Privacy Policy
How I collect, use, and protect your information.
Last updated: October 9, 2026
This policy covers the contact form, the client lodge, payments, the free 60-second check-up, and the analytics running on this site. For each one it says what I collect, who else sees it, and how long I keep it.
What Information I Collect
Information you give me directly
When you fill out my contact form, you share your name, email address, phone number, business name, city, website URL, what you are interested in, and your message. I only collect what I need to understand your project and get back to you.
Your client lodge account
If you are a client, your Neighbours Lodge account stores the email you sign in with and what you choose to save there: your business context paragraph, your notes on guides, which guides you have finished, and your logo. Your logo is saved as a public image file, so anyone with its exact link can view it. The Lodge also holds your invoices and the payments recorded against them. When you send me a request from the Lodge, it reaches me by email and you get a copy. The Meta ad pixel does not run inside the Lodge or on its sign-in pages.
Payment information
When you pay for my services, card payments are processed by Stripe. I never see or store your full credit card number. Stripe handles all the sensitive payment details. For Interac e-Transfer, I receive the transfer through my bank, and I do not store your banking information. For cryptocurrency payments, I use goBlink to process the transaction, and I do not store your wallet details or private keys.
Information collected automatically
I use Google Analytics to understand how people use my website, including which pages are visited most, how long people stay, and what devices they use. This data is aggregated and anonymous. I do not use it to identify individual visitors.
Check-up submissions
If you use my free 60-second check-up, the website URL you submit is sent to Google PageSpeed Insights so Google can generate the performance, accessibility, SEO, and best-practices scores you see on screen. The security headers scan fetches that same public URL from my server to read its response headers. I do not store the URLs you scan, and the scans do not require your email.
Technical and security information
My hosting, authentication, and form systems may process technical details like IP address, browser information, request timestamps, and basic server logs. I use this information to run security controls on the site, prevent spam or abuse, maintain logins, and troubleshoot problems.
How I Use Your Information
I use the information I collect to:
• Respond to your inquiries and contact form submissions • Deliver the web design, branding, and other services you have hired me for • Process payments for my services • Send you project updates and deliverables • Provide client lodge access and support resources when they are part of your service • Improve my website and services based on how people use them • Run security controls on the site and prevent spam, abuse, or unauthorized access • Follow up on completed projects during the warranty window
I do not sell your information. I do not rent it out. I do not use it for purposes you would not expect. If I ever want to use your information for something new, I will ask first.
Third Parties I Work With
Stripe
Processes credit card payments. Stripe has its own privacy policy and handles the card details itself, so they are never stored with me.
Google Analytics
Helps me understand website traffic and usage patterns. Google Analytics uses cookies to collect anonymous, aggregated data. You can opt out using Google browser add-on.
Meta Pixel
I run ads on Facebook and Instagram. Meta's pixel on this site tells Meta which of my pages were visited, so I can see whether an ad brought anyone here and show my ads again to people who have already visited. When you send my contact form, the pixel also passes Meta a scrambled copy of your name, email and town, so Meta can tell me whether the visit came from one of my ads. It sets a Meta cookie in your browser. You can turn it off for this site with the "Turn off ad measurement" button at the bottom of every page, and it stays off by itself if your browser sends a Global Privacy Control signal. You can also manage ads from Meta in your Facebook or Instagram ad settings.
Supabase
Provides sign-in, session management, and data storage for the client lodge: your account, what you save there, your logo, and your invoices.
Google PageSpeed Insights
Processes the website URLs submitted through my free 60-second check-up so I can return your speed, accessibility, SEO, and best-practices scores.
Email and SMTP provider
Helps me send contact-form notifications and confirmation emails when you reach out through the site, and the copy of each request you send from the client lodge.
Vercel
Hosts my website. Vercel may process basic server logs (like IP addresses) as part of delivering web pages to your browser.
goBlink
Processes cryptocurrency payments when you choose to pay that way. goBlink handles the payment and I do not store your wallet details.
Where your information is stored
Several of these providers, including Stripe, Supabase, Vercel, Google, Meta, and goBlink, operate outside Canada, including in the United States. This means your information may be stored or processed outside Canada and may be subject to the laws of those countries. I only work with established providers that maintain strong security and privacy practices. By using this site and my services, you consent to this transfer and processing.
I only share your personal information with third parties when it is necessary to deliver my services, required by law, or you have given me explicit permission.
How Long I Keep Your Information
I keep your contact form submissions, client account data, support records, and project records for as long as I have an active business relationship with you, plus a reasonable period afterward (typically up to 3 years) for follow-up, support, and record-keeping purposes.
Payment records are kept as required by Canadian tax law (typically 7 years).
If you ask me to delete your information, I will do so promptly, except where I am legally required to keep it.
Your Rights Under BC PIPA
As a British Columbia business, I follow the Personal Information Protection Act (PIPA). Under PIPA, you have the right to:
• Access the personal information I hold about you • Request corrections to any inaccurate information • Withdraw your consent for me to use your information (with some exceptions) • Ask how your information has been used or shared
To exercise any of these rights, just email me at hello@kootenaymade.ca. I will respond within 30 business days, as required by PIPA. There is no cost to make a request.
Children Privacy
My services are designed for businesses, not children. I do not knowingly collect personal information from anyone under the age of 13. If you believe a child has submitted information through my site, please contact me and I will remove it promptly.
Changes to This Policy
If I make significant changes to this privacy policy, I will update it here and change the last updated date at the top. For major changes, I may also notify current clients directly.
Questions or Concerns
If you have any questions about how I handle your personal information, or if you want to exercise your privacy rights, reach out:
Kootenay Made Digital Castlegar, BC, Canada hello@kootenaymade.ca
I take your privacy seriously, and I am happy to answer any questions.
Have questions? The Contact page reaches me directly, and I am happy to help.
