Privacy Policy

Effective and last updated: October 28, 2026

This policy explains how Webcraft Studio ("Webcraft", "we", "us") collects, uses, shares and protects personal information when you visit webcraftstudio.ca, get in touch, hire us, or use a TikTok filter we made. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and its fair information principles.

The short version

• We only collect what we need to reply to you and do the work.
• This site has no analytics, ad trackers or cookies of our own.
• We never sell or rent your information.
• You can ask to see, fix or delete your information at any time.

1. Who is responsible

Webcraft Studio is a sole proprietorship based in Hamilton, Ontario, Canada. Cori Drydak is our Privacy Officer and is responsible for how we handle personal information. You can reach her at info@webcraftstudio.ca.

2. Information we collect

Information you give us:

• Contact details and messages: your name, email, what you're looking for, and anything you write in our contact form, by email or through social media.
• Project information: your business name and details, website content, photos, logos and other files you send us.
• Account access: logins for hosting, domains, social media or other tools, only if you choose to share them so we can do the work.
• Billing details: your name, business name, address and payment records. Card payments are handled by the payment provider, and we never see or store full card numbers.

Information collected automatically: when you visit, our web host records standard technical data such as your IP address, browser and device type, the pages you request and the time of your visit. This is used to keep the site secure and working.

Information from other sources: when preparing a quote we may look at publicly available information about your business, like your current website or social media profiles.

Our services are meant for businesses and adults. We don't knowingly collect personal information from anyone under 16. If you think someone under 16 has sent us their information, let us know and we'll delete it.

3. Cookies and tracking

We don't set our own cookies and we don't use analytics, advertising pixels or tracking tools. Fonts, images and some scripts load from outside providers (listed in section 7), which receive your IP address in order to deliver those files. If we ever add analytics or tracking, we'll update this policy first and ask for your consent where the law requires it.

4. How we use your information

• To reply to your questions and prepare quotes.
• To plan, design, build, launch and maintain your project.
• To send invoices, receive payments and keep business and tax records.
• To protect our site, our clients and ourselves from fraud, spam and misuse.
• To meet our legal obligations.

We won't use your information for any other purpose without telling you first and, where needed, getting your consent.

5. Your consent

When you contact us or hire us, you agree to us using your information for the purposes above. You can withdraw your consent at any time by emailing us, subject to legal or contractual limits, such as records we must keep for tax purposes. If you withdraw consent, we may not be able to keep working on your project.

6. Emails from us

Replies to your messages and project updates aren't marketing. We only send promotional emails, like newsletters or offers, if you've agreed to receive them, as required by Canada's Anti-Spam Legislation (CASL). Every promotional email will include a way to unsubscribe.

7. Who we share it with

We never sell, rent or trade personal information. We only share it when needed:

• Service providers who help run the business: Netlify (website hosting and contact form messages), Webflow (site design and file delivery), Google Fonts and cdnjs/Cloudflare (fonts and site scripts), plus our email, file storage, invoicing, payment and accounting tools.
• Professional advisors, such as an accountant or lawyer, who must keep it confidential.
• Authorities, when the law requires it, for example a valid court order.
• A buyer or successor, if the business is ever sold or merged. They would have to protect your information in line with this policy.

We only give providers the information they need to do their job.

8. Storage outside Canada

Some of our providers store or process information outside Canada, mainly in the United States. While it's there, it's protected by our providers' security measures but may be accessible to courts and authorities in that country under local law.

9. Client projects and your customers' information

When we build or maintain a website, form or filter for you, any personal information your own visitors or customers submit through it belongs to you. We only access it to provide our services, and only on your instructions. You're responsible for having your own privacy policy and following the privacy laws that apply to your business. We're happy to help set up a policy page, but we're not lawyers and that help isn't legal advice.

Logins you share with us are used only for your project, stored in a secure password manager, and deleted when the work is done. We recommend changing any shared passwords once a project wraps up.

10. Portfolio and testimonials

We may show finished work we've made for you, like website screenshots or filter demos, in our portfolio and on social media, unless we've agreed otherwise in writing. We'll only publish a testimonial, your name or your photo with your permission.

11. TikTok filters

Our filters run inside TikTok and are governed by TikTok's terms and privacy policy. We don't receive your camera images, videos, face data or account details when you use one. TikTok may share overall usage numbers with us, like how many times a filter was used or shared, which don't identify you.

12. How long we keep it

• Inquiries that don't become a project: deleted within 12 months.
• Client project files and messages: kept while we work together and for up to 2 years after, so we can help with updates or questions.
• Invoices and financial records: kept for 6 years, as required by Canadian tax law.
• Website logs: kept by our host for a short period under its own policy.

After that, information is securely deleted or made anonymous.

13. How we protect it

We use reasonable safeguards for the sensitivity of the information. These include encrypted (HTTPS) connections, two-factor authentication and strong passwords on our accounts, a password manager for client logins, access limited to the people doing the work, and deleting information we no longer need. No system is perfectly secure, but if a breach ever creates a real risk of significant harm to you, we'll notify you and the Office of the Privacy Commissioner of Canada as PIPEDA requires.

14. Your rights

You can ask us to:

• Tell you what personal information we have about you and how it's been used and shared.
• Correct anything that's inaccurate or incomplete.
• Delete your information, unless we're legally required to keep it.
• Stop using it for a particular purpose, by withdrawing your consent.

Email info@webcraftstudio.ca and we'll reply within 30 days. There's no charge. We may need to confirm your identity first. If we can't fully meet a request, for example because the law requires us to keep a record, we'll explain why.

If you live outside Canada, such as in the EU, the UK or a U.S. state with its own privacy law, you may have extra rights. Contact us and we'll honour them where they apply.

15. Questions and complaints

Please contact our Privacy Officer first at info@webcraftstudio.ca, and we'll do our best to sort it out. If you're not satisfied, you can file a complaint with the Office of the Privacy Commissioner of Canada.

16. Other websites

Our site links to other websites, including project demos and TikTok. We're not responsible for their privacy practices, so please read their policies.

17. Changes to this policy

We may update this policy as our services or the law change. The date at the top shows the latest version. If we make a significant change to how we use your information, we'll make it clear on this page and, where appropriate, let clients know directly.

← Back to home