Privacy policy

1. Who we are

This website, doodlesaveinc.com, is run by DOODLESAVE INC., a corporation incorporated under the laws of Ontario (Ontario Corporation No. 1001543461) and based in Thunder Bay, Ontario, Canada ("we", "us").

Our Privacy Officer is Alaric Thomson, President. You can reach them at contact@doodlesaveinc.com or +1 (647) 548-7522. This policy covers this website, our client portal and the work we do for clients. Our Doodle Save app and Doodle Inventory web app have their own privacy policies.

2. What we collect

When you send an enquiry

Your name, company, email address, phone number (optional), the kind of project, your timeline, your message and the page you sent it from.

When you book a call

Calls are booked through a Google Calendar booking page. Google collects your name, email address and anything you type there, and shares the booking with us.

When you browse the site

• Our own visit counter. A random visit ID kept in your browser tab's session storage (deleted when you close the tab), the page and its title, the website that sent you, your device type, your time zone, time spent on the page and how far you scrolled. It sets no cookies, and we don't store your IP address with these records.
• Google Analytics, only if you choose "Accept" in the cookie bar. See Cookies and analytics.

When you are a client

• Client portal account details: your name, email address, company and the profile details you add, such as a tax number.
• The files, content, logins and account access you share with us for your project, and the agreements, invoices and messages in the portal.
• Billing and payment records. Payments are made by bank transfer or Interac e-Transfer; we never collect card details on this website.

When you email or call us

Your contact details and whatever you choose to tell us.

We don't buy personal information, and we don't collect sensitive information such as health or financial account details through this site.

3. Why we use it

• To reply to your enquiry, prepare a quote and book calls.
• To deliver, support and invoice the work we agree to do for you.
• To keep the site and portal secure and working, and to understand which pages are useful.
• To meet our legal, tax and accounting obligations.

We don't sell your information, we don't use it for advertising, and we don't add you to a mailing list. If we ever want to send you marketing email, we will ask first and every message will let you unsubscribe.

By sending an enquiry you consent to us using your details to reply. Analytics cookies are off until you accept them. You can withdraw consent at any time; it may limit what we can do for you, and we will tell you if so.

4. Cookies and analytics

Google Analytics helps us see how visitors find and use the site. It only sets cookies after you choose "Accept" in the cookie bar. If you choose "Decline", or make no choice, Google's consent mode keeps its cookies off; Google may still receive limited signals that a page was viewed, without cookies or advertising identifiers. Change your choice at any time with Cookie settings at the bottom of every page.

Local and session storage stay in your browser. The fonts on this site are served from our own server, so loading a page doesn't contact a font provider.

5. Who handles it, and where

We use service providers to run the site and our business. They process information for us under their own terms and security commitments, and only to provide their service.

Information held outside Canada is subject to the laws of that country, and its courts, police or security agencies may be able to access it. When we work on a client's own accounts, such as their hosting, database or inbox, we handle that information only to do the work, as set out in our agreement with the client.

6. How long we keep it

• Enquiries that don't become a project: up to 24 months, then deleted.
• Client, project and billing records: 7 years after the project ends, to meet tax and accounting rules.
• Client portal files: until 12 months after handover, unless your care plan or agreement says otherwise. You can ask us to delete them sooner once the project is paid.
• Visit counter records: up to 24 months. Google Analytics data: up to 14 months.

7. How we protect it

The site and portal are served only over HTTPS. Portal data is protected by access rules so each client sees only their own records, and access to our accounts is limited to the people who need it. No system is completely secure. If a breach creates a real risk of significant harm to you, we will tell you and the Office of the Privacy Commissioner of Canada, and we keep a record of every breach.

8. Your choices and rights

• Ask what personal information we hold about you and get a copy.
• Ask us to correct it, or to delete it where we don't need to keep it for legal reasons.
• Withdraw your consent, including to analytics cookies, at any time.

Email contact@doodlesaveinc.com. We reply within 30 days and may ask you to confirm your identity first. These rights apply under Canada's PIPEDA, Quebec's private-sector privacy law, and India's Digital Personal Data Protection Act, wherever they apply to you.

9. Questions and complaints

Please contact our Privacy Officer first, and we will try to resolve it. If you aren't satisfied, you can complain to the Office of the Privacy Commissioner of Canada (1-800-282-1376). In Quebec, you can also contact the Commission d'accès à l'information du Québec.

10. Changes to this policy

We update this policy when what we collect or the providers we use change. The date at the top shows the latest version. If a change affects how we use information you've already given us, we will tell you before it takes effect.