§Privacy

Short version: the contact form is how you write to us. Book a call, when the calendar is live, is run by Google. If you accept, we count visits with Cloudflare Web Analytics, which sets no cookie and does not follow you between sites. There are no advertising tags. We do not sell anything to anyone.

What we collect

Only what you type into the contact form: your name, your email address, the kind of project you picked, and your message. If a call is booked later, Google runs that calendar and holds the time and the details you give them. There is no account to create on this site and no tracking pixel to opt out of.

Our hosting provider keeps standard server logs, which include IP addresses, as every web server does. We do not read them for anything except keeping the site up.

Why we have it

We keep it so we can answer you, and for no other reason. We do not add you to a mailing list or build a profile of you, and we will only contact you about the enquiry you sent.

Where it goes

Your message is sent to our inbox through Resend, an email provider. It passes through their systems to reach us, which means it is processed on servers outside Canada.

Nobody else receives it. We do not sell, rent or share enquiries. Cloudflare Web Analytics never sees them. It counts page views and never touches the form.

How long we keep it

Your enquiry stays in our email like any other message. If it turns into a project, it becomes part of that project’s records. If it does not, we delete it when it stops being useful to keep.

Ask us to delete it sooner and we will, without asking why.

Your rights

You can ask what we hold about you, ask for a copy, ask us to correct it, or ask us to delete it. Email us and we will action it. We will not make you fill in a form to do it.

In Canada this is covered by PIPEDA, and you may complain to the Office of the Privacy Commissioner of Canada if you are not satisfied with how we respond. If you are in the UK or EU, GDPR gives you the same rights and your local supervisory authority is the equivalent route.

Security

The site is served over HTTPS. Form submissions are sent to our own server rather than to a third party from your browser, and the credentials used to send the mail are not present in anything your browser downloads.

No system is perfect. We do not store enquiries in a database, so there is no database to breach.

Cookies

There is no advertising cookie, and no analytics cookie either, because Cloudflare Web Analytics is cookieless. On first visit we ask Accept or Reject. That choice is stored in localStorage and in a first-party cookie named ivaldr_consent, Path=/, SameSite=Lax, Secure on HTTPS, lasting one year. Reject means Cloudflare Web Analytics is never loaded. The site still works, and you can change your mind from Cookie settings in the footer.

Turnstile is Cloudflare’s check that a person, not a bot, is sending the contact form. It runs in your browser, and Cloudflare tells our server whether it passed. If you accept, it loads with the form. If you reject, or have not chosen, it loads only when you press send, and the form says so before you do.

Hosting (Cloudflare) may set a cookie to keep the connection honest. Google runs /book if the calendar URL is set, and their cookies apply on that widget only.

Changes, and how to reach us

If this changes we will change this page. There is no version history worth keeping for a document this short.

Questions about any of it go to the same place everything else does, the contact form.

Start a project