Legal
Privacy policy
What we collect when you contact us or visit this site, why we keep it, and how to get it back or have it deleted.
At a glance
We collect only what we need to answer an inquiry and run a project. We do not sell it, and this site sets no advertising or tracking cookies.
Questions or requests: aristeinberg@icloud.com
1. Who we are
BuiltByAri (“BuiltByAri”, “we”, “us”) is a web design studio based in Toronto, Ontario, Canada. We design and build websites for local businesses. This policy explains how we handle personal information in the course of that work, and when you use this website.
For anything in this policy, contact Ari Steinberg at aristeinberg@icloud.com or 416–797–4821.
2. What this policy covers
This policy covers the information we collect through this website, by email, by phone or text, and while delivering a project. It does not cover websites we build for clients: each client site is operated under that client’s own privacy policy, and the client is responsible for it.
3. Information we collect
Information you give us
- Inquiry details — your name, email address, business name, phone number (if you provide one), the type of project you are considering, and the message you send.
- Project information — if you become a client, the content, photographs, logos, and access details you share so we can build and publish your site.
- Billing information — invoicing details and payment records. Card and bank details are handled by our payment processor and are never stored on our own systems.
Information collected automatically
- Server logs — our hosting provider records requests to this site, including IP address, browser type, the page requested, and the time. These logs are used to keep the site available and secure, and are deleted after 30 days.
- Aggregate page counts — we may measure which pages are visited in aggregate, without cookies and without building a profile of any individual visitor.
What we do not collect
We do not use advertising cookies, cross-site trackers, session recording, or third-party analytics that identify individuals. We do not buy contact lists, and we do not collect information about children.
4. How we use information
- To reply to your inquiry and prepare a quote.
- To design, build, host, and maintain your website.
- To issue invoices and keep accounting records.
- To keep the site secure, diagnose faults, and prevent abuse.
- To meet legal, tax, and regulatory obligations.
We do not use your information for advertising, and we do not sell, rent, or trade it.
5. Consent and legal basis
We collect and use personal information with your knowledge and consent, as required by Canadian privacy law (PIPEDA and Ontario’s consumer protection framework). You give consent when you submit the contact form, email us, or agree to a project proposal. You can withdraw consent at any time subject to legal and contractual restrictions; for example, we must keep invoices for tax purposes.
6. Cookies
This site does not set cookies and does not load third-party fonts, analytics, or embeds, so there is no cookie banner to dismiss. Your browser may still cache files locally, which does not identify you to us.
7. Who we share information with
We share personal information only where it is necessary to run the studio, and only with providers who are bound to protect it:
- Our hosting and domain providers, to publish and serve websites.
- Our email provider, to receive and reply to messages.
- Our payment processor, to issue invoices and receive payment.
- Government authorities or courts, where we are legally required to disclose.
Some providers store data outside Canada, including in the United States. Where that happens, the information is protected by the provider’s contractual and security commitments, and may be subject to the laws of that jurisdiction.
8. How long we keep information
- Inquiries that do not become projects: up to 24 months.
- Client project files and correspondence: while you are a client, then 24 months.
- Invoices and tax records: 7 years, as required by Canadian tax law.
- Server logs: 30 days.
9. How we protect information
The site is served over HTTPS. Access to email, hosting, and billing accounts requires multi-factor authentication and is limited to the people who need it. Backups are encrypted at rest. No system is perfectly secure, but we keep the surface small on purpose: there is no CMS to patch, no plugin ecosystem, and no marketing database.
10. Your rights
You can ask us to:
- Tell you what personal information we hold about you.
- Correct anything that is inaccurate or incomplete.
- Delete information we no longer need, subject to legal retention duties.
- Withdraw consent for future contact.
Email aristeinberg@icloud.com and we will respond within 30 days. We may need to confirm your identity first. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.
11. Children
Our services are offered to businesses. This website is not directed at children, and we do not knowingly collect personal information from anyone under 13. If you believe a child has sent us information, contact us and we will delete it.
12. Changes to this policy
If this policy changes materially, we will update the date at the top of this page and, where we hold your contact details and the change affects you, tell you by email. The current version always lives at web.asteinberg.me/privacy.