Overview

Ross & Griffiths Digital ("we", "us", or "our") is committed to protecting your personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario privacy standards. This policy explains what information we collect, how we use it, and your rights regarding that information.

Who we are

Ross & Griffiths Digital is a web design and development business based in Northumberland County, Ontario, Canada. You can contact us at cq@rossgriffithsdigital.com.

What information we collect

We collect personal information only when you choose to provide it to us. This includes:

Your name and email address when you submit our contact form
Your business name and any project details you choose to share
Usage data collected automatically via Google Analytics (see Cookies section below)

We do not collect sensitive personal information, financial data, or any information from minors under 16.

How we use your information

We use the information you provide solely to:

Respond to your enquiries and communicate about potential or active projects
Provide web design and maintenance services you have engaged us for
Improve our website based on aggregated, anonymised usage data

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Cookies and analytics

Our website uses cookies to understand how visitors use our site. We use Google Analytics 4 (GA4), which collects anonymised data including pages visited, time on site, and general geographic location (city/region level). No personally identifiable information is collected through analytics.

When you visit our site, you will be asked to consent to the use of cookies. If you decline, Google Analytics will not be loaded and no tracking cookies will be set. You can change your preference at any time by clearing your browser's local storage for this site.

For more information on how Google handles data, see Google's Privacy Policy.

Legal basis for processing (PIPEDA)

Under PIPEDA, we rely on the following bases for processing personal information:

Consent: you have given us explicit consent by submitting a contact form or accepting cookies
Contractual necessity: processing is required to fulfil a service agreement with you
Legitimate interest: understanding how our site is used in order to improve it

Data retention

We retain contact form submissions and project-related correspondence for up to two years after our last interaction, or until you request deletion. Analytics data is retained in accordance with Google Analytics' default retention settings (14 months).

Your rights

Under PIPEDA, you have the right to:

Request access to the personal information we hold about you
Request correction of inaccurate information
Withdraw consent and request deletion of your data at any time
File a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca

To exercise any of these rights, email us at cq@rossgriffithsdigital.com. We will respond within 30 days.

Third-party services

Our contact form is processed through our own infrastructure hosted on Amazon Web Services (AWS). Submissions are transmitted securely over HTTPS and delivered directly to us via AWS Lambda and Amazon SES. No third-party form processor stores your submission data.

Security

We take reasonable precautions to protect your personal information from loss, theft, and unauthorised access. Our site is served over HTTPS and we do not store sensitive personal data beyond what is necessary to respond to your enquiry.

Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of our site following any changes constitutes acceptance of the updated policy.

Contact

Questions or concerns about this policy? Email us directly at cq@rossgriffithsdigital.com. We're happy to help.