Privacy, plainly.

01What we collect

When you submit an enquiry

Our call-review form collects the business name, phone number and email address you enter. We also record the page you landed on, the referring site, any campaign tags in the link you followed, and whether you allowed analytics. A hidden anti-spam field is checked and discarded.

Site analytics, only with permission

If you choose "Allow analytics", Google Analytics 4 measures anonymous activity such as page views, scroll depth and outbound clicks, with IP anonymisation on. If you decline or ignore the banner, analytics is never loaded. We do not send your name, email, phone number, business name or form contents to Google Analytics.

Payments

If you pay us for work, card details are entered directly with our payment processor and never reach our servers. We see only the confirmation, amount and billing contact needed to issue and reconcile an invoice.

Server logs

Our host keeps standard web-server logs, including IP addresses, for security and troubleshooting.

02Why we use it

• To answer your enquiry and carry out the review you asked for.
• To prepare quotes, deliver work and provide support.
• To take payment and keep accounting records.
• To understand which pages and campaigns bring enquiries, where you allowed analytics.
• To keep the site secure and prevent abuse.

We do not sell personal information, and we do not use enquiry details for unrelated marketing.

03Who it is shared with, and how

We share information only with service providers that help us run the studio. Each processes it on our instructions.

We may also disclose information where the law requires it, or to establish or defend a legal claim. Some providers operate outside your country, so information may be processed abroad.

04How we protect it

• The site is served over HTTPS with a valid certificate, and plain HTTP is redirected.
• Enquiries are validated on our server, screened against automated submissions, and cleaned so form input cannot tamper with the email we send.
• Credentials for internal systems live in a server-side file that is never sent to the browser and sits outside the public web root.
• The request forwarding an enquiry into our follow-up process is cryptographically signed so it cannot be forged.
• Access to the inbox and internal tools is limited to the people who need it.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

05How long we keep it

Enquiries are kept while we are in contact and for a reasonable period afterwards, then deleted on request. Invoices and payment records are kept as long as tax and accounting rules require. Analytics data follows the standard Google Analytics retention window.

06Your choices

• Change your analytics preference at any time by clearing this site's stored settings in your browser, which brings the banner back.
• Ask for a copy of what we hold about you, or ask us to correct or delete it, by emailing team@operiostudio.com.
• Ask us to stop contacting you, and we will.

Operio Studio operates from Ontario, Canada, and handles personal information in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). If you are not satisfied with how we have handled a request, you may raise it with the Office of the Privacy Commissioner of Canada.

07Changes

If this policy changes we update the date at the top of this page.