Legal — 01

Privacy Policy

What we collect, why we collect it, who can see it, and how to make us delete it. This covers silvanestudios.comand the client workspace. It does not cover the websites we build for clients — those are governed by the client’s own privacy policy.

Last updated: 8 September 2026

Studio
Silvanè Studios
Based in
Ontario, Canada
Contact
hello@silvanestudios.com

Silvanè Studios is an independent digital studio in Ontario, Canada. We are a small team and we hold as little information as the work allows. We have never sold personal information, and we do not run advertising trackers on this site.

1. What we collect

Four things, and nothing else.

  • What you send us. The project enquiry form asks for your name and email, and optionally your company, current website, budget range, timeline, and a description of the project. The fit quiz records the answers you select. If you email us instead, we keep the correspondence.
  • Your account, if you have one. Clients with access to the workspace have a name, an email address, and a password stored only as a bcrypt hash — we cannot read it, and a password reset replaces it rather than recovering it. We also store which organisation you belong to and what you are allowed to see.
  • Your project. For active clients: files you upload, approvals you give, messages in the workspace, invoices, and the state of each stage of the work.
  • Technical records. Our host keeps standard server logs — IP address, page requested, time, browser and device type — which we use to keep the site up and to stop abuse. We do not build a profile from them.

There is no analytics script, tag manager, session recorder, or advertising pixel anywhere in this website’s code. The Cookie Policy names every cookie the site sets, and there are four, all necessary to run it.

2. Payment information

Payments run through Stripe on Stripe’s own hosted checkout page. Card numbers are entered there and never reach our servers, so we cannot see or store them. What comes back to us is the outcome: which Edition was bought, the amount, the billing name and email, and Stripe’s reference for the transaction. Stripe handles the card data under its own terms as a payment processor.

3. Why we hold it

  • To answer an enquiry and scope a project you asked us about.
  • To carry out a project we have been engaged for.
  • To operate the workspace: sign you in, show you your own work, and nobody else’s.
  • To take payment and keep the accounting records the law requires.
  • To keep the site available and defend it against abuse.

Under Canadian privacy law we rely on your consent, given when you submit a form or open an account, and on the legitimate need to perform a contract you have entered into with us. We do not use enquiry details for unrelated marketing, and we do not add you to a mailing list because you asked us a question.

4. Who else can see it

A short list of service providers, each named individually with what it does and where it is, on the Sub-processors page. They process information on our instructions only, and may not use it for their own purposes. We do not share your information with anyone else for their marketing, and we do not sell it.

We will disclose information where the law requires it — a court order, a lawful request from a regulator — and where it is necessary to protect someone’s safety or our own legal rights. If we ever sell or transfer the studio, client and enquiry records may transfer with it, subject to the same commitments.

5. Where it is stored

Our hosting, database, email, and payment providers store and process data in the United States. That means your information is subject to the laws of that country, including lawful access by its authorities, while it is there. We are telling you plainly because Canadian privacy law expects us to, and because you should be able to make an informed decision before you type anything into a form.

6. How long we keep it

  • Enquiries that do not become projects: up to two years, then deleted. They are kept that long because prospects commonly come back a year later.
  • Client project records: for the life of the engagement and seven years afterwards, which is the period Canadian tax and business records law expects for the financial side of it.
  • Workspace accounts: until you ask us to close the account, or two years after the last project ends.
  • Server logs: a short operational window set by our host, measured in weeks rather than years.

You can ask for earlier deletion at any time, and we will do it except where a record has to be kept for tax or legal reasons — in which case we will say which record and why.

7. Your rights

You can, at any time, ask us to:

  • Tell you what we hold about you, and give you a copy.
  • Correct anything that is wrong.
  • Delete it, subject to the retention rules above.
  • Withdraw your consent, which we will act on for anything not required to finish work you have engaged us for.

Write to hello@silvanestudios.com and we will respond within 30 days, which is the deadline Canadian privacy law sets. We may ask you to confirm your identity first, so that we do not hand your information to somebody else.

If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada. Residents of Quebec have additional rights under Quebec’s privacy law, and visitors in the United Kingdom or the European Economic Area have rights under the GDPR, including data portability and the right to object. Ask us and we will honour them rather than argue about which statute applies.

8. Security

Passwords are hashed, access to a client’s workspace is enforced in the database query itself rather than in the interface, and the studio keeps the number of people with access small. What we do and what we deliberately do not claim is set out on the Security page, along with how to report a vulnerability. No system is perfectly secure, and we would rather describe ours honestly than promise something we cannot guarantee.

9. AI

The studio concierge answers questions for signed-in clients about their own project, and it sends what it needs to a model run by Google. What it is allowed to see, what it can never do, and what is never sent, is set out in the AI Disclosure.

10. Children

This is a business website. It is not directed at children and we do not knowingly collect information from anyone under 16. If you believe a child has sent us something, tell us and we will delete it.

11. Changes

When our practices change, this page changes with them and the date at the top moves. For a change that materially affects information we already hold, we will email the clients affected rather than rely on you noticing a new date.

12. Contact

Privacy questions, requests, and complaints go to hello@silvanestudios.com. A named individual at the studio is accountable for this policy and will be the one who answers.