Privacy Policy

1. Who We Are

Boreas Web Design Agency is a sole proprietorship operating in North York, Toronto, Ontario, Canada. Kiarash Sahebi is the privacy officer. You can reach the privacy officer at webboreas0@gmail.com.

2. What Information We Collect

We collect only what we need to deliver the service.

From our website visitors:

• Name and email address when you submit our contact form or book a call
• Basic analytics: page visits, browser type, referring source. No identifiers tied to a person.

From collaborators we work with:

• Business contact details
• Domain registration and hosting account information
• Brand assets, content, and any business information you share for the build
• Payment information, processed by Stripe. We do not store credit card numbers.

We do not collect sensitive personal information. We do not collect health, financial, biometric, or government identifier data beyond what is strictly required to register a domain or process payment.

3. Why We Collect It

We use your information only to:

• Respond to your inquiry
• Deliver the service you hired us for
• Send invoices and process payments
• Send the monthly performance summary
• Communicate about your account

We do not use your information for advertising. We do not build marketing profiles. We do not sell, rent, or trade your information.

4. Consent

You consent to this policy when you accept the Terms of Service, when you submit a form on our site, or when you communicate with us about hiring Boreas. You may withdraw consent at any time by emailing the privacy officer. If you withdraw consent, we may no longer be able to provide the service.

5. Third Parties We Use

We use a small number of third-party services to run the business. Each one has its own privacy practices, and we use only what is necessary.

• Stripe — processes payments. Stores card information on your behalf.
• Hostinger — hosts websites and routes email. May store form submissions and traffic logs.
• Google Workspace — handles our email communication with you.

We do not transfer your information to these providers beyond what they need to function. We do not share your information with anyone outside this list without your permission.

6. Where Your Information Lives

Information is stored on servers operated by the providers listed in Section 5. Some of these servers are located outside Canada. By accepting this policy, you understand and consent to that.

7. How Long We Keep It

We keep your information for as long as you are a collaborator, plus three years after the relationship ends. We keep tax and invoicing records for six years, as required by Canadian law.

You may request earlier deletion of non-required records by contacting the privacy officer. We honor those requests within thirty days.

8. How We Protect It

We use industry-standard safeguards. Encrypted connections for all data in transit. Strong passwords. Limited access. Software kept current.

No system is perfect. If a breach happens that puts your information at real risk, we tell you within thirty days, along with a clear description of what happened and what to do.

9. Your Rights Under PIPEDA

You have the right to:

• Know what information we hold about you
• See that information on request
• Correct anything that is wrong
• Withdraw consent (Section 4)
• File a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca

To exercise any of these, email the privacy officer at webboreas0@gmail.com. We respond within thirty days.

10. Cookies and Analytics

Our website uses minimal cookies. We use basic analytics to understand how visitors find us. We do not use cross-site tracking. We do not use advertising trackers.

Sites we build for collaborators follow the same standard by default. If a collaborator requests additional analytics tools, we tell them what data those tools collect before installing.

11. Children

Boreas does not knowingly collect information from anyone under thirteen. Our service is for businesses and adults.

12. Changes to This Policy

If we update this policy, we publish the new version with the effective date at the top. Material changes are emailed to current collaborators at least thirty days before they take effect.

13. Contact