Effective July 21, 2026 · Version 2026-07-21

Privacy policy

Island Lake Web Studio is an online web studio based in Shawnigan Lake, British Columbia. This policy explains how we handle personal information when you visit this website or ask us about our services.

Who is accountable

The Privacy Officer, Island Lake Web Studio, is responsible for our privacy practices and questions about personal information under British Columbia’s Personal Information Protection Act (PIPA). Email privacy@islandlakewebstudio.ca.

Information we collect

When you submit the website audit form, we collect the information you choose to provide: business name, contact name, email address, message, consent record, and, if supplied, phone number and current website. We also record a submission identifier, the privacy-policy version you accepted, submission time, expiry time, and email-notification status.

Cloudflare may process limited technical and network information needed to deliver and secure the site, verify the Turnstile security check, prevent abuse, and provide aggregate web analytics. We do not intentionally store your IP address, Turnstile token, or full request logs in our enquiry database.

Why we use it

We use enquiry information only to review your request, respond to you, discuss relevant website or advertising services, maintain the security and reliability of the form, and meet legal or record-keeping obligations. Form consent permits us to respond to that enquiry; it is not consent to a newsletter or unrelated marketing.

We do not sell enquiry information, use it for advertising profiles, or add it to an unrelated mailing list. This site does not use advertising pixels, non-essential cookies, or a marketing newsletter in this version.

Service providers and access outside Canada

Cloudflare provides site hosting, database storage, spam protection, queued processing, email routing, security, and aggregate analytics. Cloudflare may process or allow authorized support access to information from facilities outside British Columbia or Canada, where it may be subject to the laws of those places. Our private email provider also receives the notification sent to our verified business inbox.

We may disclose information when reasonably necessary to a service provider working for us, with your consent, or when permitted or required by law. Service providers are limited to using information for the services they supply.

Consent and withdrawal

You may withdraw consent to our continued use of your enquiry information by emailing the Privacy Officer. We will explain any practical or legal consequence and stop using the information unless continued use or retention is permitted or required by law. Withdrawal does not affect handling that occurred before we received it.

Retention and deletion

Enquiries that do not become client relationships are scheduled for deletion from the enquiry database 12 months after submission. Related notification emails may be retained for the same period and then deleted in the ordinary course. If an enquiry becomes a client relationship, relevant contract, project, tax, accounting, and transaction records may be kept separately for the periods required for business and legal purposes.

Safeguards

We use access controls, Cloudflare Turnstile, request-size and rate limits, encrypted HTTPS connections, prepared database statements, restricted email delivery, data minimization, and expiry procedures appropriate to this small-business service. No online service can promise absolute security, so please do not submit sensitive personal, financial, health, or identity information through the form.

Access, correction, and complaints

Email the Privacy Officer to ask whether we hold personal information about you, request access to it, correct inaccurate information, request deletion, or make a complaint. Describe the request and the enquiry email address involved. We may need to verify your identity and may withhold information or retain records where PIPA or another law permits or requires it. We will assist and respond within the time required by applicable law.

If you are not satisfied with our response, you may contact the Office of the Information and Privacy Commissioner for British Columbia.

Privacy incidents

If we learn of unauthorized access, use, or disclosure, we will investigate, contain the incident, reduce foreseeable harm, document our response, and notify affected people or privacy authorities when appropriate or legally required.

Changes to this policy

We may update this policy when our services or privacy practices change. The effective date and version at the top identify the policy in force. Material changes will be posted here before they apply to new form submissions.

This practical policy describes the current site implementation. It is general information and is not legal advice.