Privacy Policy

Last updated: October 12, 2026

OmniWebb Studio ("OmniWebb", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website at omni-webb.com and use our services, in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

1. Information We Collect

1.1 Information You Provide Directly

• Contact form submissions: name, email address, project type/platform, and message content
• Email correspondence: any information you include when you email us at omniwebb2024@gmail.com
• Service engagements: business contact details, project requirements, billing information

1.2 Information Collected Automatically

• Log data: IP address, browser type and version, operating system, referring URL, pages visited, date and time of visit
• Cookies and similar technologies: see our Cookie Policy for full details

1.3 Information from Third-Party Services

Our website uses the following third-party services that may process your data:

2. How We Use Your Information

We use your personal information for the following purposes:

• To respond to your enquiries and contact form submissions
• To provide, maintain, and improve our services
• To communicate with you about projects, engagements, and service updates
• To comply with legal obligations
• To protect our rights, privacy, safety, or property

3. Legal Basis for Processing

Under PIPEDA, we process your personal information based on:

• Consent: when you submit a contact form or subscribe to communications, you provide express consent
• Contractual necessity: when processing is required to fulfil a service engagement
• Legitimate interest: for website security, fraud prevention, and service improvement

4. Disclosure of Your Information

We do not sell, rent, or trade your personal information. We may share your information with:

• Service providers: third parties who perform services on our behalf (hosting, email delivery, form processing), bound by data protection obligations
• Legal requirements: when required by law, regulation, legal process, or governmental request
• Business transfers: in connection with a merger, acquisition, or sale of assets, with notice to affected individuals

5. Data Retention

• Contact form submissions: retained for 2 years from the date of submission, or for the duration of the business relationship plus 1 year
• Service engagement records: retained for 7 years for tax and legal compliance
• Server logs: retained for 90 days

You may request early deletion at any time (see Section 8).

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• HTTPS/TLS encryption for all data in transit
• Strict Content Security Policy (CSP) headers
• HTTP Strict Transport Security (HSTS) with preload
• Access controls limiting who can view personal data

No method of electronic storage or transmission is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Cookies and Tracking

Our website uses cookies and similar technologies. We obtain your consent before placing non-essential cookies on your device. For detailed information about the cookies we use, their purposes, and how to manage your preferences, please see our Cookie Policy.

8. Your Rights Under PIPEDA

As a Canadian resident, you have the right to:

• Access: request a copy of the personal information we hold about you
• Correction: request correction of inaccurate or incomplete information
• Withdrawal of consent: withdraw your consent to processing at any time (this does not affect the lawfulness of prior processing)
• Complaint: file a complaint with the Office of the Privacy Commissioner of Canada (OPC)

To exercise these rights, contact our Privacy Officer (see Section 12).

9. For Residents of Quebec

If you are a resident of Quebec, you have additional rights under Quebec's Act respecting the protection of personal information in the private sector (Law 25), including:

• The right to data portability in a commonly used technological format
• The right to be informed of automated decision-making
• The right to de-indexation (right to be forgotten)

We do not use automated decision-making that produces legal effects concerning you. Our Privacy Officer serves as the person responsible for the protection of personal information as required by Law 25.

10. For Residents of the European Union / United Kingdom

If you are located in the EU or UK, your personal data is protected under the General Data Protection Regulation (GDPR) or UK GDPR. In addition to the rights listed above, you have the right to:

• Erasure: request deletion of your personal data
• Restriction: request restriction of processing
• Data portability: receive your data in a structured, machine-readable format
• Object: object to processing based on legitimate interest
• Lodge a complaint with your local data protection authority

Transfers of personal data from the EU/UK to Canada are facilitated by the European Commission's adequacy decision for Canada under PIPEDA. Where adequacy does not apply, we rely on Standard Contractual Clauses.

11. For Residents of California

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA/CPRA). We do not sell or share your personal information as defined by the CCPA. You have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Non-discrimination for exercising your privacy rights

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States (where some of our service providers are located). These transfers are subject to appropriate safeguards as required by applicable law.

13. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete it promptly.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. We encourage you to review this policy periodically.

15. Privacy Officer & Contact

OmniWebb has designated a Privacy Officer responsible for our compliance with privacy legislation. For any questions, concerns, or requests regarding your personal information, please contact:

Privacy Officer
OmniWebb Studio Inc.
Ontario, Canada
Email: omniwebb2024@gmail.com

If you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada.