If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca). If you are in Quebec, you may contact the Commission d'accès à l'information du Québec. If you are in the EU or UK, you may lodge a complaint with your local data protection supervisory authority.

10. Your Choices: Managing Cookies and Analytics

You have several ways to limit the information collected about your use of this website:

• Google Analytics Opt-out Browser Add-on: Install the official add-on at tools.google.com/dlpage/gaoptout. It prevents Google Analytics from collecting data on any site you visit, including ours.
• Browser cookie controls: All major browsers allow you to block or delete cookies, including third-party cookies, through their settings or privacy menus.
• Private or incognito browsing: Discards cookies and local storage at the end of each session.
• Content blockers: Browser extensions and privacy-focused browsers can block analytics scripts entirely. Our website's content and functionality remain fully available with analytics blocked.
• Clearing your theme preference: Clearing your browser's site data for pappydeezig.com removes the stored theme setting.

Do Not Track and Global Privacy Control. Our website does not currently respond to browser Do Not Track (DNT) signals, as no common standard for interpreting them has been adopted. We honour Global Privacy Control (GPC) signals where we are legally required to do so. Regardless of these signals, you can opt out of analytics using the methods above and you may contact us directly at any time to have information about you deleted.

11. Third-Party Links

Our website contains links to third-party websites, services, and resources that we do not operate, including affiliate links, product documentation, and educational references. This Privacy Policy does not apply to those third-party services. We are not responsible for their privacy practices, and we encourage you to review their privacy policies before providing any personal information.

12. Children's Privacy

Some of the books we publish are written for young readers. Our website, our services, and our release notification list are nevertheless directed to adults — parents, grandparents, teachers, librarians, and other purchasers — and not to children.

We do not knowingly collect personal information from anyone under the age of 18. We do not ask for the name, age, birthday, or any other detail of a child you are buying for. If you tell us who you are reading for, we record only a broad category such as "my children" or "a classroom," which identifies no one.

If you are a parent or guardian and believe a child has provided us with personal information, please contact our Privacy Officer and we will delete it.

13. International Data Transfers

We are based in Ontario, Canada, and several of our service providers are located in the United States and other countries. As a result, your information may be transferred to, stored in, and processed in jurisdictions outside your own, where data protection laws may differ from those in your jurisdiction.

In particular, information collected through Google Analytics is processed by Google LLC on servers located in the United States and other countries in which Google or its agents operate. Google states that it relies on standard contractual clauses and its certification under the EU-U.S. Data Privacy Framework (and the UK and Swiss extensions) as safeguards for such transfers.

Information held in another country is subject to the laws of that country and may be accessible to its courts, law enforcement, and national security authorities. Where required by applicable law, we obtain your consent to such transfers or rely on contractual safeguards with our providers.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

• Posting the updated Privacy Policy on this page
• Updating the "Last Updated" date at the top of this policy
• Sending an email notification for significant changes (if you have provided your email address)

The August 24, 2026 update added detailed disclosure of our use of Google Analytics 4 and other embedded third-party services, affiliate link tracking, our book release notification list and how we handle consent under CASL, our publishing imprint, specific data retention periods, analytics opt-out methods, and references to applicable Canadian privacy legislation.

We encourage you to review this Privacy Policy periodically. Your continued use of our services after any changes indicates your acceptance of the updated Privacy Policy.

15. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact our Privacy Officer:

We will acknowledge your request promptly and respond within 30 days, or sooner where required by applicable law.