Privacy Policy
Nimos Websites ("we", "us") operates nimoswebsites.com from Kelowna, British Columbia, Canada. This policy explains, in plain language, what we collect and why.
What we collect
- Contact information you give us. Name, email, phone, business name, and whatever you write in a brief or contact form.
- The consent record itself. When you tick the optional "project notes" box we store the fact that you ticked it, when, which version of the wording you saw, and a one-way hash of the page address and browser. We never store the raw values of those two.
- Analytics events. Pages viewed, referrer, basic device and browser type. These events are not used to identify you personally.
- Project data for clients. Content and account access needed to build and host your site, collected only with your knowledge.
Why we collect it, and on what basis
- To answer your brief and deliver your site. When you submit a brief you are expressly asking us to contact you about it. That is the basis, and it does not depend on any marketing consent.
- To send you the occasional project note, only if you separately tick the box. That is a distinct, recorded, revocable opt-in. It is never pre-ticked and it is not bundled with your brief. You can withdraw it with one click from any email, and withdrawing it does not affect the brief.
- To learn which pages help and which don't, in aggregate.
We do not sell personal information, and we do not add you to a marketing list without consent.
Every email we send identifies us, carries our address, and includes a working unsubscribe link. Clicking it — or your client's own unsubscribe button — stops the email, immediately, with no sign-in. People who unsubscribe are never emailed again by the system.
We send through Resend. Resend receives your address and the content of the message in order to deliver it, and acts as our processor. Open and click tracking are switched off, so we do not record whether you opened a message.
Third parties
The site is hosted on Vercel. Form submissions and project data are stored in Neon Postgres (a managed PostgreSQL provider), not Supabase. Analytics events are recorded by our analytics provider. These processors handle data on our behalf under their own security and privacy terms. Payments, where relevant, run through Stripe or Shopify; we do not store card numbers.
Advertising attribution
When we are running advertising, the Meta Pixel may be loaded on pages and hashed contact details may be sent to Meta through the Conversions API, so a lead or a purchase can be attributed to the ad it came from and not counted twice. The pixel is not loaded when advertising is not running. Meta receives the hashed details, the IP address and the user agent, and the event; it does not receive card numbers, because they never reach us.
Retention
Briefs and enquiries are kept for two years from the day you submit them, then deleted, unless we are still working with you. Enquiries we turn into a project are kept for as long as the account runs and for a reasonable period after, so we can service it. Analytics are retained in aggregate form.
Your rights
Ask what we hold about you, get a copy, correct it, or have it deleted — use the form on the site and say "privacy request" in the first line, with the address you used, or use the site form. We respond within 30 days. You also have the right to withdraw consent at any time without affecting the lawfulness of what we did before you withdrew it.
If you are in Canada, you have rights under PIPEDA (the Personal Information Protection and Electronic Documents Act) and, where it applies, BC PIPA, and we handle commercial electronic messages under CASL (Canada's Anti-Spam Legislation). This policy is written to meet all three. If you are in the EEA or the UK, GDPR gives you the same access, correction, deletion and portability rights, and we apply the same 30-day response.
Security
All traffic is encrypted in transit (HTTPS). Access to stored data is limited to the people and systems that need it to run your project. We do not sell data and we do not rent it. For business clients whose review requires one, we will sign your data processing addendum and standard contractual clauses, or agree one in writing, before work begins.
Nimos Websites — Kelowna, BC, Canada. Privacy questions go through the form on this site with "privacy request" in the first line, and reach the person who runs the site.