Privacy & Cookies Policy

Last updated: 19 July 2026

This policy explains how Undreamt Designs ("we", "us", "our") collects, uses, and protects your personal information when you visit undreamtdesigns.com (the "Site"), and how the Site uses cookies. We keep this simple because our data practices are simple: we don't run advertising, we don't use analytics trackers, and we don't sell or share your information with anyone for marketing purposes.

1. Who we are

Undreamt Designs is a web design studio based in British Columbia, Canada. We are responsible for the personal information described in this policy, and our privacy practices are governed by British Columbia's Personal Information Protection Act (PIPA) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). If you have any questions about this policy or your personal information, you can reach us through our contact form.

2. What information we collect

Information you give us

The only personal information we actively collect is what you choose to send us through our contact form:

• Your name
• Your email address
• The contents of your message

We use this information solely to respond to your enquiry and, if you become a client, to communicate with you about your project.

Information collected automatically

Like almost every website, our hosting provider automatically records limited technical information when you visit the Site, such as your IP address, browser type, device type, the pages you view, and the date and time of your visit. This information is collected in standard server logs for security, fraud prevention, and to keep the Site running reliably. We do not use it to identify or profile individual visitors.

What we don't do

• We do not use analytics or advertising trackers.
• We do not sell, rent, or trade your personal information.
• We do not send marketing emails unless you have specifically asked us to.
• We do not build profiles of visitors or make automated decisions about you.

3. Consent and why we use your information

Under Canadian privacy law, we collect, use, and disclose personal information only with your consent, or as otherwise permitted or required by law. In practice:

• When you submit our contact form, you are consenting to us using your name, email address, and message to respond to your enquiry and discuss your project. That is the only purpose we use it for.
• Technical log data is collected for purposes a reasonable person would consider appropriate: keeping the Site secure, preventing abuse, and keeping it running reliably.
• You can withdraw your consent at any time (subject to legal or contractual restrictions) by contacting us — we will explain any consequences and stop using your information accordingly.
• Record-keeping required by law — once you become a client, we retain certain records where required (for example, for tax and accounting purposes).

In line with Canada's Anti-Spam Legislation (CASL), we will not send you commercial electronic messages unless you have consented to receive them, and any such message will include a way to unsubscribe.

For visitors in the European Economic Area or the United Kingdom, where the GDPR or UK GDPR applies, we process your information on the basis of taking steps at your request before entering into a contract, our legitimate interests in responding to enquiries and securing the Site, and compliance with legal obligations.

4. Who we share your information with

We share your information only with the service providers who make the Site work, and only to the extent needed:

Both providers are based in the United States, which means your information may be stored and processed on servers outside Canada. While it is outside Canada, it is subject to the laws of the jurisdiction where it is held and may be accessible to authorities there under those laws. We choose reputable providers with strong security and privacy practices — you can read more in Netlify's privacy policy and Google's privacy policy. For visitors in the EEA or UK, these transfers are protected by recognised safeguards such as standard contractual clauses or the EU–US Data Privacy Framework.

We may also disclose information if we are legally required to do so, or to protect our rights, safety, or property.

5. How long we keep your information

We keep contact form submissions and related correspondence for as long as needed to deal with your enquiry, and for up to 12 months afterwards in case you follow up. If you become a client, we keep project correspondence and records for as long as we work together and afterwards as required by law (for example, for accounting purposes). Server logs are retained by our hosting provider for a limited period in line with their standard practices.

6. How we protect your information

The Site is served entirely over HTTPS, so information you submit is encrypted in transit. Access to form submissions is limited to the people who need it to respond to you. No method of transmission or storage is completely secure, but we take reasonable and proportionate steps to protect your information.

7. Your rights

Under BC's PIPA and PIPEDA, you have the right to:

• Access — ask for a copy of the personal information we hold about you and an explanation of how it has been used and who it has been disclosed to.
• Correction — ask us to correct inaccurate or incomplete information.
• Withdraw consent — withdraw your consent to our use of your information at any time, subject to legal or contractual restrictions.
• Deletion — ask us to delete information we no longer need for the purposes it was collected.

Visitors in the EEA or UK may have additional rights under the GDPR or UK GDPR, including erasure, restriction, objection, and data portability.

To exercise any of these rights, contact us through our contact form. We will respond within 30 days, free of charge. If you are unhappy with how we handle your information, you can complain to the Office of the Information and Privacy Commissioner for British Columbia (oipc.bc.ca) or the Office of the Privacy Commissioner of Canada (priv.gc.ca). EEA and UK visitors may also complain to their local data protection authority.

8. Children

The Site is a business website and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Cookies

Cookies are small text files that websites place on your device to remember information about you or your visit.

The third-party services we use are also cookie-free from your point of view: Google Fonts does not set cookies when serving fonts, and our hosting provider does not set cookies for ordinary visitors to the Site.

If we ever introduce features that require cookies (for example, analytics or embedded content), we will update this policy first and, where the law requires it, ask for your consent before any non-essential cookies are set.

10. Links to other websites

The Site may contain links to other websites, including sites we have designed for clients. This policy applies only to undreamtdesigns.com — other websites have their own privacy and cookie policies, and we are not responsible for their practices.

11. Changes to this policy

We may update this policy from time to time to reflect changes to the Site or to the law. When we do, we will update the "Last updated" date at the top of this page. Significant changes will be highlighted on the Site.

12. Contact

Questions, requests, or concerns about this policy or your personal information? Reach us any time through our contact form — we usually respond within 24 hours.