Privacy Policy

Information we collect

When you request a free assessment or contact us, we collect your name, contact email, business or organization name, and selected priority. You can also provide a link to your digital presence and additional context.

For nonprofit applications, we also collect your organization’s mission and the community it serves. We use these details to review your request, agree a starting scope, and arrange the setup and guidance. Please describe the mission without including sensitive information about individual beneficiaries.

Hosting and email providers may process technical information such as IP addresses, browser details, request times, delivery records, and error logs to operate and protect their services. Please do not send passwords, payment details, or sensitive customer information through the contact form.

How we use it

We use your details to respond, review your digital presence, and email your assessment recommendations. If you choose an upgrade, we use the information needed to scope and deliver your customer-facing improvements, training, and any agreed support.

We do not sell contact information or add you to a marketing list without your permission. Sharing your details requests their use for the enquiry or assessment you have asked for.

Service providers and international processing

Resend delivers contact-form submissions to our business email inbox. Vercel provides production hosting. Our email provider also processes the messages we receive and send. The contact form does not store submissions in a separate customer database.

These providers may process information outside Canada, where local laws may apply. Their operational logs, backups, and retention arrangements are separate from the enquiry emails in our inbox.

AI-assisted work

The contact form does not automatically send your submission to an AI model. We use AI-assisted development in our work. Before sharing non-public client materials with third-party AI services, we agree the permitted information, providers, access, and retention arrangements.

Customer-facing AI features, forms, booking integrations, and analytics are configured only within the agreed project scope. Any processing of your customers’ information is addressed in that scope and the relevant provider arrangements.

Access during an upgrade or support

We agree the access needed for your project and use business materials to deliver that work. Access is removed at the end of the agreed handover unless you authorize continuing access for optional support.

The engagement sets out how client materials are returned or deleted, including any agreed support, provider backups, and legal recordkeeping requirements. We use reasonable safeguards and limit access to what the work requires.

Retention

Our enquiry-email retention period is up to 24 months, unless a longer period is needed for an ongoing engagement or legal recordkeeping. Client and invoice records are retained for the applicable business and legal requirements.

Provider logs and backups may have different retention periods. We remove information when it is no longer needed for its agreed purpose or required retention.

Cookies and analytics

We do not add advertising, analytics, or session-recording scripts to this site, or use cookies for marketing or visitor profiling. Hosting providers may still process operational request data.

Analytics implemented for a client’s digital presence are a separate part of the agreed project, with the client’s own notices and provider settings.

Your choices, requests, and concerns

You can request access to your personal information, ask for a correction, withdraw consent where applicable, or request deletion of information we no longer need. Withdrawing consent may affect our ability to complete an assessment or provide the service you requested.

We may verify your identity and respond within the applicable legal time limits. We explain any permitted extension, information we cannot provide, or records we must retain.

Contact our founder at hello@secondframe.co with a request or concern. If it remains unresolved, you can contact the Office of the Information and Privacy Commissioner for British Columbia.

Contact

For questions or requests, email hello@secondframe.co. Secondframe’s founder is responsible for privacy and service enquiries.

For unresolved privacy concerns, visit the BC Information and Privacy Commissioner.