Privacy Policy

Lab 47 (“Lab 47”, “we”, “I”) is a web design and development business operating in Ontario, Canada. This policy covers personal information collected through lab47.ca and through email conversations that start there. It is written to meet the Personal Information Protection and Electronic Documents Act (PIPEDA).

If you become a client, the work itself is governed by your project agreement and the Terms of Service. Any information you give us for a project (logins, content, customer data on your own site) is handled under that agreement, not this policy.

Contact form

When you send a message through the contact page we receive what you type: your name, your email address, your business name if you include it, and your message.

Email

If you email hello@lab47.ca directly, we keep the email thread the way any business keeps its correspondence.

Analytics

We use Google Analytics 4 to understand how the site is used: which pages are visited, roughly where visitors are located (city level), what device and browser they use, and how they arrived. Google Analytics sets cookies to tell repeat visits apart. IP addresses are truncated by Google before they are stored and are not available to us.

What we do not collect

• No accounts, passwords or profiles - there is nothing to sign up for.
• No payment details through the site. Invoices are handled separately once a project is agreed.
• No advertising or cross-site tracking pixels.

• To reply to you. That is the whole purpose of the contact form.
• To scope and deliver a project if the conversation turns into one.
• To understand the site - in aggregate, through analytics - so it can be improved.

We do not sell personal information, rent it, or add you to a mailing list because you sent a message. You will only hear from us about the thing you wrote in about.

Three service providers touch the data, each for one job:

• Resend delivers contact-form submissions to our inbox as email. Your name, email and message pass through their servers in transit.
• Vercel hosts the site and processes every request to it, including standard server logs (IP address, time, page requested).
• Google provides Google Analytics, as described above.

These providers may store data outside Canada, including in the United States, and are subject to the laws of those places. Each is bound by its own privacy terms and only receives what it needs to do its job. We do not share personal information with anyone else unless required by law.

The only cookies on this site are set by Google Analytics (names beginning with _ga). They store a random identifier, not your name or email. You can block them in your browser settings or with the Google Analytics opt-out add-on, and the site works exactly the same without them.

• Contact-form messages and emails: kept while the conversation is live and for up to two years afterwards, so that if you come back we have the context. Deleted on request at any time.
• Client project records: kept for seven years after the project closes, which is the period Canadian tax rules require for business records.
• Analytics data: retained by Google for 14 months, the shortest setting Google Analytics offers.

Under PIPEDA you can ask us, at any time:

• what personal information we hold about you, and to see it;
• to correct anything that is wrong;
• to delete it, where we are not required to keep it;
• to withdraw consent for any use you previously agreed to.

Email hello@lab47.ca with the subject “Privacy request” and we will respond within 30 days. If you are not satisfied with the response you can complain to the Office of the Privacy Commissioner of Canada.

The site is served over HTTPS only. Contact-form submissions are transmitted encrypted to Resend and to our inbox. We keep access to the inbox and to our hosting and analytics accounts limited to the people who need it, protected by strong passwords and two-factor authentication. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security, but we take reasonable steps in proportion to the sensitivity of what we hold - which, for this site, is low.

This site is aimed at business owners and is not directed at anyone under 18. We do not knowingly collect personal information from minors. If you believe a minor has sent us information, email us and we will delete it.

If the site starts collecting something new, this page will change to say so and the date at the top will update. Changes apply from the date they are posted. Continuing to use the site after a change means you accept the updated policy.