Privacy Policy

WeBirdle provides web design and digital infrastructure services from Alberta, Canada. In this policy, "WeBirdle," "we," "us," and "our" refer to WeBirdle.

This policy applies to webirdle.ca, including public website-audit reports and protected staff tools hosted on this domain. A client website operated by another business has its own privacy practices and policy, even if WeBirdle built or maintains that website.

Depending on how you interact with us, we may handle:

• Booking information: your name, email address, selected meeting time, answers you submit in the booking flow, and related appointment details.
• Website and device information: pages visited, referring page, approximate device and browser details, language, screen size, timestamps, and network request information such as an IP address.
• Audit information: a business name, city, telephone number, audit date, public website observations, and report content. When an audit recipient activates the booking calendar, the business name, city, and telephone number may be passed to Cal.com to prefill that booking flow.
• Direct communications: information you include when you email, call, meet with, or otherwise contact us.
• Staff and administration records: authorized staff names, work email addresses, roles, sign-in records, and content or audit records managed through our administrative systems.
• Security information: challenge results, access attempts, error details, performance traces, and URLs involved in security-policy violations.

Our public website does not currently offer an account, checkout, newsletter signup, or general-purpose contact form. Please do not send sensitive personal information unless we specifically request it and provide an appropriate way to send it.

We use information to:

• schedule, prepare for, and conduct requested meetings;
• create, publish, and maintain requested website-audit reports;
• respond to communications and provide services or support;
• operate staff access, content management, and business records;
• understand aggregate website use and improve our services;
• detect abuse, investigate errors, and secure our systems; and
• meet legal, accounting, and contractual obligations.

We use personal information with consent or as otherwise permitted by applicable law. We do not sell personal information or use this website for third-party behavioural advertising.

We use Rybbit on public pages to understand website traffic and basic usage patterns. Rybbit may process page URLs, page titles, referrers, language, screen size, browser details, timestamps, and a randomly generated browser identifier stored in local storage. We configure the integration without session replay and do not intentionally send form entries to analytics.

Analytics is optional. The control below stores your choice in this browser using the local-storage key disable-rybbit. When disabled, WeBirdle does not load the analytics script or dispatch analytics events on later page loads. Clearing browser storage can remove your saved choice.

We also use technologies needed for specific features. The protected review tool uses a secure, HTTP-only session cookie for up to one year after successful access. Staff authentication uses necessary session cookies. Cloudflare Turnstile loads only on protected access forms, and Cal.com loads only after you deliberately open a booking experience. Those providers may use their own necessary storage while their feature is active.

We do not currently use advertising or cross-site profiling cookies. You can also restrict cookies or clear site data in your browser, but doing so may sign you out of protected tools or reset preferences.

We use a limited set of providers to operate WeBirdle:

• Vercel hosts and delivers the website.
• Rybbit provides optional website analytics.
• Cal.com provides user-activated meeting scheduling.
• Cloudflare Turnstile helps prevent automated abuse.
• Sentry receives application errors, limited performance data, and security-policy reports.
• Neon/PostgreSQL stores audit and administrative records.
• Payload provides our content-management system.
• Google and Microsoft provide sign-in services for authorized staff accounts.

If you contact us by email or telephone, the providers involved in that communication also process the information needed to deliver it. We may disclose information when required by law, to protect rights or safety, in connection with a business reorganization, or with your direction or consent.

Cal.com explains its practices in its privacy policy. Other providers maintain their own privacy and security terms.

We and our service providers may process information in Canada, the United States, or other countries where they operate. Information in another jurisdiction may be subject to that jurisdiction's laws and lawful access by its authorities. We select providers based in part on their privacy and security commitments and limit the information we send where practical.

We keep personal information only as long as reasonably necessary for the purpose described in this policy, including to provide services, maintain accurate business and tax records, resolve disputes, enforce agreements, and meet legal or security requirements. The period varies by record type and the relationship involved.

Public audit reports remain available while the report is relevant or requested by the business, subject to operational and legal needs. Provider copies, backups, and logs may remain for the provider's documented retention period before deletion or de-identification.

We use reasonable administrative, technical, and organizational measures appropriate to the information we handle. These include access controls, restricted staff accounts, encrypted network connections, abuse protection, and monitoring. No internet transmission or storage system can be guaranteed completely secure.

Subject to applicable law, you may ask to access or correct personal information we hold about you, withdraw consent, or request deletion. Some information may need to be retained where the law permits or requires it. We may need to verify your identity before completing a request.

You may disable optional analytics above. You can also ask us about our privacy practices or make a complaint using the contact details below. If we cannot resolve a concern, you may contact the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner of Alberta, as applicable.

We review this policy at least annually and when our data practices or services materially change. We will post revisions here and update the "Last updated" date. If a change materially affects how we use information already collected, we will provide additional notice where appropriate.