Ambrite Web Services respects your privacy. This policy explains what personal information we collect, why we collect it, who we share it with, and the choices you have. It applies to this website and to the web design, hosting, and maintenance services we provide.

1. Who We Are

Ambrite Web Services is a Canadian web design, hosting, and maintenance business based in Fredericton, New Brunswick. For the purposes of Canadian privacy law, Ambrite Web Services is the organization responsible for the personal information described in this policy.

We are subject to the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

2. Information We Collect

Information you give us

• Contact and enquiry details. When you use our contact form, we collect your name, email address, the type of enquiry, your website address if you provide one, and the content of your message.
• Account and billing details. If you become a client, we collect the information needed to open and run your account: name, business name, billing address, email address, and records of the services you have ordered.
• Support correspondence. Messages, tickets, and email you send us, together with our replies.

We do not ask for a telephone number, and we do not require one to work with us.

Information collected automatically

• Server and security logs. IP address, browser type, pages requested, and timestamps. These are generated by our hosting and security infrastructure and are used to operate the service, investigate abuse, and diagnose faults.
• Usage analytics. Aggregated information about which pages are visited and how visitors arrive, described in section 4.

Payment information

We do not collect or store your full credit card number. Card payments are processed directly by Stripe or PayPal, who handle the card details themselves. We receive only confirmation of payment and limited details such as the card brand and last four digits.

3. How We Use Your Information

We use personal information to:

• Respond to enquiries and provide quotes
• Deliver, maintain, and support the services you have ordered
• Process payments, issue invoices, and send renewal notices
• Send service-related messages such as maintenance windows, security notices, and account alerts
• Protect our services against fraud, spam, and abuse
• Meet our legal, tax, and accounting obligations
• Understand, in aggregate, how our website is used so we can improve it

We rely on your consent for optional processing such as analytics, and on the necessity of performing our contract with you for the rest. You can withdraw consent at any time, as described in section 9.

We do not use your personal information to make automated decisions that produce legal or similarly significant effects.

4. Cookies & Tracking

Cookies are small files stored by your browser. We use them for the following purposes:

• Strictly necessary cookies. These keep you signed in to the client area, maintain your shopping cart, and protect forms against cross-site request forgery. The site cannot function without them.
• Analytics cookies. Google Analytics 4 (measurement ID G-BRP00LF98N) tells us which pages are read and how visitors find us. We use it in aggregate; we do not use it to identify individual visitors.
• Security. Google reCAPTCHA v3 helps us tell real visitors from automated abuse on our forms. Cloudflare sets cookies to route traffic and mitigate attacks.

You can block or delete cookies in your browser settings. Blocking strictly necessary cookies will prevent the client area and checkout from working. You can opt out of Google Analytics entirely using Google's browser opt-out add-on.

We do not run advertising or retargeting pixels on this website.

5. Third-Party Services

We use a small number of established providers to run our business. Each receives only the information it needs, and each is bound by its own privacy commitments.

• Stripe and PayPal — payment processing
• Google Analytics — website usage measurement
• Google reCAPTCHA — form abuse prevention
• Cloudflare — content delivery, DNS, and attack mitigation
• Our data centre and infrastructure providers — server hosting for this website and the systems that run our clients' services
• Fastmail — delivery of our outgoing email

We do not sell, rent, or trade your personal information, and we do not share it with third parties for their own marketing.

6. How We Share Information

We disclose personal information only in these circumstances:

• Service providers. The providers listed in section 5, acting on our instructions.
• With your direction. For example, when you ask us to work with your domain registrar or a third-party developer on your behalf.
• Legal requirement. Where we are required to disclose information by law, subpoena, or court order, or to protect our legal rights.
• Business transfer. If our business is sold or merged, client records may transfer as part of that transaction. We would notify affected clients beforehand.

We do not hand your website content or account data to anyone else without your instruction, and we do not use your project work in our portfolio without asking first.

7. Data Retention

We keep personal information only as long as it serves the purpose it was collected for, or as long as the law requires:

• Enquiries that do not become projects — up to 24 months, then deleted.
• Client accounts and support history — for the life of the account and 30 days after termination, so you can retrieve your data.
• Invoices and payment records — seven years, as required by Canadian tax law.
• Server and security logs — rotated regularly and retained no longer than needed for security and troubleshooting.

8. Security

We protect personal information with measures appropriate to its sensitivity, including encryption in transit (HTTPS on every page), access controls and two-factor authentication on administrative systems, regular patching, and routine backups.

No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. If a breach occurs that creates a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by law.

9. Your Privacy Rights

Under Canadian privacy law you have the right to:

• Access the personal information we hold about you, and be told how it has been used and to whom it has been disclosed
• Correct information that is inaccurate or incomplete
• Withdraw consent to optional processing, subject to legal and contractual restrictions
• Request deletion of information we no longer need to keep
• Ask questions about this policy or our handling of your information

To exercise any of these rights, contact us. We will respond within 30 days. We may need to verify your identity before releasing information.

If you are not satisfied with our response, you may bring a complaint to the Office of the Privacy Commissioner of Canada.

10. Children's Privacy

Our services are intended for businesses and are not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

11. Data Stored Outside Canada

Some of the providers listed in section 5 store or process data outside Canada, primarily in the United States. While information is in another country, it may be accessible to the courts and law enforcement of that country under its laws. We select providers that offer recognised contractual protections for personal information.

12. Changes to This Policy

We may update this policy as our services or legal obligations change. The version published on this page is always the current one. If we make a significant change affecting how we use your personal information, we will notify active clients by email before it takes effect.

13. Contact Us

If you have questions about this Privacy Policy, want to access or correct your information, or wish to make a privacy complaint, please contact us. Privacy enquiries are handled by the owner of Ambrite Web Services.

You may also wish to read our Terms of Service.