How we handle your data

What we collect

Only what you provide via the Contact form:

• Name (required)
• Work email (required)
• Company name (optional)
• Service you're asking about
• Message body

We do notset cookies, run analytics, track IP addresses beyond Cloudflare's security logs, or profile visitors.

Why

GDPR: Art. 6(1)(b) — pre-contractual measures at your request.
PIPEDA: implied consent for a business inquiry you initiated.

We use the data solely to reply. No marketing, no profiling, no resale.

How long

Up to 90 days after last correspondence, then deleted. If a business relationship forms, correspondence may be retained under standard business-record retention (typically 7 years in Canada for tax/contract reasons).

Who processes your data

• Cloudflare hosts the site (Cloudflare Workers) and provides the Turnstile bot-mitigation on the form. See Cloudflare's privacy policy.
• Form provider(Formspree or equivalent) receives Contact-form submissions on our behalf. Check the provider's own privacy policy for their data handling.

We do not sell or share your data with any other third party.

Your rights

Under GDPR: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), objection (Art. 21), and the right to lodge a complaint with your local supervisory authority.

Under PIPEDA: access, correction, consent withdrawal, and complaint to the Office of the Privacy Commissioner of Canada.

To exercise any of these rights, email info@axicode.ca with subject [PRIVACY]. We acknowledge within 72 hours and respond within 30 days.

Security

HTTPS-only with HSTS preload, strict Content Security Policy, Cloudflare Turnstile bot mitigation, honeypot form filter. Report security concerns via SECURITY.md.

Contact

Privacy or data-subject-rights questions: info@axicode.ca (subject [PRIVACY]).