01Who we are
Scriptus is a software studio based in Guelph, Ontario. This policy explains how we handle personal information collected through scriptus.ca and in the course of our work. We follow Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).
02What we collect
We don’t ask for — and you shouldn’t send — sensitive information such as health or financial details through the website.
- Contact details you give us — name, email, company or website
- Project details from the brief form — type, budget range, timeline, payment preference and anything you write
- Basic technical data — browser, device, pages visited and approximate location, through privacy-respecting analytics
- Signals Google reCAPTCHA uses to tell people from bots — see “Spam protection” below
03How we use it
We don’t sell personal information.
- To reply to your enquiry and prepare a proposal
- To deliver, host and support services you’ve engaged us for
- To keep the site secure and free of spam
- To understand, in aggregate, how the site is used and improve it
04Spam protection (reCAPTCHA)
Our forms are protected by Google reCAPTCHA, which analyses information about your device and how you interact with the page to tell people from automated bots. That information is sent to Google, and its use is governed by Google’s Privacy Policy and Terms of Service.
05Cookies and browser storage
We use only what’s needed to run the site, remember your light or dark theme preference and — if enabled — measure traffic in aggregate. reCAPTCHA may set its own cookies. You can block cookies in your browser; the site still works, though forms may ask you to confirm you’re human.
06Who we share it with
Only the service providers we need to run the business — such as our cloud hosting, email and form-processing providers, and Google for reCAPTCHA. They may use it only to provide services to us. We may also disclose information where the law requires it.
07Where it’s stored
We store data in Canada where practical. Some providers, including Google, may process information outside Canada, where it may be subject to the laws of that country.
08Client data we host
When we host or manage software for a client, we process their customers’ data on the client’s behalf and under their instructions. The client remains responsible for its own privacy practices; our obligations are set out in our agreement with them.
09How long we keep it
Enquiries are kept for up to two years unless they become a project. Project records are kept as long as the engagement requires, plus any period our legal and accounting obligations require.
10How we protect it
Encryption in transit and at rest, access limited to the people who need it, multi-factor authentication on our accounts, and regular security updates.
11Your rights
Email hello@scriptus.ca and we’ll respond within 30 days.
- Ask what personal information we hold about you
- Ask us to correct it
- Withdraw your consent, subject to legal or contractual limits
- Ask us to delete it where we’re not required to keep it
12Questions or complaints
Contact us first at hello@scriptus.ca. If you’re not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada.
13Changes to this policy
We’ll update this page when our practices change and show the new effective date at the top.
Questions about this policy?
Email hello@scriptus.ca