Privacy Policy

1. About This Policy

Red Wire Works (operating as Red Wire Digital, "we," "us," or "our") is committed to protecting the privacy of individuals who interact with our website and services. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information in compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

This Policy applies to personal information collected through the redwiredigital.ca website and the enquiry or onboarding forms hosted on it. It does not apply to information collected under a separate Master Services Agreement (MSA) with business clients, which is governed by those agreements.

By using our Site or submitting information through our contact form, you consent to the collection and use of your personal information as described in this Policy.

2. What Information We Collect

We collect only the personal information that is necessary to respond to your enquiry and deliver our services.

Information you provide directly

When you submit our contact or enquiry form, we may collect:

• Your full name
• Email address
• Phone number
• Business name
• Google Business listing URL (optional — used to build your website prototype)
• Any additional information you include in a free-text message field

Payment information

We use Stripe as our third-party payment processor. When you subscribe to our services or make a payment, you are redirected to a Stripe-hosted checkout page. We do not collect, store, or have access to your credit card number, bank account details, or any other financial data. All payment information is collected, stored, and processed securely by Stripe in accordance with their Privacy Policy and PCI DSS compliance standards. You can review Stripe's privacy practices at stripe.com/en-ca/privacy.

Automatically collected information

Like most websites, our Site may automatically collect limited technical information when you visit, including:

• Your IP address and approximate geographic location (country/city level)
• Browser type and version
• Pages visited and time spent on each page
• Referring URL (how you found us)

This technical data is used solely for site performance monitoring and is not linked to your personal identity.

3. Cookies

Our Site uses a minimal number of cookies — small text files stored in your browser — for basic site performance only. We do not use cookies for advertising, remarketing, or cross-site tracking.

The cookies we use may include:

• Essential cookies: Required for the Site to function correctly (e.g. form session handling).
• Performance cookies: Anonymous data to help us understand how visitors interact with the Site.

You can control or disable cookies through your browser settings. Note that disabling cookies may affect the functionality of the contact form.

4. How We Use Your Information

We use the personal information you provide for the following purposes:

• To respond to your enquiry and assess whether our services are a good fit for your business.
• To build a website prototype using your business's publicly available information (name, photos, hours, reviews) sourced from your Google Business listing URL.
• To communicate with you about your project, subscription, or service agreement.
• To process payments securely via Stripe.
• To fulfil our obligations under any Master Services Agreement you enter into with us.
• To improve our website and service offerings.
• To comply with applicable legal obligations.

We do not use your personal information for automated decision-making or profiling, and we do not sell your information to third parties.

5. How We Share Your Information

We share your personal information only as necessary and as described below:

We do not sell, rent, or trade your personal information. We do not share information with advertising networks or data brokers.

We may disclose your information if required by law, court order, or lawful government request.

6. Cross-Border Transfers

Some of our service providers (including Stripe and Vercel) are located in the United States or other jurisdictions outside Canada. When your personal information is transferred outside Canada, it may be subject to the laws of those jurisdictions — including the U.S. PATRIOT Act, which may permit access by U.S. law enforcement.

We only engage service providers that maintain industry-standard security practices and whose privacy terms are accessible to the public. By using our Site, you acknowledge and consent to this cross-border transfer.

7. How Long We Retain Your Information

We retain your personal information for as long as is necessary to fulfill the purposes described in this Policy, or as required by law:

• Enquiries that do not convert to clients: We retain contact information for up to 12 months, after which it is deleted from our records.
• Active clients: We retain information for the duration of the active Master Services Agreement plus an additional 2 years for legal and accounting purposes.
• Payment records: Retained by Stripe per their data retention policies. We retain invoice and subscription records for 7 years to comply with Canadian tax requirements.

8. Your Privacy Rights (PIPEDA)

Under PIPEDA, you have the right to:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct any inaccurate or incomplete information.
• Withdrawal of consent: Withdraw your consent to our collection and use of your personal information at any time, subject to legal and contractual restrictions.
• Complaint: File a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca if you believe your privacy rights have been violated.

To exercise any of these rights, contact us using the details in Section 9. We will respond within 30 days.

9. How We Protect Your Information

We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, use, or disclosure, including:

• HTTPS (SSL/TLS) encryption for all data transmitted to and from this Site.
• Security headers (CSP, HSTS, X-Frame-Options) on all pages.
• Restricted access to personal information on a need-to-know basis.
• Use of third-party services (Stripe, Web3Forms, Vercel) that maintain their own security certifications.

No method of electronic transmission or storage is 100% secure. While we use commercially reasonable safeguards, we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will update the "Last updated" date at the top of this page. Continued use of the Site after any changes constitutes your acceptance of the revised Policy.

We recommend reviewing this page periodically.

11. Contact Our Privacy Officer

For any privacy-related questions, requests, or complaints, please contact: