Privacy policy.

This policy applies to information collected through jardinestudio.com, contact forms, free audit tools, email, and normal project communication with Jardine Studio.

Jardine Studio is based in Toronto, Ontario, Canada. Some service providers we use may process information in Canada, the United States, or other countries where they operate.

When you contact us, send a brief, request a free audit PDF, or email directly, we may collect:

• name
• email address
• company or project name
• website URL
• project details
• budget or timeline information
• anything else you choose to include in the message
• audit email address
• website URL submitted for an audit
• audit report access request

We do not collect payment card or banking information through this website.

When you visit the site, your browser and our hosting providers may process basic technical information such as:

• IP address
• browser and device information
• referring page
• pages visited
• performance and error data
• approximate location derived from technical data
• website audit events such as scan started, email submitted, PDF downloaded, and Strategic Website Audit CTA clicked
• conversion milestones such as landing, contact form viewed, form started, submit attempted, validation failed, submit failed, and email link clicked
• a random journey and session identifier, landing path without query strings, timestamp, referring host, channel, and recognized source and medium labels
• automated audit result data for submitted URLs

We use this to operate the site, understand performance, generate free audit results, prevent abuse, and improve the website.

If we work together, we may keep project notes, briefs, site audits, strategy documents, technical information, login or access records, and communication history needed to deliver the work.

We use information to:

• reply to inquiries and project briefs
• review and respond to project inquiries
• send transactional audit notifications and follow up on audit requests
• generate, store, and send free website audit reports
• scope and quote work
• deliver SEO, web development, consulting, and related services
• operate, secure, and improve the website
• measure site use and ad-generated inquiries through Google, when you give the relevant permission
• prevent spam, abuse, or misuse of the contact form
• maintain business records
• meet legal, tax, accounting, or contractual obligations

We do not sell personal information. If you permit Google Analytics or Google Ads measurement, Google receives the measurement data described below. Personalized advertising is disabled in the site tag configuration. Inquiry details such as your name, email address, and message are not included in our Google conversion event payloads.

Jardine Studio may use AI-assisted tools in our work, but we do not use your inquiry or project information to train public AI models.

If AI-assisted tools are used for project work, they are used to support practical tasks such as drafting, summarizing, structuring, analysis, or workflow support. Sensitive information should not be sent to us through the website contact form. If a project requires sensitive data, we will agree on an appropriate handling process first.

We use service providers to host the site, handle inquiries, run diagnostics, and measure performance. Google measurement loads only after your relevant choice. Providers process information under their applicable service terms and privacy policies.

• Vercel: hosting, performance, and analytics
• Google Analytics and Google Ads: optional website-use analytics and advertising conversion measurement. Depending on your choices, Google may receive page URLs, referring information, device and browser data, cookie and advertising click identifiers, and events such as an accepted inquiry. Our lead events use an opaque lead ID, not the name, email address, or message submitted in the form.
• Resend: transactional email
• Upstash: attribution, conversion milestones, lead-board records, temporary audit storage, rate limiting, and cached PDFs
• Automated diagnostics providers: technical website audit checks for submitted URLs

If we add new providers that materially change how information is handled, we will update this policy.

Read Google's privacy policy and how Google uses data from partner sites.

Google Analytics and Google Ads measurement stay off until you choose them. You can allow either, both, or neither using Cookie preferences in the footer. Rejecting Google measurement does not prevent contact forms, audit tools, or booking links from working.

Google Analytics measures page use and inquiry events. Google Ads measures which advertisements lead to accepted inquiries. The site loads the Google tag only after at least one category is accepted and configures the selected destinations. Personalized advertising and Google signals are disabled in the site configuration. We do not queue earlier interactions for later transmission to Google.

Your Google choices are stored in this browser for up to 180 days. You can reopen the choices from the footer or below. Reducing permission reloads the current page to stop the previously loaded Google runtime and clears the Google measurement cookies this site can access for the rejected category. Save any unsent form text before changing an existing permission. This does not erase information already received by Google or cookies on other domains.

Separately, the site uses first-party attribution to connect an inquiry to its source. A journey cookie lasts up to 90 days and records random identifiers, session timing, landing and visited paths without query strings or fragments, referring host, channel, and a fixed list of recognized source and medium labels. We discard free-text campaign names, search terms, advertising click identifiers and other query values from this first-party attribution. Avoid placing personal or sensitive information in URL paths. Journey and milestone detail can be associated with an inquiry for its original 90-day retention period; later lead activity does not extend that period.

Cookieless Vercel Analytics and Speed Insights measure website usage and performance independently of these Google choices. Hosting, security, first-party inquiry attribution, and operational processing also continue. The Google choices are not an opt-out from all processing described in this policy.

We keep information only as long as reasonably needed for the purpose it was collected. Typical retention by category:

• Contact form and email inquiries: successful contact-form inquiries are stored in the private lead board and email. Lead pipeline records are kept for up to 24 months after the last activity unless anonymized earlier, or longer when needed for an active client, contract, or legal obligation.
• Project records: kept during the project and afterward only as needed to support the work, reference decisions, fulfill contracts, or meet legal, tax, accounting, or security obligations.
• Free audit run state: scan status, hashed IP, basic technical context, CTA state, and audit run indexes expire after 72 hours.
• Free audit results and URL cache: submitted URL cache records expire after 24 hours. Raw audit and report objects expire after 7 days.
• PDF unlocks and cached PDFs: browser unlock cookies and cached PDF files expire after 24 hours. Temporary PDF request and error metadata expires after 72 hours.
• Audit lead records: an audit PDF request creates a minimized New lead. If the same journey later submits the project form, that opportunity is enriched instead of duplicated. Lead pipeline records are kept for up to 24 months after last activity unless anonymized earlier.
• Metrics and operational logs: journey and milestone detail, including detail associated with a lead, expires within 90 days of the original recorded activity. Lead activity does not restart that period. Lead-board audit context retains the audited site origin without URL paths, credentials, query strings or fragments. Anonymizing a lead clears contact fields, form contents, audit context, journey detail, free-text notes and status reasons, and related conversion indexes and milestones. Aggregate funnel metrics expire after 180 days. Provider-managed operational logs are kept to a 30-day target where configurable. Google controls the retention of data it receives under the applicable product settings and policies.

You can ask us to delete information we hold about you, subject to legal, contractual, security, and recordkeeping limits.

We use reasonable administrative, technical, and organizational safeguards to protect information from unauthorized access, loss, misuse, or disclosure.

No website, email system, or online service is completely secure. Please do not send passwords, payment information, health information, government IDs, or other sensitive personal information through the contact form.

You may ask to:

• access personal information we hold about you
• correct inaccurate information
• delete information, where we are not required to keep it
• withdraw consent where processing is based on consent
• ask how information has been used or disclosed

If you are in Canada, rights under PIPEDA or applicable provincial privacy laws may apply. If you are in California or another US state with consumer privacy laws, rights may apply depending on the law and whether Jardine Studio meets the applicable thresholds. If you are in the European Economic Area, United Kingdom, or Switzerland, GDPR-style rights may apply where applicable.

We will respond within 30 days unless a different timeline is required by applicable law.

This website is intended for business and professional inquiries. We do not knowingly collect personal information from children.

We may update this policy as the site, services, audit tools, or legal requirements change. The updated date at the top shows when the policy was last revised.

For privacy questions or requests, email alex@jardinestudio.com with the subject line "Privacy request." We will confirm receipt within two business days where practical.