Legal
Privacy Policy
Last updated: June 2026
SDS Direct is a sole-proprietor web-design business based in Alberta, Canada. This policy explains what personal information we collect through sdsdirect.ca, why we collect it, and the choices you have. We keep this simple on purpose: we collect very little, and we never sell it.
Who we are
SDS Direct ("we", "us", "our") is operated as a sole proprietorship in the Province of Alberta, Canada. We are the party responsible for the personal information collected through our website. If you have any questions about this policy or your information, you can reach us through the contact form on our website.
What we collect
We only collect the information you choose to give us when you fill out the contact form on our site. That includes:
- Your name
- Your business name (if you provide one)
- Your email address
- Your phone number (if you provide one)
- Your message — whatever details you send about your project or enquiry
We do not run marketing trackers, advertising pixels, or website analytics. We do not build profiles on you or track your activity across other sites.
Why we collect it
We use the information from the contact form for a single purpose: to read and respond to your enquiry. That means replying to you, discussing your project, and providing a quote if you ask for one. We do not use your details for newsletters, marketing campaigns, or any unrelated purpose.
Our legal basis (PIPEDA)
We handle personal information in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). When you submit the contact form, you are giving us your consent to use the information you provide to respond to your enquiry. We only collect what is reasonably needed for that purpose, and we use it only for the reason you gave it to us.
Sharing and service providers
We do not sell, rent, or trade your personal information. We do not share it for anyone else's marketing.
To actually run the website and reply to you, we rely on a small number of trusted third-party providers (sometimes called "processors"). Your information may pass through their systems only so the service can function:
| Provider | What it does |
|---|---|
| Resend | Delivers the contact-form email to our inbox. |
| Cloudflare Turnstile | Protects the form from spam and bots. |
| Stripe | Processes payments if you choose to pay for a service. |
| Vercel | Hosts the website that serves the pages and form. |
These providers act on our behalf and have their own privacy and security commitments. We may also disclose information if we are legally required to do so by a valid request from law enforcement or the courts.
Cookies and anti-spam
We do not use cookies for advertising or analytics. To protect the contact form from spam, we use Cloudflare Turnstile, which may set a cookie or store a small token in your browser to confirm you are a real visitor rather than a bot. This is used only for spam protection, not to track you.
How long we keep it
We keep contact-form messages only as long as we need them to respond to your enquiry and, where relevant, to manage the project or business relationship that follows. When the information is no longer needed for those purposes, we delete it. If you ask us to remove your information sooner, we will do so (see below).
Your rights
Under PIPEDA, you have the right to:
- Access the personal information we hold about you
- Correct any information that is inaccurate or out of date
- Delete your information from our records
To make any of these requests, just send us a message through the contact form on our website and tell us what you would like us to do. We will respond within a reasonable time.
Changes to this policy
We may update this policy from time to time — for example, if we add a new service or change a provider. When we do, we will update the "Last updated" date at the top of this page. We encourage you to check back occasionally.