Legal
Privacy policy
This policy explains what personal information Driftlatched (“we”, “us”) collects through this website and by email, why, and what you can ask us to do with it. Driftlatched is a Canadian business based in British Columbia. It handles personal information in line with British Columbia’s Personal Information Protection Act (PIPA) and, where it applies, Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).
The short version
- This site sets no cookies and runs no analytics, advertising or tracking scripts.
- Fonts and all other files are served from this site; your browser does not contact any third party to display it.
- If you email us, we keep your message to reply and to do business with you, and for nothing else.
- We never sell or rent personal information.
What we collect
When you visit the site. Our hosting provider, Cloudflare, processes the technical information every web request carries: your IP address, browser and device type, the page requested, and the time. It uses this to deliver the site and to protect it from abuse and attacks. We do not use it to identify you, and we do not combine it with other information.
When you email us. If you write to any Driftlatched address, such as info@driftlatched.ca, we receive your name, email address, your organisation if you give it, and whatever you choose to include in the message.
When you become a client. Contact and billing details needed to deliver and invoice the work. Personal information we handle on a client’s behalf during an engagement is governed by that engagement’s contract, not by this policy.
Why we use it
- To answer your enquiry and continue the conversation you started.
- To prepare proposals, deliver services and invoice for them.
- To keep records that the law requires, such as tax and accounting records.
- To keep the site and our systems secure.
We use personal information only for the purpose it was collected for, or one a reasonable person would expect from the context. By emailing us you consent to that use. You can withdraw consent at any time, subject to legal or contractual limits; we will then stop using the information except where the law requires us to keep it.
Who we share it with
We share personal information only with service providers that help us run the business, and only what they need:
- Cloudflare, Inc. hosts this website and manages our domain names.
- Microsoft Corporation provides our email and office software (Microsoft 365). Our Microsoft 365 data is stored in Microsoft’s Canadian datacentres.
- Our accountant and professional advisers, when needed for the purposes above.
We may also disclose information where the law requires it. We do not sell, rent or trade personal information, and we do not share it for anyone else’s marketing.
Where it is stored
Email and documents are stored in Canada. Cloudflare operates a global network, so the technical information described above may be processed in other countries, including the United States, where it may be accessible to authorities under local law. Our providers are bound by contract to protect personal information and to use it only to provide their service to us.
How long we keep it
- Enquiries that do not lead to work: up to two years after our last exchange, then deleted.
- Client records: for as long as the law requires, which for business and tax records is generally six years after the end of the year they relate to.
- Cloudflare’s technical request information: for the short periods set by Cloudflare’s own policies.
How we protect it
Our accounts use multi-factor authentication, access is limited to those who need it, and data is encrypted in transit and at rest by our providers. No system is perfectly secure; if a breach creates a real risk of significant harm to you, we will notify you and the relevant privacy commissioner as the law requires.
Your rights
You can ask us to tell you what personal information we hold about you, how we have used it and who we have shared it with; to correct anything inaccurate; or to delete information we no longer need. Send your request to info@driftlatched.ca. We will reply within 30 days and will not charge for a reasonable request. We may need to confirm your identity first.
If you are not satisfied with our response, you can contact the Office of the Information and Privacy Commissioner for British Columbia (oipc.bc.ca) or, where PIPEDA applies, the Office of the Privacy Commissioner of Canada (priv.gc.ca).
Children
This site is for businesses and public bodies. It is not directed at children, and we do not knowingly collect information from them.
Changes
If we change this policy we will post the new version here with a new effective date. Significant changes will apply only to information collected after they take effect.
Contact
Questions about this policy or about your personal information go to our privacy contact at info@driftlatched.ca.