Privacy Policy

This policy explains how Cypressa ("we", "us"), a Canadian business, handles personal information collected through this website. If you contact us another way, such as by email or phone, we handle that information the same way.

1. What we collect

When you send the contact form, we receive your name, email address, the service you need and your message, plus anything optional you add: business name, phone number, website and preferred timing. We also record that you accepted this policy and which page you sent the form from.

Please do not include sensitive information such as passwords, financial details or government ID numbers. If we need access to an account to do work for you, we will agree a secure way to share it.

If you start the form and leave before sending it, your answers are kept in your own browser for up to seven days so you can finish later. They are not sent to us until you press Send, and they are cleared when you send the form or choose Start fresh.

We set no cookies of our own and use no analytics or advertising trackers. Our hosting provider keeps standard server logs, such as IP address and browser type, to run and protect the site.

2. How we use it

Only to reply to you, prepare a proposal, carry out any work you engage us for, and keep the records the law requires. Submitting the form does not add you to a mailing list.

3. Who handles it

We use a small number of service providers to host this website, store inquiries and send email. They handle your information only on our behalf. Some are located outside Canada, so your information may be processed in other countries and be subject to their laws. We may also disclose information when the law requires it.

4. Spam protection

The form includes a hidden field that people never see, and submissions are checked for spam automatically.

5. How long we keep it

As long as needed to reply and, if we work together, for the project and the period our business and tax records require. Inquiries that do not lead to a project are intended to be deleted within about 24 months. You can ask us to delete yours sooner.

6. How we protect it

The site uses an encrypted HTTPS connection. Access to inquiries is limited to the people who reply to them, and the accounts that hold them use strong passwords and multi-factor authentication where available. No method of storage or transmission is completely secure, but we take reasonable care to protect your information.

7. Your rights

Under Canadian privacy law you can ask to see the information we hold about you, correct it, have your inquiry deleted where we are not required to keep it, or withdraw your consent. Send your request through the contact form. We will reply within the time the law requires, generally 30 days, and may ask you to confirm a detail of your inquiry first so we only share information with you.

If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada or your provincial privacy regulator.

8. Changes and questions

If our practices change, we will update this page and the date at the top. Questions about this policy are welcome through the contact form.