Privacy Policy

1. Who we are

Nocktech is a web and software studio based in Toronto, Ontario, Canada. For the purposes of this policy we are the organization responsible for the personal information described below. You can reach us at hello@nocktech.com.

2. What we collect

We collect two kinds of information through this website.

• Information you give us: when you submit the contact form, we receive your name, email address, and optionally your company, the subject you selected, and the message you write
• Information collected automatically: our web server records standard technical data including IP address, browser type and version, referring page, requested URL, and timestamp
• We do not use advertising cookies, behavioural tracking pixels, or cross-site trackers on this website

3. Why we use it

We use the information above only for the following purposes.

• To read and reply to the enquiry you sent us
• To send you an automatic acknowledgement confirming we received your message
• To maintain the security and stability of the website and detect abuse
• To meet our legal and record-keeping obligations

4. What we do not do

We do not sell, rent, or trade personal information. We do not add contact form submissions to a marketing list or an automated email sequence. We do not use your information to build advertising profiles. If we ever want to send you something other than a reply, we will ask first.

5. Spam protection

This website uses Google reCAPTCHA v3 to distinguish real visitors from automated submissions. reCAPTCHA collects hardware and software information, including device and application data, and sends it to Google for analysis. Your use of reCAPTCHA is subject to the Google Privacy Policy and Terms of Service. We also use an arithmetic question and a hidden form field for the same purpose; neither collects personal information.

6. Who else sees your information

We share personal information only with the service providers needed to operate this website and respond to you.

• Our hosting and infrastructure provider, which stores the site and its server logs
• Our transactional email provider, which delivers the notification and acknowledgement emails
• Google, in connection with reCAPTCHA as described above
• Any party we are legally required to disclose to, such as in response to a valid legal request

7. Where information is stored

Our infrastructure and service providers may store or process data outside Canada, including in the United States. Where that happens, the information is subject to the laws of the jurisdiction it is held in. We choose providers that offer appropriate contractual and technical safeguards.

8. How long we keep it

Contact form submissions are retained for as long as needed to deal with your enquiry and to keep a reasonable business record, typically no more than two years unless you become a client, in which case records are kept for the duration of our working relationship and any period we are required to retain them. Server logs are retained for a short period for security and diagnostic purposes.

9. Security

The site is served over HTTPS. We apply security updates, restrict access to systems holding personal information, and keep backups. No method of transmission or storage is completely secure, and we cannot guarantee absolute security — please do not send confidential or sensitive information through the contact form.

10. Client data

In the course of client work we may be given access to systems containing personal information belonging to a client's own customers or staff. In that context we act on the client's instructions as a service provider, and that information is governed by the agreement signed with that client rather than by this policy.

11. Your rights

Under Canadian privacy law, and under other laws that may apply to you, you have rights over your personal information.

• Ask what personal information we hold about you
• Ask us to correct information that is inaccurate or incomplete
• Ask us to delete information we no longer need to retain
• Withdraw consent, where our use is based on consent
• Raise a concern with us, or with the Office of the Privacy Commissioner of Canada

12. Children

This website is intended for businesses and is not directed at children. We do not knowingly collect personal information from anyone under the age of majority. If you believe a child has provided us with personal information, contact us and we will delete it.

13. Changes to this policy

We may update this policy as our practices or the law change. The version published on this page, with the date shown above, is the version in effect.

14. Contact

Questions about this policy, or a request relating to your personal information, can be sent to hello@nocktech.com. We will respond within thirty days.