Privacy policy.
Information we collect
When you enquire, subscribe or complete onboarding, we receive the information needed to work with you: your name, business email, company, website or domain, services, locations, project goals, messages and any content-folder links you provide. We may also receive authorised photographs, footage and business documents during your project.
Onboarding can include a Stripe checkout reference so we can connect your brief to your order. Please do not put payment-card numbers, passwords, sensitive employee records or unnecessary personal information into a form, email or shared folder. We arrange access to your website through an invitation or another secure method agreed with you.
How we use your information
We use these details to answer enquiries, administer subscriptions and invoices, verify orders, prepare and maintain your website, plan shoots, arrange appointments, provide support and keep appropriate business records. We share information with people and service providers only as needed for those purposes, or where law requires it.
Enquiring, buying a plan or booking a call does not automatically subscribe you to marketing emails. We ask separately before sending optional marketing and you can opt out at any time. We do not sell your personal information.
The services involved
Webflow hosts this website and receives submissions from our enquiry and onboarding forms. Those submissions can also be delivered to our business inbox. Our email provider processes correspondence sent to reuben@d25works.com.
Stripe handles checkout, recurring payments and invoices. Card details are entered directly with Stripe, not into our website forms. We receive information needed to administer the subscription, such as your billing details, payment status, transaction references and limited payment-method information.
Cal.com handles website review bookings when you follow the scheduling link. It processes your booking details and shares the appointment information with us and the calendar or meeting service used for your booking. If you choose to share a cloud folder, its provider, such as Google Drive, also processes the files and access permissions. We may download authorised material to prepare your website or media.
These providers may process information outside Canada, including in the United States, where local laws may permit access by public authorities. We remain responsible for the information we share for our service purposes and use providers’ account permissions and contractual protections appropriate to the service. Providers also explain their own processing in their privacy notices.
Technical information, storage and maps
Webflow and external font or media hosts receive connection information needed to deliver pages and assets, such as your IP address, browser, device information and requested resource. Our checkout flow uses browser session storage to remember your selected plan. A Stripe checkout reference may appear in the onboarding URL and be included with your submission.
The Support page loads a Google Maps embed. Loading or using it sends technical information to Google, which may use cookies or other storage under its own privacy policy. Stripe, Cal.com and other external services may also use their own cookies when you visit them. You can manage cookies and site storage through your browser, although blocking some storage can affect those services.
We will update this notice and request consent where required before adding optional analytics or advertising tracking. This notice does not replace any choices presented by a third-party service when you use it.
Project content and filming
Only share material you are authorised to provide. Before a shoot, we work with your designated contact to identify site restrictions and the permissions needed for the location and identifiable people. Tell us if someone should not be filmed or if a project must remain confidential.
We use project footage and supplied content to deliver your agreed services. We ask before using your name, logo, project imagery or identifiable people in Site Built’s own marketing. Where we handle personal information on your instructions for your website, you remain responsible for your own website notices and the permissions needed to publish that information.
Retention and access
Our retention policy is to remove ordinary enquiries 12 months after the last meaningful contact if they have not become a client relationship. We keep active project files while providing the service and for 90 days after it ends to support handover, then delete our operational copies unless you request an earlier deletion that we can fulfil.
We retain agreements, billing and transaction records for six years after the end of the relevant tax year, or longer where a specific legal obligation or dispute requires it. We keep only the information needed for that purpose. Provider backups and records retained by providers for their own legal obligations may follow separate retention periods.
Access is limited to the people and providers who need the information to deliver or administer your service. When a project ends, we remove access that is no longer needed. Keep your own copies of final website content and delivered media.
Your choices and requests
You can ask what personal information we hold about you, request access or a correction, ask for deletion when it is no longer needed, or withdraw consent to an optional use. Email reuben@d25works.com. We may need proportionate information to verify your identity before sharing or changing records.
We aim to acknowledge a privacy request within five business days and respond within 30 calendar days, or the period required by applicable law. If more time is lawfully needed, we explain why and provide an updated date. Some information must be kept for an active service, legal records or a dispute; if we cannot fulfil a request, we explain the reason and the available options.
You can contact us with a privacy concern and may also contact the relevant privacy regulator. Deleting information needed to provide a service may mean we cannot continue that part of the service; we explain this before acting.
Contact and policy updates
Site Built is responsible for the personal information described here. For privacy questions or requests, email reuben@d25works.com or write to Site Built, 1100 King Street West, Toronto, Canada.
We update this policy when our services, tools or practices change. The date above identifies the current version. We provide notice of material changes and seek additional consent where required before using information for a materially different purpose.