Privacy policy

This policy explains what personal information I collect through this website and in the course of client work, why I collect it, and how I protect it. It follows British Columbia's Personal Information Protection Act (PIPA) and Canada's PIPEDA.

Who runs this site

Duford Digital is a web design and SEO business in Armstrong, British Columbia. It is run by 1337376 B.C. Ltd., a British Columbia company operating as Duford Digital ("Duford Digital," "I," "me"). 1337376 B.C. Ltd. is responsible for the personal information this site collects.

My privacy officer is MJ Howie. You can reach her at hello@acornwebsites.com. You can also write to 1337376 B.C. Ltd., c/o Davidson Lawyers, 301-3126 31 Ave, Vernon, BC V1T 2H1.

What I collect

When you contact me by email, text, or phone, I receive whatever you send: your name, business name, contact details, and the content of your message. When you book a call, Google Calendar collects your name, email, and the time you chose under Google's own privacy policy.

The contact form and the hosting and maintenance plan form send what you type straight to my email. Nothing is stored on this website, and nothing is added to a mailing list. The hosting and maintenance plan form also passes your details to Stripe to set up payment, under Stripe's own privacy policy.

If you become a client, I collect what the project needs: contact details, business information, website content, logins for systems you ask me to work in, and billing details. I do not store card numbers. Payments run through my invoicing provider and Stripe.

Cloudflare hosts this site and keeps standard server logs, such as IP addresses and the pages you request. These keep the site running and help stop abuse.

Analytics and cookies

This site uses three tools to count visits and see which pages bring in work.

• Google Analytics counts visits, shows which pages people read, and counts taps on the phone and email links. It sets cookies in your browser and sends usage data to Google.
• Ahrefs Web Analytics counts visits. It sets no cookies and stores no IP addresses.
• Cloudflare Web Analytics counts visits. It sets no cookies and does not track you across other sites.

You can block Google Analytics cookies in your browser settings or with Google's opt-out browser add-on. The site still works without them. If I add a tool that identifies individuals, I will update this page and add a notice.

Why I collect it

To reply to you, to scope and quote work, to do the work you hire me for, to bill you, and to keep records that Canadian tax law requires. I use visit counts to see what is useful and to fix what is not. I do not sell, rent, or trade personal information. I do not use it for targeted advertising. I do not send marketing email unless you have asked for it, and you can stop it any time.

Who else handles it

Only the providers I need to run the business and deliver your project. Cloudflare hosts this site and processes form messages. Google provides email, calendar, and analytics. Ahrefs provides visit counts. Stripe processes payments. Other examples are hosting and website tools (such as Pressable and WordPress) and invoicing. Each of these has its own privacy policy. Most are based in the United States, so your information may be stored or processed there and be subject to United States law. I choose providers with strong security practices and share the minimum needed.

I will share information if the law requires it, or to protect the safety or rights of any person.

How I protect it

Client logins live in a password manager, not in email or documents. Accounts I control use two-step sign-in. The site runs over a secure connection (HTTPS). Access to your systems is limited to what the project needs and is removed when we finish, unless you have asked me to keep it for ongoing hosting and maintenance.

How long I keep it

• Messages and enquiries: up to two years after our last contact.
• Client project records and invoices: seven years, as Canadian tax law requires.
• Website content and files: for the life of our working relationship, then deleted or returned on request.
• Google Analytics data: up to 14 months.
• Server logs: a short time, then deleted.

Your choices

You can ask to see the personal information I hold about you. You can ask me to correct it or delete it where the law allows. You can withdraw your consent at any time. Email hello@acornwebsites.com and I will reply within 30 days.

If you live in the United States

I do not sell or share personal information for targeted advertising. I run no ad trackers, so there is nothing to opt out of. If that changes, I will add a "Do Not Sell or Share My Personal Information" link to every page.

Depending on your state, you may have the right to know what I collect, to get a copy, to correct it, to have it deleted, and to opt out of its sale or sharing. To use these rights, email hello@acornwebsites.com. I answer within 45 days. I will not treat you differently for asking.

How to make a complaint

If you have a concern, please tell my privacy officer first at hello@acornwebsites.com. I will look into it and reply in writing.

If you are not happy with my answer, you can complain to the Office of the Information and Privacy Commissioner for British Columbia at oipc.bc.ca.

Client websites

This policy covers duforddigital.com and my own business practices. Websites I build for clients belong to those clients and have their own privacy policies. I set them up to collect only what the client needs and to be clear about it.

Changes

If this policy changes, the date at the top will change with it. Material changes will be noted here for at least 30 days. Last updated October 13, 2026.

Contact

1337376 B.C. Ltd., operating as Duford Digital. c/o Davidson Lawyers, 301-3126 31 Ave, Vernon, BC V1T 2H1. hello@acornwebsites.com. 778-692-5555.