Privacy Policy

Craftlux Studio ("Craftlux," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over your information.

This policy applies to craftluxstudio.com, our client portal, and all services we provide, including website design, AI receptionist systems, and related offerings.

We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA).

1. Who We Are

Craftlux Studio is a web design and AI receptionist service provider based in British Columbia, Canada. We serve small businesses across Canada and the United States.

Contact: hello@craftluxstudio.com

2. Information We Collect

We collect personal information only when you provide it voluntarily or when it's necessary to deliver our services. This may include:

Information you provide directly

• Name, email address, phone number, and business name
• Billing and payment information
• Communications you send us (emails, form submissions, voice messages)
• Content and assets you share with us for projects (logos, copy, photos, brand materials)
• Login credentials for accounts you authorize us to access on your behalf

Information collected automatically

• IP address, browser type, device information, and approximate location
• Pages visited, time spent, and referring URLs (via standard analytics)
• Cookies and similar tracking technologies (see Section 7)

Information from third parties

• Publicly available business information (when researching prospective clients)
• Information from integrated services you connect (e.g., calendars, CRM data)

3. How We Use Your Information

We use your information to:

• Deliver the services you've requested (website builds, AI receptionist setup, ongoing support)
• Communicate with you about projects, invoices, and service updates
• Respond to inquiries and provide customer support
• Process payments and maintain business records
• Improve our website and services
• Send occasional marketing communications (only with your consent, and you can opt out anytime)
• Comply with legal obligations

We do not sell your personal information. Ever.

4. Legal Basis for Processing

We process your personal information based on:

• Consent — when you provide it voluntarily (e.g., contact forms, newsletter signup)
• Contract — when processing is necessary to deliver services you've engaged us for
• Legitimate business interest — for things like fraud prevention, security, and improving our offerings
• Legal obligation — when we're required to retain or disclose information by law

5. Who We Share Information With

We share information only with trusted service providers who help us run our business. These include:

• CRM and client management platforms (e.g., GoHighLevel) — for client records, communication, and project workflows
• Email and productivity services (e.g., Google Workspace) — for business email and document storage
• Website and database hosting providers — for site hosting and backend infrastructure
• Payment processors — for billing and transactions
• Communication and AI services — for AI receptionist functionality and voice/SMS handling
• Analytics providers — for understanding website performance

All providers are contractually required to safeguard your information and use it only for the purposes we've authorized.

We may also disclose information if required by law, court order, or to protect our rights, property, or safety.

6. Cross-Border Data Transfers

Many of our service providers are based in the United States or other countries outside Canada. This means your information may be stored or processed outside of Canada, including in the U.S., and may be subject to the laws of those jurisdictions, including lawful access by foreign government authorities.

By using our services, you consent to this transfer. We take reasonable steps to ensure all providers maintain protections comparable to Canadian privacy standards.

7. Cookies and Analytics

Our website uses essential cookies required for the site to function properly (such as remembering your session or preferences).

We also use privacy-friendly, aggregate analytics provided through our website platform (Lovable) to understand how visitors interact with our site — things like which pages are viewed and approximate visitor counts. This analytics data is anonymized, does not use tracking cookies, and is not used to identify individual visitors or shared with advertising networks.

You can disable cookies through your browser settings, though some site features may not work as intended.

8. Data Retention

We keep personal information only as long as necessary to:

• Provide our services
• Meet legal, tax, and accounting obligations (typically 7 years in Canada)
• Resolve disputes and enforce agreements

When information is no longer needed, we securely delete or anonymize it.

9. How We Protect Your Information

We use reasonable physical, technical, and administrative safeguards to protect your information, including:

• Encrypted connections (HTTPS) across our website and client portal
• Access controls and authentication on all business accounts
• Vetted service providers with their own security certifications
• Limited internal access on a need-to-know basis

No system is 100% secure, but we work hard to minimize risk.

10. Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Withdraw consent at any time (where processing is based on consent)
• Request deletion of your information, subject to legal retention requirements
• Opt out of marketing communications
• File a complaint with us or with the Office of the Privacy Commissioner of Canada or the BC Office of the Information and Privacy Commissioner

To exercise any of these rights, email us at hello@craftluxstudio.com. We'll respond within 30 days.

11. Children's Privacy

Our services are intended for businesses and adults. We do not knowingly collect personal information from anyone under 16. If we learn we've collected such information, we'll delete it.

12. Third-Party Links

Our website and communications may contain links to third-party sites. We're not responsible for the privacy practices of those sites. Review their privacy policies before sharing information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top reflects the most recent revision. For material changes, we'll notify you by email or through a prominent notice on our website.

14. Contact Us

Questions, requests, or concerns about your privacy?

Craftlux Studio
Email: hello@craftluxstudio.com
Website: craftluxstudio.com

You can also contact:

• Office of the Privacy Commissioner of Canada — priv.gc.ca
• BC Office of the Information and Privacy Commissioner — oipc.bc.ca