privacy.

What we collect

A few straightforward things:

• What you send us: Your name, email, and whatever you type into our contact form or send by email.
• Traffic numbers: Pages viewed, rough location by country/region, device type, and referring sites via Google Analytics.
• Bot protection data: Device and interaction signals collected by Google reCAPTCHA so bots don’t abuse our forms.
• Server logs: Standard IP connection records, kept for 30 days purely for security and troubleshooting.

Why we collect it

Everything has a single, practical purpose:

• Contact details exist so we can reply to your message, chat about your project, and send a quote. We don’t score leads or build secret profiles.
• Traffic stats show us what’s actually useful on the site and what needs fixing.
• reCAPTCHA stops automated scripts from spamming our inbox and hammering our server.

Cookies and analytics

We use a couple of standard tools that rely on cookies:

• Google Analytics: Sets cookies to measure general traffic patterns. It helps us see how people move around the site, not who you are as an individual. You can block this anytime with Google’s opt-out browser add-on.
• Google reCAPTCHA: Checks whether you’re a real human or a script when submitting a form. Google handles this under their own Privacy Policy and Terms of Service.
• Essential cookies: Basic files that keep the website running securely.

You can wipe or block cookies through your browser settings whenever you want. The site will still work, though forms might be a bit more finicky.

Who we share it with

Nobody, other than the services that physically run the business:

• Google: For our site analytics and reCAPTCHA spam filtering.
• Hosting and email providers: To host the files, serve the pages, and deliver mail back and forth.

We don’t sell data, rent it, or trade it to brokers or advertisers. If law enforcement or a court order ever legally forces us to share something, we’ll tell you unless a judge forbids it.

How long we keep it

• Enquiries sit in our inbox while we’re talking, and for two years after that in case you return with another project.
• Newsletter emails stay on our list until you hit unsubscribe.
• Client files and invoices are kept for the duration of our work together plus seven years, because tax laws and accountants require it.
• Server logs delete automatically after 30 days.

Your rights

We follow Canadian privacy laws (PIPEDA) and Québec’s Law 25. That means you have real control:

• You can ask what info we hold about you.
• You can ask for a copy, ask us to fix mistakes, or tell us to delete it entirely.
• You can pull back your consent whenever you want.

Email hello@fancyweb.ca and we’ll handle it within 30 days, free of charge. If you ever feel we aren’t handling things fairly, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada (OPC) or Québec’s CAI.

Security and younger visitors

We keep the site locked down with HTTPS encryption and sensible access controls. No setup on the internet is completely unhackable, but we maintain and patch our software diligently to keep your details safe.

Also, this is a commercial business site meant for adults and organizations. We don’t intentionally collect data from anyone under 18.

Changes to this policy

If we change how we handle your data, we’ll update this page and update the date at the top. If we ever make a major shift in how we handle information you’ve already trusted us with, you’ll get an email directly, not a quiet edit.