Legal
Privacy policy
Last updated October 13, 2026
This policy explains what personal information we collect through this website and in the course of client work, why we collect it, and how we protect it. It follows British Columbia's Personal Information Protection Act (PIPA) and Canada's PIPEDA.
Who runs this site
Acorn Websites is a website design and development business in Armstrong, British Columbia. It is run by 1337376 B.C. Ltd., a British Columbia company ("Acorn Websites," "we," "us"). 1337376 B.C. Ltd. is responsible for the personal information this site collects.
Our privacy officer is MJ Howie. You can reach her at hello@acornwebsites.com. You can also write to 1337376 B.C. Ltd., c/o Davidson Lawyers, 301-3126 31 Ave, Vernon, BC V1T 2H1.
What we collect
When you contact us by email, text, or phone, we receive whatever you send: your name, business name, contact details, and the content of your message. When you book a call, Google Calendar collects your name, email, and the time you chose under Google's own privacy policy.
The contact form and the hosting and maintenance plan form send what you type straight to our email. Nothing is stored on this website, and nothing is added to a mailing list. The hosting and maintenance plan form and the image licensing checkout pass your details to Stripe to take payment, under Stripe's own privacy policy.
If you become a client, we collect what the project needs: contact details, business information, website content, logins for systems you ask us to work in, and billing details. We do not store card numbers. Payments run through our invoicing provider and Stripe.
Cloudflare hosts this site and keeps standard server logs, such as IP addresses and the pages you request. These keep the site running and help stop abuse.
Analytics and cookies
This site uses three tools to count visits and see which pages bring in work.
- Google Analytics counts visits, shows which pages people read, and counts taps on the phone and email links. It sets cookies in your browser and sends usage data to Google.
- Ahrefs Web Analytics counts visits. It sets no cookies and stores no IP addresses.
- Cloudflare Web Analytics counts visits. It sets no cookies and does not track you across other sites.
You can block Google Analytics cookies in your browser settings or with Google's opt-out browser add-on. The site still works without them. If we add a tool that identifies individuals, we will update this page and add a notice.
Why we collect it
To reply to you, to scope and quote work, to do the work you hire us for, to bill you, and to keep records that Canadian tax law requires. We use visit counts to see what is useful and to fix what is not. We do not sell, rent, or trade personal information. We do not use it for targeted advertising. We do not send marketing email unless you have asked for it, and you can stop it any time.
Who else handles it
Only the providers we need to run the business and deliver your project. Cloudflare hosts this site and processes form messages. Google provides email, calendar, and analytics. Ahrefs provides visit counts. Stripe processes payments. Other examples are hosting and website tools (such as Pressable and WordPress) and invoicing. Each of these has its own privacy policy. Most are based in the United States, so your information may be stored or processed there and be subject to United States law. We choose providers with strong security practices and share the minimum needed.
We will share information if the law requires it, or to protect the safety or rights of any person.
How we protect it
Client logins live in a password manager, not in email or documents. Accounts we control use two-step sign-in. The site runs over a secure connection (HTTPS). Access to your systems is limited to what the project needs and is removed when we finish, unless you have asked us to keep it for ongoing hosting and maintenance.
How long we keep it
- Messages and enquiries: up to two years after our last contact.
- Client project records and invoices: seven years, as Canadian tax law requires.
- Website content and files: for the life of our working relationship, then deleted or returned on request.
- Google Analytics data: up to 14 months.
- Server logs: a short time, then deleted.
Your choices
You can ask to see the personal information we hold about you. You can ask us to correct it or delete it where the law allows. You can withdraw your consent at any time. Email hello@acornwebsites.com and we will reply within 30 days.
If you live in the United States
We do not sell or share personal information for targeted advertising. We run no ad trackers, so there is nothing to opt out of. If that changes, we will add a "Do Not Sell or Share My Personal Information" link to every page.
Depending on your state, you may have the right to know what we collect, to get a copy, to correct it, to have it deleted, and to opt out of its sale or sharing. To use these rights, email hello@acornwebsites.com. We answer within 45 days. We will not treat you differently for asking.
How to make a complaint
If you have a concern, please tell our privacy officer first at hello@acornwebsites.com. We will look into it and reply in writing.
If you are not happy with our answer, you can complain to the Office of the Information and Privacy Commissioner for British Columbia at oipc.bc.ca.
Client websites
This policy covers acornwebsites.com and our own business practices. Websites we build for clients belong to those clients and have their own privacy policies. We set them up to collect only what the client needs and to be clear about it.
Changes
If this policy changes, the date at the top will change with it. Material changes will be noted here for at least 30 days. Last updated October 13, 2026.
Contact
1337376 B.C. Ltd. dba Acorn Websites. c/o Davidson Lawyers, 301-3126 31 Ave, Vernon, BC V1T 2H1. hello@acornwebsites.com. 778-692-5555.