Privacy Policy
We build websites for a living, so we know exactly how much data a website can quietly collect. This page explains what we collect, why, and what you can ask us to do about it, in plain language.
No data selling, ever
We don't sell, rent or trade personal information to anyone.
You own your project data
Code, accounts, analytics and customer records stay yours.
One inbox for requests
Email us and a person answers within five business days.
Who we are
Integriti Studio designs, builds and grows websites: web development, ecommerce, SEO and CRO, for businesses in Canada, the US and beyond. This policy covers integritistudio.com and the services we deliver to clients.
We act in two different roles. On our own website we’re the controller of the information you give us. On client projects, we’re a processor: the data belongs to our client, and we only handle it to do the work they’ve asked for.
What we collect
Only what we need to answer you and run the work. Nothing is required beyond what's marked on a form.
How we use it
Where GDPR applies, we rely on your consent (analytics, marketing email), contract performance (delivering the work), and legitimate interest (running and securing the business).
Client & project data
Building and maintaining a website means we often get access to your systems, and sometimes to your customers' data inside them. Three commitments cover how we handle it.
Who we share it with
We don't sell or trade personal information. We share it only with the service providers that make our work possible, each bound by their own data agreements:
Some of these providers store data in the United States or the EU. Where information leaves Canada, we rely on contractual safeguards such as standard contractual clauses. We may also disclose information if the law requires it, or to protect our rights.
How long we keep it
Enquiries that don't become projects are deleted after 24 months. Client records are kept for the length of the engagement and up to seven years afterwards, where tax and contract law requires it. Analytics data expires automatically after 14 months. Access credentials are revoked within five business days of a project closing.
How we protect it
Encrypted connections everywhere, a password manager with two-factor authentication on every account, role-based access for the team, and encrypted backups. No system is perfect. If a breach ever affects your information, we'll tell you and the relevant regulator without delay.
Your rights
Under Canadian privacy law (PIPEDA) and, where it applies, the GDPR, you can ask us to:
Email info@integritistudio.com and we’ll respond within 30 days, usually much sooner. If your request concerns data we hold for a client, we’ll pass it to them and support their response.
Changes to this policy
When our tools or services change, this page changes with them. The effective date at the top always reflects the current version, and for anything material we'll notify active clients by email before it takes effect.
Contact us
Questions about this policy, or about anything we hold? A person on the team answers, not a ticket queue.
Is your own site handling data this carefully?
Our free site audit covers performance, SEO and the tracking your site is quietly running. No call required.
Takes 60 seconds · No obligation