Privacy Policy

Last updated: November 3, 2026

Who we are

OAK Digital Group designs, redesigns and improves business websites. It is run by John-paul Darby, a sole proprietor based in Innisfil, Ontario, Canada. "We" and "us" in this policy mean John-paul Darby operating as OAK Digital Group.

• Privacy Officer: John-paul Darby, OAK Digital Group, Innisfil, Ontario, Canada
• Email: [email protected]

We handle personal information in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

What we collect

Our services are for businesses and organizations. When you request a free 3-point website teardown through our form, we collect the following and store it with Cloudflare Workers KV:

• your name
• your business name
• your website address
• your email address
• any notes you add
• whether you ticked the optional box to receive website tips and offers, and the exact wording you agreed to
• the date and time of your request
• the country your request came from, as reported by our hosting provider. We do not store your IP address.

We do not collect payment details on this website. The site has no advertising trackers. If you agree to analytics, it loads Google Analytics, described below. Otherwise it loads no scripts from other companies.

Cookies

Our own site code sets no cookies. If you accept analytics, Google Analytics sets two first-party cookies: _ga, which distinguishes visitors, and _ga_<container-id>, which keeps the session state. Each lasts up to 2 years. We also save your analytics choice (accepted or rejected) in your browser's local storage, but only after you make a choice. Cloudflare may set strictly necessary security cookies, such as __cf_bm or cf_clearance, to protect the site from bots and abuse. These are not used for tracking or advertising.

You can change your mind at any time with the "Analytics choice" link at the bottom of our home, service, Privacy Policy and Terms pages. If you withdraw consent, Google Analytics is switched off immediately, the _ga cookies are deleted from your browser, your saved choice is removed, and the page reloads without Google Analytics so you can choose again. Clicking Reject also deletes any _ga cookies left from an earlier visit. You can also delete the _ga cookies in your browser settings, or install Google's opt-out add-on (https://tools.google.com/dlpage/gaoptout).

Why we collect it

• To review your website and send you the free teardown you asked for.
• To answer your questions and, if you choose, quote and deliver paid work.
• To send occasional website tips and offers, but only if you ticked the optional box. This is your express consent under Canada's Anti-Spam Legislation (CASL).
• We do not currently send marketing emails. If we start, every one will identify OAK Digital Group, include the contact information the law requires and have an unsubscribe link, and we will act on an unsubscribe request within 10 business days.

Service providers we use

• Cloudflare, Inc. hosts this website (Cloudflare Pages), stores teardown requests (Cloudflare Workers KV) and forwards email sent to [email protected] to our inbox (Cloudflare Email Routing). Like any web host, Cloudflare processes technical data such as IP addresses to deliver and protect the site.
• Google LLC (Google Analytics 4) helps us understand how visitors use the site, for example which pages are viewed, how visitors found us, and whether someone sent a teardown request or clicked our email link. Google Analytics only runs if you click Accept in the analytics banner. Until you make a choice, and if you click Reject, it is not loaded and nothing is sent to Google. When it runs, it records page views, a "generate_lead" event when you successfully send a teardown request (at most once per page view, with only the form name), and a "contact_click" event when you click our email address. Google processes this data for us as our service provider. It may include your approximate location, device, browser, the pages you visit and an identifier stored in a cookie. Google Analytics 4 does not log or store IP addresses; Google uses the IP address only briefly to estimate a general location. We do not send your name, email address or form contents to Google. We have turned off Google's optional data-sharing settings and Google signals, and we do not use the data for advertising. We keep Google Analytics event data for 2 months, the shortest period Google offers. Google may process this data in the United States and other countries.
• Google (Gmail) is where we receive, read and reply to email sent to [email protected].
• Brevo (Sendinblue SAS) relays the emails we send from [email protected] to your inbox.
• Square: card payments are not available yet. When they are, Square will process the invoice and your card details only if you choose to pay by card, and we will not see or store your full card number.
• Interac e-Transfer: if you choose to pay by e-Transfer, the payment details are sent to you privately on your invoice. Your bank and ours handle the transfer. We see your name, the amount and any message you add.

These providers may store and process data outside Canada, including in the United States and Europe, where it can be subject to the laws of those countries.

How long we keep it

• If you do not become a client, we delete your teardown request within 180 days of our last meaningful contact with you. We check stored requests at least once a month and delete those past this limit.
• If you become a client, we keep project and invoice records for as long as the work requires and for six years for tax purposes, as the Canada Revenue Agency generally requires.

Sharing

We do not sell or rent your personal information. We share it only with the service providers listed above, for the purposes described, or when the law requires it.

Safeguards

Access to stored requests is limited to us and protected by account security, including two-step verification.

Your rights

You can ask to see, correct or delete the personal information we hold about you, or withdraw consent to marketing emails at any time, by writing to [email protected]. We reply within 30 days. If you are not satisfied with our answer, you have the right to complain to the Office of the Privacy Commissioner of Canada (https://www.priv.gc.ca, 1-800-282-1376).

Changes

If we change this policy, we will update the date at the top.