Legal
Privacy policy.
How TheBomb® collects, uses, and protects your information, in plain language and in line with PIPEDA.
Last updated: August 5, 2026
This Privacy Policy explains how The Bomb Enterprises Inc. ("TheBomb®", "we", "us", "our") collects, uses, and protects information about you when you visit thebomb.ca or use our services. We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy law.
What we collect
- Contact form data. Your name, email, phone, company, message, and the services you indicated interest in.
- Technical data. Your IP address (hashed before storage), browser type, and the page you submitted from - used for spam prevention.
- Usage data. Pages you visit, how you found us (search, ads, social, or a link from another site), what you click (including buttons, phone numbers, and outbound links), how far you scroll, approximate location (city or region, estimated from your IP address), language, device, browser, and screen size. Collected through Google Analytics and Cloudflare Web Analytics.
How we use it
- To respond to your inquiry and provide services you requested.
- To detect and prevent spam and abuse via Cloudflare Turnstile.
- To understand how visitors find and use the site, and to measure whether our marketing and advertising actually work.
- To improve our website and content.
How long we keep it
Contact form submissions are retained for up to 24 months for service and follow-up purposes, then deleted. You can request deletion at any time by emailing hello@thebomb.ca.
Google Analytics data is kept for up to 14 months and then deleted automatically. Aggregate statistics (counts and trends with nothing that identifies a visitor) may be kept longer.
Who we share it with
We don't sell personal data. We use the following service providers strictly to operate the website and respond to your inquiry:
- Cloudflare - hosting, CDN, security, analytics, email delivery, and database (D1).
- Google - website analytics (Google Analytics), advertising measurement (Google Ads), and advertising (Google AdSense serves the ads that appear on our blog and free tools). Google processes this data on its own servers, which may be located outside Canada, including in the United States.
- Meta - advertising measurement for our Facebook and Instagram ads (Meta Pixel and Conversions API). When you arrive from one of our ads or send the contact form, Meta receives technical data about the visit (IP address, browser type, pages viewed) and a hashed, unreadable version of the contact details you submitted, so we can tell which ads lead to real inquiries. Meta processes this data on its own servers, which may be located outside Canada, including in the United States.
- OpenAI - an advertising measurement pixel that tells us when a visit or inquiry started from one of our ads in ChatGPT.
Cookies and analytics
Google Analytics sets first-party cookies (named _ga and _ga_*) that last up to two years. They hold a random identifier so we can tell new visitors from returning ones and see which pages and campaigns bring people here. They do not tell us who you are, and Google Analytics does not log or store your IP address. If Google's advertising features are enabled, Google may also provide us aggregated demographic and interest reports based on visitors who are signed in to Google with ads personalization turned on.
The blog and the free tools pages show ads served by Google AdSense. Google and its advertising partners use cookies to make ad measurement work and, where you have allowed it, to show ads based on your prior visits to this and other websites. You can turn off personalized advertising in Google's Ads Settings and opt out of other providers at aboutads.info.
Our Facebook and Instagram ads use the Meta Pixel, which sets first-party cookies (_fbp, and _fbc when you arrive from a Meta ad) that last up to 90 days. They help us measure which ads bring visits and inquiries, and let us show our ads to people who have already visited this site. You can control how Meta uses your data for advertising in your Facebook ad preferences.
Beyond that: Cloudflare may use functional cookies for security (Turnstile spam checks), Cloudflare Web Analytics runs without cookies, and the OpenAI ads pixel may store an identifier in your browser to connect a visit to a ChatGPT ad.
Your choices
You can block or clear cookies in your browser settings at any time; every part of this site works without them. To opt out of Google Analytics on all websites, you can install Google's opt-out browser add-on.
Your rights
Under PIPEDA, you have the right to access, correct, and delete personal information we hold about you. Email hello@thebomb.ca with your request and we'll respond within 30 days.
Contact
The Bomb Enterprises Inc.
2-4114 Crozier Road
Spallumcheen, BC V4Y 0X1
Canada
hello@thebomb.ca
Ready when you are.
Tell us about your project. We reply within one business day.
