Privacy policy

Duford Digital Inc. ("Duford Digital," "I," "me") is a web design and SEO business in Armstrong, British Columbia. This policy explains what personal information I collect through this website and in the course of client work, why I collect it, and how I protect it. It follows British Columbia's Personal Information Protection Act (PIPA) and Canada's PIPEDA.

What I collect

When you contact me by email, text, or phone, I receive whatever you send: your name, business name, contact details, and the content of your message. When you book a call, Google Calendar collects your name, email, and the time you chose under Google's own privacy policy.

The contact form and the care plan form send what you type straight to my email. Nothing is stored on this website, and nothing is added to a mailing list. The care plan form also passes your details to Stripe to set up payment, under Stripe's own privacy policy.

This website does not have accounts and does not sell anything directly. It uses Google Analytics and Ahrefs Web Analytics to count visits and see which pages bring in work. If I add a tool that identifies individuals, I will update this page and add a notice.

If you become a client, I collect what the project needs: contact details, business information, website content, logins for systems you ask me to work in, and billing details. I do not store card numbers. Payments run through my invoicing provider.

Why I collect it

To reply to you, to scope and quote work, to do the work you hire me for, to bill you, and to keep records that Canadian tax law requires. I do not sell, rent, or trade personal information. I do not send marketing email unless you have asked for it, and you can stop it any time.

Who I share it with

Only the providers I need to run the business and deliver your project. Examples: email and calendar (Google), hosting and website tools (such as Cloudflare, Pressable, and WordPress), invoicing and payment processing, and analytics. Each of these has its own privacy policy. Some are outside Canada, which means your information may be stored or processed in the United States or elsewhere and be subject to those laws. I choose providers with strong security practices and share the minimum needed.

I will share information if the law requires it, or to protect the safety or rights of any person.

How I protect it

Client logins live in a password manager, not in email or documents. Accounts I control use two-factor authentication. Access to your systems is limited to what the project needs and is removed when we finish, unless you have asked me to keep it for ongoing care.

How long I keep it

Enquiry emails: until they are no longer useful, usually within two years. Client project records and invoices: seven years, as Canadian tax rules require. Website content and files: for the life of our working relationship, then deleted or returned on request.

Your rights

You can ask what personal information I hold about you, ask me to correct it, or ask me to delete it where the law allows. Email mj@duforddigital.com and I will reply within 30 days. If you are not satisfied with my response, you can contact the Office of the Information and Privacy Commissioner for British Columbia.

Client websites

This policy covers duforddigital.com and my own business practices. Websites I build for clients belong to those clients and have their own privacy policies. I set them up to collect only what the client needs and to be clear about it.

Changes

If this policy changes, the date at the top will change with it. Material changes will be noted here for at least 30 days.

Contact

Duford Digital Inc., 3005 Wood Ave, Armstrong, BC V4Y 0H1. mj@duforddigital.com. 778-692-5555.