Privacy Policy

GrandoWeb (“we”, “our”, or “us”) is a Canadian web design and development agency operating at grandoweb.ca. We are subject to the Personal Information Protection and Electronic Documents Act (PIPEDA), as well as applicable provincial privacy legislation.

For inquiries regarding this policy, contact us at: hello@grandoweb.ca

2.1 Information You Provide

When you contact us through our website, we collect:

• Full name
• Email address
• Phone number (optional)
• Company name (optional)
• Message content and project details

This information is submitted through our contact form, which uses the Web3Forms API to transmit your data securely via HTTPS. Web3Forms’ privacy policy governs how they process form submissions: web3forms.com/privacy.

2.2 Automatically Collected Information

We use Simple Analytics, a privacy-first analytics tool. Simple Analytics does not use cookies, does not fingerprint users, and does not collect personally identifiable information. We receive only aggregate, anonymized data such as page views and referral sources.

Simple Analytics complies with GDPR, CCPA, and PECR. Their privacy commitment: simpleanalytics.com/privacy

We use collected information to:

• Respond to your inquiries and consultation requests
• Provide web design, development, and hosting services
• Send service-related communications (invoices, updates)
• Improve our website and service offerings
• Comply with applicable legal obligations

We do not use your information for automated decision-making, profiling, or behavioral advertising.

We process your personal information on the following bases:

• Consent — when you submit a contact form
• Contractual necessity — when providing services you engage us to deliver
• Legitimate interests — for analytics and business improvement (using anonymized data only)
• Legal obligation — where required by law

This website does not use cookies. We have specifically chosen Simple Analytics because it provides website insights without any client-side storage, cookies, or user tracking.

As a result, no cookie consent banner is required on this site. You will never be tracked across websites, and your browsing behaviour remains private.

We never sell your personal information. We share data only with:

• Web3Forms — to deliver form submissions to our inbox (data transmitted via HTTPS, not stored permanently)
• Simple Analytics — anonymized page view data only, no personal information
• Vercel Inc. — infrastructure hosting provider; your IP address may be processed temporarily for request routing
• Law enforcement or regulatory authorities, if legally required

We retain your contact information for as long as necessary to manage the business relationship, respond to your inquiry, or comply with legal obligations — typically no longer than 3 years from last contact, unless a longer retention period is required by law.

Regardless of your jurisdiction, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your personal information
• Withdraw consent (where consent is the legal basis)
• File a complaint with your applicable privacy regulator (e.g., the Office of the Privacy Commissioner of Canada)

To exercise any of these rights, email: hello@grandoweb.ca

We implement industry-standard security measures including TLS encryption, Content Security Policy headers, and access controls to protect your personal information from unauthorized access, disclosure, or misuse.

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors.

We may update this Privacy Policy periodically. Material changes will be communicated via the “Last updated” date visible at the top of this page. Continued use of our website after changes constitutes acceptance of the revised policy.

For privacy-related questions or to exercise your rights: