Your Privacy, Respected.

BuildSFY is a sole-proprietor web development business operated by Dylan Fowler, based in Ontario, Canada. This Privacy Policy governs the collection, use, and disclosure of personal information through the website buildsfy.ca and all associated services, platforms, and communications (collectively, the "Services").

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with its terms, please discontinue use of the Services.

This policy is governed by Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Ontario's applicable privacy legislation. We are committed to handling your personal information responsibly and in full compliance with these laws.

We collect personal information only to the extent necessary to provide our Services. The categories of information we may collect include:

We use the personal information we collect solely for legitimate business purposes directly related to delivering our Services:

• To deliver, manage, and support your web development project
• To process payments and manage your subscription or order history
• To send transactional emails, including order confirmations, project status updates, and password reset requests
• To respond to support inquiries, messages, and consultation requests
• To improve the platform, diagnose technical issues, and understand aggregate usage patterns
• To comply with applicable legal obligations, including Canadian tax law

We do not sell, rent, trade, or otherwise disclose your personal information to third parties for marketing or advertising purposes. Your data is never used to build advertising profiles or shared with data brokers.

We share personal information only with the limited set of service providers necessary to operate the platform. Each provider is bound by their own privacy policies and applicable data protection obligations:

We may also disclose personal information if required to do so by law, court order, or governmental authority, or where we believe in good faith that disclosure is necessary to protect the rights, property, or safety of BuildSFY, our users, or the public.

No advertising networks, marketing platforms, analytics resellers, or data brokers receive your personal information.

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law.

• Active accounts: Your personal information is retained for as long as your account remains active and you continue to use the Services.
• Account deletion: When you request deletion of your account, it enters a 7-day grace period (status: pending_deletion) during which you may cancel the request. After 7 days, your account and all associated personal data — including profile information, project files, messages, and order records — are permanently and irreversibly purged from our systems.
• Payment records: Stripe retains transaction records according to their own retention policy. We retain order metadata (plan name, amount, date) for accounting purposes for 7 years, as required by the Canada Revenue Agency under Canadian tax law.
• Early deletion requests: You may request early deletion of your account and data at any time by contacting [email protected]. Note that legally required retention periods (e.g., tax records) may prevent complete deletion of certain records.

As a resident of Canada, you have the following rights with respect to your personal information under PIPEDA:

• Right of Access: You have the right to request a copy of the personal information we hold about you, including how it is being used and to whom it has been disclosed.
• Right to Correction: If you believe that any personal information we hold about you is inaccurate, incomplete, or outdated, you have the right to request that it be corrected.
• Right to Withdraw Consent: Where our processing of your personal information is based on consent, you may withdraw that consent at any time for non-essential data processing. Withdrawal of consent may limit your ability to use certain features of the Services.
• Right to Deletion: You have the right to request the deletion of your account and associated personal data, subject to any legal retention obligations (e.g., tax records).
• Right to Lodge a Complaint: If you believe your privacy rights have been violated, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca.

To exercise any of the above rights, please contact us at [email protected]. We will acknowledge your request within 10 business days and provide a substantive response within 30 days, as required by PIPEDA.

We use a minimal set of cookies necessary to operate the platform. We do not use advertising cookies, third-party tracking pixels, or behavioral profiling technologies.

• Session cookies (required): These cookies are essential for maintaining your authenticated session. They are created when you log in and expire when you log out or close your browser. Disabling these cookies will prevent you from logging in to your account.
• Preference cookies: Used to remember your settings and preferences across visits (e.g., display preferences). These are optional and can be cleared via your browser settings without affecting core functionality.
• Analytics: We may use server-side analytics to understand aggregate traffic patterns (e.g., which pages are most visited, general geographic distribution of visitors). This data is aggregated and anonymized — no third-party analytics scripts, tracking pixels, or advertising cookies are loaded on our pages.

You can manage or disable cookies through your browser settings. Please note that disabling session cookies will prevent you from accessing your account. For instructions on managing cookies, refer to your browser's help documentation.

We implement reasonable and appropriate technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. Our security practices include:

• Passwords are hashed using bcrypt with an appropriate cost factor before storage — plain-text passwords are never retained
• All data transmitted between your browser and our servers is encrypted using HTTPS/TLS
• Session tokens are cryptographically signed to prevent tampering or forgery
• Payment data is handled exclusively by Stripe's PCI-DSS Level 1 compliant infrastructure — we never touch raw card data
• Access to production systems and databases is restricted to authorized personnel only
• We conduct periodic reviews of our security practices and update them as appropriate

While we take the security of your personal information seriously, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security. In the event of a data breach that poses a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by PIPEDA's breach reporting obligations.

BuildSFY's Services are intended exclusively for adults and businesses. We do not knowingly collect, solicit, or retain personal information from individuals under the age of 18.

If you are a parent or guardian and believe that a minor has submitted personal information through our platform, please contact us immediately at [email protected]. We will take prompt steps to delete any such information from our systems.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the Services we offer. The "Last updated" date at the top of this page will always reflect the date of the most recent revision.

For material changes — those that significantly affect how we collect, use, or share your personal information — we will notify registered users via email at least 14 days before the changes take effect, where practicable.

Your continued use of the Services after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should discontinue use of the Services and may request deletion of your account.

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact us:

We are committed to resolving privacy concerns promptly and transparently. If you are not satisfied with our response, you have the right to escalate your concern to the Office of the Privacy Commissioner of Canada.