Privacy

Privacy Policy

Last updated: May 2026

This Privacy Policy explains how TOUGH Web Co.(“we”, “us”, “our”) collects, uses, and protects your information when you visit toughwebco.caor interact with us. We follow the principles of Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta’s Personal Information Protection Act (PIPA).

[TODO] Before going public, have this policy reviewed by a lawyer or a service like LawDepot/Termly. Replace any placeholder with real business details.

What we collect

We only collect what you give us:

Contact form submissions: name, phone, email, business name (optional), trade (optional), and your message.
Server logs: standard request metadata (IP address, user agent, requested URLs) for security and to keep the site running. These are retained for up to 30 days.
Analytics: we use Vercel Analytics, which is privacy-friendly and does not use cookies or fingerprint visitors. See their privacy policy for details.

How we use it

To respond to your inquiry and provide the services you ask for.
To send transactional emails (quote confirmations, project updates).
To improve the site and our services (aggregate analytics only).

We do not sell your information. We do not share it with third parties except as needed to provide our services (e.g. our email provider) or as required by law.

How we protect it

Form submissions and any account data are stored in MongoDB Atlas with encryption at rest and in transit. Admin access is password-protected and limited to TOUGH Web Co. staff.

Cookies

We use a single session cookie for admin authentication. We do not use tracking, advertising, or third-party marketing cookies.

Your rights under PIPEDA and PIPA

You have the right to access the personal information we hold about you, to correct it if inaccurate, and to ask us to delete it. To make a request or ask a question, email curtis@toughwebco.ca or call 780-965-9843.

Children’s privacy

Our services are intended for businesses. We do not knowingly collect information from anyone under the age of 18.

Changes to this policy

We’ll update this page if our practices change. The “Last updated” date at the top will reflect the most recent change.

Contact

Questions, requests, or complaints about how we handle your information: curtis@toughwebco.ca or 780-965-9843.

What we collect

We only collect what you give us:

Contact form submissions: name, phone, email, business name (optional), trade (optional), and your message.

Server logs: standard request metadata (IP address, user agent, requested URLs) for security and to keep the site running. These are retained for up to 30 days.

Analytics: we use Vercel Analytics, which is privacy-friendly and does not use cookies or fingerprint visitors. See their privacy policy for details.

How we use it

To respond to your inquiry and provide the services you ask for.

To send transactional emails (quote confirmations, project updates).

To improve the site and our services (aggregate analytics only).

We do not sell your information. We do not share it with third parties except as needed to provide our services (e.g. our email provider) or as required by law.