Privacy Policy

Toolkit Studio ("we", "us", "our") operates toolkitstudio.ca (the "Site") and provides custom websites, hosting, and Google Business Profile management to local businesses across Toronto and the GTA. This policy explains what personal information we collect, how we use it, and your rights under Canada's PIPEDA.

What we collect

When you use the Site or engage our services, we may collect:

• Information you submit through forms — your name, business name, email, phone, current website, project goals, and anything else you include in the "notes" field on /start
• Email correspondence between you and us
• Basic anonymized analytics (pages visited, referrer, browser type) collected by our hosting provider

We do not use cross-site tracking cookies, advertising trackers, or third-party marketing pixels.

How we use it

• To respond to your inquiry and scope a project
• To deliver the services you've engaged us for (build, host, maintain, edit your site and Google Business Profile)
• To send invoices and payment receipts
• To send service-related updates (scheduled maintenance, billing notifications, security advisories)

We do not send marketing emails. We do not sell, rent, or share your information with third parties for their own marketing purposes.

Third-party services we rely on

• Web3Forms receives form submissions from /start and forwards them to our inbox. See web3forms.com/privacy.
• Cloudflare hosts the Site and (with your written permission) may host your project. See cloudflare.com/privacypolicy.
• Stripe processes payments. Your full card number never touches our servers — Stripe handles all card data per PCI-DSS. See stripe.com/privacy.
• Google Workspace / Gmail is where we receive your email correspondence. See policies.google.com/privacy.

How long we keep it

We retain client correspondence and project files for the duration of the engagement plus seven (7) years for tax and CRA records, after which we delete or securely archive them. Lead inquiries that don't become clients are deleted within twelve (12) months unless you ask us to keep them on file.

Your rights

Under PIPEDA you can ask us, at any time, to:

• Show you what personal information we have about you
• Correct anything that's wrong
• Delete your information (subject to tax and legal retention requirements)

Email toolkitstudio.web@gmail.com with the subject "Privacy request" and we'll respond within thirty (30) days.

Cookies

The Site does not use cookies for tracking or advertising. Our hosting provider may set strictly necessary cookies for security (e.g., bot detection). We do not set marketing cookies, analytics cookies, or third-party trackers.

Changes to this policy

We may update this policy occasionally. The "Last updated" date at the top reflects the most recent change. Material changes affecting active clients will be communicated by email.

Contact

Toolkit Studio
toolkitstudio.web@gmail.com
Toronto + GTA, Canada