Legal / Privacy policy

Privacy policy.

How Northcraft collects, uses and protects personal information, written to follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). Last updated October 2026.

We collect very little

Only what you send us, and what a project needs.

No tracking without your OK

No analytics, no newsletter, and ad cookies only if you accept.

Never sold

Your information is never sold, rented or traded.

Ask anytime

See, correct or delete what we hold by emailing us.

Who we are

Northcraft Web Design Studio (“Northcraft”, “we”, “us”) is a web design studio based in Ottawa, Ontario, Canada. Abdullah, the founder, is responsible for how Northcraft handles personal information and acts as our privacy officer. You can reach him at hello@northcraftwebs.com.

What we collect

When you contact us or request a free concept

Your name, business name, email address, current website (if you share it), the service you're interested in, and anything you write about your business. Because our form opens your own email app, this information reaches us as an email you send.

When we work together

  • Contact and billing details needed to quote, invoice and communicate.
  • Content you provide for your website, such as text, photos and logos.
  • Access to accounts we need for the work, such as your domain or hosting. These accounts are registered in your name.

For the Website Assistant

To set up an assistant for your business, we use the information you give us about it, such as your services, prices, hours and common questions. Once it's live on your site, the assistant handles conversations and form submissions from your customers on your behalf. We use that information only to run the assistant for you, send you leads and improve its answers, and we delete conversations on request.

We don't ask for, and don't want, information we don't need. Please don't send government ID numbers, full card numbers or banking details.

How we use it

  • To reply to you and prepare your free concept.
  • To quote, deliver and support the work you've asked for.
  • To invoice and keep the business records the law requires.

We don't use your information for marketing lists, newsletters or automated sales sequences, and we never sell, rent or trade it.

Consent

By contacting us, you consent to us using the information you send for the purposes above. If we ever want to use your information for a new purpose, we'll ask first. You can withdraw your consent at any time by emailing us, though we may need to keep some records for legal reasons, as explained below.

We'll always ask your permission before showing your website, business name or results in our own marketing, such as a portfolio or case study.

Who we share it with

We only share personal information when it's needed to do the work, and only what's needed:

  • Service providers we rely on to run the studio, such as our email, hosting and file-storage providers.
  • Trusted contractors who may help with part of a project. They receive only what that work requires and are bound to keep it confidential.
  • Where the law requires it, for example in response to a valid legal request.

Where it's stored

Some of our service providers and contractors may store or process information outside Canada, including in the United States. When that happens, the information is subject to the laws of that country and may be accessible to its authorities. We choose providers that protect information appropriately.

How long we keep it

  • Enquiries that don't become projects: deleted within 12 months of our last contact.
  • Project files and messages: kept while we work together and for a reasonable time after, so we can answer questions. You can ask us to delete them sooner.
  • Invoices and financial records: kept for six years, as Canadian tax rules require.
  • Website Assistant conversations: kept while your plan is active so we can review and improve its answers, then deleted when the plan ends, or sooner if you ask.
  • Account access: after handover we stop using any logins you shared, and we recommend you change those passwords.

How we protect it

We use reasonable safeguards for the sensitivity of the information, including secured accounts with strong passwords and two-step sign-in where available, and limiting access to people who need it. No system is perfectly secure, but if a breach ever created a real risk of significant harm to you, we would notify you and report it to the Office of the Privacy Commissioner of Canada, as PIPEDA requires.

Cookies and tracking on this website

By default, this website doesn't use analytics, advertising cookies or tracking pixels. Its fonts are loaded from Google Fonts, which means your browser connects to Google's servers and shares technical information such as your IP address; Google's own privacy policy covers that.

Advertising measurement, only with your consent. We may use Google Ads to see which of our ads bring people to this site. If so, a banner will ask you first, and Google's tag only loads if you choose “Accept”. If you accept, Google may set cookies and receive information about your visit, such as the pages you view and the ad you clicked, under Google's own privacy policy. If you choose “No thanks”, nothing is loaded and the site works exactly the same.

Your choice is remembered in your own browser. You can change it at any time with the “Cookie settings” link in the footer, or by clearing your browser's site data.

Your rights

You can ask us at any time to:

  • Tell you what personal information we hold about you and how it's used.
  • Correct anything that's inaccurate.
  • Delete your information, where we're not required to keep it.
  • Withdraw your consent.

Email hello@northcraftwebs.com. We'll respond within 30 days, and there's no charge.

Websites we build for clients

When we build a website for your business, you're responsible for how that site collects and uses its visitors' information, including its own privacy policy. We're happy to help you set one up.

Concerns and complaints

If you have a concern about how we've handled your information, please tell us first and we'll do our best to put it right. If you're not satisfied, you can contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Changes to this policy

If we change how we handle personal information, we'll update this page and the date at the top. Significant changes will be made clear before they take effect.