This Privacy Policy explains what information Design by Miz ("we", "us") collects when you visit designbymiz.com or use our apps, how we use it, and the choices you have.
We operate from Ontario, Canada, and handle personal information in accordance with Canada's federal privacy law, the Personal Information Protection and Electronic Documents Act (PIPEDA).
Design by Miz is the controller — the organisation responsible — for the personal data we collect through this site and our apps. We operate from Whitby, Ontario, Canada. For anything privacy-related, email hello@designbymiz.com.
What we collect
- Analytics data. We use Google Analytics to understand aggregate, anonymised usage (pages viewed, approximate region, device type). This helps us improve the site.
- Contact details. If you email us, we receive your email address and whatever you choose to share.
- Purchase data. Payments are handled by Paddle.com Market Ltd ("Paddle"), our Merchant of Record (see the Refund Policy); we receive order confirmations but never your full card details.
How we use it
PIPEDA works on knowledge and consent: we collect and use personal information with your consent, for purposes a reasonable person would consider appropriate — running and improving the site and apps (analytics), answering you when you write to us (contact details), and fulfilling your order (purchase data).
Where other privacy laws, like the EU and UK GDPR, ask us to name a legal basis: analytics runs on your consent; purchase data is processed because it's necessary to complete your order; we answer email on our legitimate interest in responding to you; and we keep order records because tax law requires it. We do not sell your personal information.
Who we share it with
A small set of providers help us run things, and each gets only what its job needs: Paddle, our Merchant of Record, processes your purchase — payments, any subscription management, tax compliance, and invoicing (see Paddle's privacy policy); Google Analytics produces the aggregate usage stats above; and GitHub Pages hosts and serves this site. We never sell or rent your personal information.
How long we keep it
Only as long as we need it. Analytics data ages out automatically on Google Analytics' retention schedule; emails are kept while the conversation might still matter, then deleted; order records are kept for as long as Canadian tax and accounting law requires. When we no longer need personal data, we delete it or anonymise it.
Security
We keep the data footprint small to begin with: the site is static, has no user accounts, and your card details go straight to Paddle — they never touch our systems. What we do hold is protected with technical and organisational measures: everything travels over HTTPS (encryption in transit), and access to our email and provider dashboards is limited to the business owner.
Cookies
We use a small number of cookies, primarily for analytics. See our Cookie Policy for details and your choices.
Where your data lives
Some of the service providers we rely on — including Google Analytics and Paddle, our Merchant of Record — process data on servers outside Canada, such as in the United States. While it's there, it's subject to the laws of that country, and may be accessible to its courts and authorities.
Your rights
Depending on where you live, you may have the right to access, correct, or delete your personal data, or to object to certain processing. Under PIPEDA you can ask us for access to the personal information we hold about you, ask us to correct it if it's wrong, and withdraw your consent to our use of it — subject to legal or contractual restrictions and reasonable notice. To exercise any of these, contact us at hello@designbymiz.com.
If you're not satisfied with how we've handled your request, you can complain to the Office of the Privacy Commissioner of Canada.
Contact
Questions about this policy? Email hello@designbymiz.com.