Privacy Policy

Who this policy covers

OAX Tech is a technology and digital-growth agency based in Calgary, Alberta, Canada. This policy applies to this website and to the enquiries we receive through it.

We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act (PIPA).

What we collect, and when

We do not ask for personal information to browse this site. We collect it only when you choose to submit one of our forms, and only the fields that form actually contains:

• Contact form — your name, email address, an optional phone number, the subject you select, and your message.
• Quote request — your name, email address, phone number, an optional company name and current website, the service and package you select, your project description, approximate page count, requested features, budget range and optional target completion date.
• Consultation booking — your name, email address, phone number, company name, an optional current website, the service you want to discuss, your budget range, a description of what you are looking to build, and the date, time and time zone you select.
• Newsletter — your email address, and nothing else.

Information collected automatically

Our hosting provider records standard server logs for every request, including IP address, browser user-agent, the page requested and the time. These are generated by the infrastructure rather than by us, and we use them only to keep the site running and secure.

We also record your IP address briefly when you submit a form. This is used to rate-limit submissions so that automated systems cannot flood our enquiry inbox. These records contain an IP address and a timestamp and nothing else, and are cleared automatically within minutes.

We do not currently load any third-party analytics, advertising or session-recording script on this site. If that changes, we will update this policy before it does, not after.

Why we collect it

To reply to your enquiry, prepare a quote or proposal, schedule and hold a consultation, send you the newsletter if you asked for it, and keep records of the work we have been asked to do.

By submitting a form you consent to us using your information for those purposes. We do not use it for anything else, and we do not create profiles, score leads automatically, or make automated decisions about you.

Who else processes it

We use a small number of service providers to operate this site. They process information on our instructions only, and are not permitted to use it for their own purposes:

• Our hosting provider, which serves the website and generates the server logs described above.
• Our database provider, which stores submitted enquiries.
• Our email delivery provider, which sends us a notification when you submit a form. Your message and reply-to address pass through it.
• Our scheduling provider, which holds consultation bookings and sends the calendar invitation. It receives your name, email address and chosen time.

What we never do

We do not sell your personal information. We do not rent, trade or share it with advertisers or data brokers. We do not use it to target advertising to you anywhere, on this site or off it.

We disclose personal information outside the providers listed above only where the law requires it of us.

Where it is stored

Our providers may store and process information outside Canada, including in the United States. Where that is the case, the information is subject to the laws of that country and may be accessible to its courts and law-enforcement authorities. If you would prefer not to have your information processed outside Canada, contact us and we will arrange another way to work together.

How long we keep it

Enquiries, quote requests and booking records are kept for as long as we may reasonably need them for the relationship they relate to, and for a period afterwards for our business records. Newsletter subscriptions are kept until you unsubscribe. Rate-limiting records are cleared within minutes.

If you ask us to delete your information, we will, except where we are required to keep a record for legal or accounting reasons.

Cookies and browser storage

This site sets no advertising or tracking cookies, and there is no cookie consent banner because there is nothing to consent to.

If you sign in to the client portal or the internal admin, we set one session cookie so you stay signed in. It is marked HttpOnly, so it cannot be read by scripts in your browser, and it expires after four hours or when you sign out.

We also store a single flag in your browser's session storage to remember that you have already seen the opening animation, so it does not replay on every page. It contains no personal information, never leaves your browser, and is discarded when you close the tab.

How we protect it

Traffic to this site is encrypted in transit. Account passwords, where accounts exist, are stored only as Argon2id hashes and never in readable form. Sign-in is rate-limited against brute-force attempts. Access to submitted enquiries is limited to the people at OAX Tech who need it to do the work.

No system is perfectly secure, and we will not claim otherwise. If a breach affects your information and creates a real risk of significant harm, we will notify you and the Office of the Privacy Commissioner of Canada as PIPEDA requires.

Your rights

You can ask us for a copy of the personal information we hold about you, ask us to correct it if it is wrong, ask us to delete it, or withdraw your consent to us using it. You can unsubscribe from the newsletter at any time using the link in any issue.

We will respond to a request within 30 days. There is no charge. We may need to confirm your identity first, so that we do not disclose your information to someone else asking on your behalf.

Children

This site is intended for businesses and the people who run them. It is not directed at children, and we do not knowingly collect personal information from anyone under 13. If you believe a child has sent us information, contact us and we will delete it.

Changes to this policy

If we change how we handle personal information, we will update this page and change the effective date at the top. Material changes will be described rather than made quietly.

Complaints

If you are not satisfied with how we have handled your information, please tell us first — we would rather fix it directly. You also have the right to complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca, or to the Office of the Information and Privacy Commissioner of Alberta at oipc.ab.ca.

How to contact us

Write to us at info@oaxtech.dev, or use the contact form.

OAX Tech, Calgary, Alberta, Canada.