Privacy
Private by design, in writing.
We build software that keeps data where it belongs. This page says what our own website and portal collect, why, and what you can ask of us. The short version: no advertising trackers, no cookies on the public site, and nothing sold or shared for marketing.
Who we are
divtodiv is a software house headquartered in Calgary, Alberta, Canada. We are the controller of the data described here. Reach us at [email protected].
What the public website collects
When you write to us
The contact form sends us your name, work email and message, together with the time and the IP address the note came from (used to tell people from bots and to stop abuse). The note is stored in our own portal and emailed to our team. We use it to reply and to follow up on what you asked, and for nothing else.
The form is protected by Cloudflare Turnstile, a bot check that runs without a puzzle. Turnstile may process connection and browser signals on Cloudflare's side; see Cloudflare's privacy policy.
Page statistics
When a page loads, your browser sends our portal the page path, the domain of the site that referred you (if any) and the width of your window. From the request itself our server derives a device type (phone, tablet, desktop), a browser family, and a country and city supplied by Cloudflare's network. We keep a one-way, salted hash of your IP address and browser signature so that repeat views can be counted as one visitor; the hash cannot be turned back into your address and we never store the address itself for statistics.
This is first-party: the data goes to our own portal, on our own servers. It does not use cookies, it does not follow you to other sites, and it is not shared with advertising networks.
Delivery through Cloudflare
divtodiv.com is delivered through Cloudflare, which provides our DNS, caching, security filtering and Cloudflare Web Analytics, a cookieless performance beacon. Cloudflare processes connection data such as your IP address as our service provider and may set strictly necessary security cookies on its own domains. Cloudflare's network operates worldwide; our origin servers are in Canada.
What we do not do
- No cookies set by divtodiv.com.
- No Google Analytics, no advertising pixels, no social-media trackers.
- Fonts are served from our own domain, so font requests do not reach a third party.
- We do not sell personal data and we do not share it for marketing.
The client portal
portal.divtodiv.com is for clients and our team. Signing in sets a session cookie that is strictly necessary for the portal to work. The portal holds the information needed to run an engagement: your account, the people you add to it, project notes and files, invoices and payment status. Payments, where offered, are handled by Stripe under Stripe's privacy policy; we do not see or store card numbers.
Why we are allowed to process this
| Data | Purpose | Basis |
|---|---|---|
| Contact form | Replying to you, starting an engagement | Your request; steps before a contract |
| Page statistics | Understanding how the site is used, keeping it secure | Our legitimate interest, with minimal data |
| Portal accounts | Running the engagement you signed up for | Performance of the contract |
| Security logs | Preventing abuse and attacks | Our legitimate interest and legal duties |
We follow Canada's PIPEDA and Alberta's PIPA. For visitors in the European Economic Area and the United Kingdom, the GDPR applies and the bases above are the ones we rely on.
How long we keep it
- Contact notes: for as long as the conversation and any engagement that follows need them, then deleted on request or when no longer useful.
- Page statistics: kept as aggregate history; the stored visitor hash is already irreversible.
- Portal data: for the life of the engagement and the period Canadian tax and accounting rules require for invoices.
Where it lives
Our website and portal run on servers we operate in Canada. Cloudflare's global network sits in front of them for delivery and protection, and Stripe processes payments. We do not use other processors for the data described here.
Your rights
You can ask us what we hold about you, ask for it to be corrected or deleted, object to the statistics processing, or ask for a copy in a portable form. Write to [email protected]; we answer within 30 days. You can also complain to the Office of the Privacy Commissioner of Canada, the Information and Privacy Commissioner of Alberta or, in the EEA or UK, your local data-protection authority.
Changes
When this page changes we update the date at the top. Material changes to how we treat portal data are also announced inside the portal.