Privacy policy.

Web Maintained is a founder-run Canadian web studio. We build and maintain websites for small businesses for a flat monthly fee in CAD. We operate primarily by email and do not run a public walk-in storefront.

Contact for privacy requests: info@webmaintained.com.

• Questionnaire and email. Business name, contact name, email address, phone (if you give it), location, industry, website goals, plan interest, and anything else you type into the form or send us.
• Client project materials. Logos, photos, copy, login details you choose to share, domain information, and feedback needed to build and maintain your site.
• Billing details. When you subscribe, our payment processor (for example Square) collects payment card and billing information. We do not store full card numbers on our own servers.
• Usage analytics. If enabled, Google Analytics 4 collects approximate device, browser, pages visited, and performance metrics (including Core Web Vitals) on this marketing site. IP addresses are anonymized when the product allows.
• Technical logs. Our host (Vercel) and related infrastructure may process IP address, user agent, and request metadata to serve pages securely and debug outages.

• To reply to inquiries and decide whether we are a fit
• To design, build, host, secure, and maintain your website
• To bill the monthly care fee and manage your subscription
• To improve this marketing site and measure what pages work
• To meet legal, security, and fraud-prevention obligations

We do not sell your personal information. We do not use your client content to train public AI models.

We use reputable providers to run the business. They only process data as needed for their service:

• Formspree — receives questionnaire submissions
• Vercel — hosts this website and client sites we deploy
• Google Analytics / Tag Manager — optional traffic and performance measurement on webmaintained.com
• Payment processor (e.g. Square) — subscriptions and invoices when you become a paying client
• Email — day-to-day project communication

This site may set cookies or local storage for analytics and basic site function. You can block cookies in your browser; the marketing pages will still load. Client websites we build only include analytics or tracking tools you have asked for (for example Google Analytics on Care Plus and above).

Inquiry emails and questionnaire answers are kept as long as needed to respond and for a reasonable business record (typically up to 24 months if you do not become a client, unless you ask us to delete sooner). Active client files are kept for the life of the engagement and a limited period afterward for backups, tax, and dispute records. Analytics data follows the retention settings in our analytics account.

Subject to applicable Canadian privacy law (including PIPEDA principles where they apply), you may ask to access, correct, or delete personal information we hold about you, or withdraw consent for optional uses such as marketing analytics. Email info@webmaintained.com with the subject line "Privacy request". We may need to verify it is you before we act. We will not delete information we are required to keep for legal or security reasons.

We use HTTPS, access controls on project tools, and hosting providers with modern security practices. No method of transmission or storage is perfectly secure; if we learn of a breach that affects you, we will notify you as required by law and as promptly as practical.

Our services are aimed at businesses, not children. We do not knowingly collect personal information from anyone under 16. If you believe we have, contact us and we will delete it.

We may update this policy when our practices change. The effective date at the top will change, and the current version will always be posted at /privacy. Material changes for active clients will also be noted by email when practical.