What this site collects, and where it goes.

Etherington Designs Inc. is an architectural millwork studio at 22 Ingram Drive, Unit 3, Toronto, ON M6M 2L6. Ross Etherington, our founder, is responsible for how the studio handles personal information.

We collect what you choose to send us, and what our spam check and our analytics need in order to work.

When you send a form. The site has three: the project brief on our Contact page, the visit request on The Shop page, and the message form on our launch page (/launch). Depending on the form, we ask for:

• your name, email address, and phone number;
• your role, and your firm or studio;
• a description of your project, its stage, a link to your drawings, and when you expect to be on site;
• whether you'd like to visit the shop, and when suits you;
• anything else you write in a note.

We use this to reply to you, to arrange a visit, and to talk through your project. The site itself doesn't keep your message: our server passes it straight on as an email to the studio's inbox and, if you gave an email address, sends you a confirmation.

To keep out spam. When you come near one of our forms, Cloudflare Turnstile checks in the background that you're a person and not a bot. You'll only see it if it needs you to tick a box. When you send a form, our server also notes your IP address, to limit how many messages one address can send in a short time. It holds the address in memory only, never saves it, and loses it when that server instance shuts down, if not before.

To understand how the site is used. We use Google Analytics. What it records is set out under "Analytics and cookies" below.

We use these services to run the site and its forms. Each is named with what it receives.

• Vercel hosts this website and runs our form server, which is in the United States. Like any web host, it receives your IP address and browser details when you request a page. Its request logs record details such as the page requested and your browser's user agent (which names your browser), and the logs available to us are kept for one day.
• Resend sends our form emails: your message to our inbox, and your confirmation. Resend keeps a copy of each email, with its delivery record, for 30 days. We've turned off open and click tracking, so the confirmation doesn't report whether you opened it or followed a link in it.
• Microsoft hosts the studio's inbox, on Microsoft 365. That's where your message arrives.
• Cloudflare runs Turnstile, the spam check on our forms. To make that check, it receives your IP address, your browser's user agent, a technical fingerprint of your connection, and which site is asking. Cloudflare states that it collects these only to detect and block bots, not to identify, profile, or target anyone.
• Google runs Google Analytics, described below.

Outside Canada. Resend stores its data in the United States, and Vercel's primary processing facilities are there too. Google and Cloudflare may process your information in the United States or other countries, and the studio's Microsoft inbox may be stored outside Canada.

What stays on our site. Our fonts are served from this site, not from a font service. The Instagram photos on our pages are copied here when the site is built, so Instagram sees your visit only if you follow a link to it. The map link opens Google Maps only when you click it.

Google Analytics records the pages you visit, how far you scroll, the links you follow to other sites, and similar interactions. We also record when you tap or click our phone number, or follow a link to our contact form or our shop page. When someone sends one of our forms, we record which form it was and the options they chose, such as their role or the project's stage. We never send Google your name, email address, phone number, or anything else you type.

Google Analytics doesn't log or store your IP address. Google signals is turned off, so our reports don't draw on data Google may hold about people signed in to a Google account, and our Analytics isn't linked to Google Ads. We've set Google Analytics to keep data tied to individual visitors for 14 months.

Google Analytics sets two cookies in your browser: _ga, which tells one visitor from another, and _ga_ followed by our property's ID, which keeps track of your visit. Each is set to last two years. You can block or delete cookies in your browser's settings, and the site works the same without them.

We keep your inquiry only as long as we need it for the purposes above. Resend keeps its copies for 30 days, the Vercel logs we can see are kept for one day, and Google Analytics keeps visitor-level data for 14 months.

You can ask to see the personal information we hold about you, to correct it, or to have us delete it. You can also withdraw your consent to our using it, for example if you'd rather we didn't contact you again about a project. Ask Ross, using the details below.

Ross Etherington answers privacy questions for the studio. Reach him through our contact form, or call the studio at (416) 567-8109.

If you're not satisfied with our answer, you can file a complaint with the Office of the Privacy Commissioner of Canada. Please raise it with us first: the Commissioner says it may not be able to accept a complaint otherwise.