Privacy notice — Northstar Digital

Plain version. If you use this site's contact form, we store your name, business name, email address, optional phone number, the service and budget you select, and the message you write. We use it only to reply to you. We do not sell it, we do not share it with advertisers, and you can ask us to delete it at any time. We do not send an automatic confirmation email.

Who we are

Northstar Digital is a web design and digital solutions business based in Ontario, Canada.

What we collect

We collect only what you choose to send us. If you use the contact form, that means:

Your name: So we know who we are replying to.
Business name: Optional. It helps us understand your context.
Email address: Required, because we reply by email.
Phone number: Optional. Only used if you ask us to call.
Service and budget: The options you choose from the dropdown menus. Both are optional apart from the service.
Your message: The description you write in the form.
Technical details: When you submit the form we store a keyed one-way hash of your network address, never the address itself, so we can enforce rate limits without keeping a readable record of who sent what. We also store a keyed hash of your email address and message with the enquiry; it is used only to spot duplicate submissions within 24 hours. Cloudflare, our hosting provider, processes standard request data, which may include your network address, in order to deliver the site.

Why we collect it

To reply to your enquiry and answer your questions.
To prepare a written scope and price, if you ask us to.
To keep our records of conversations with you.
To protect the site from spam and automated abuse.

We do not use your details for marketing, and we do not run a newsletter or add you to a mailing list.

How long we keep it

Enquiries that do not become projects are deleted within 12 months. If you become a client, we keep the project and accounting record for as long as we work together and for at least six years afterwards, because Canadian tax rules require business records to be kept for that period. If you ask us to delete an enquiry sooner, we will, unless we are legally required to keep it.

Who else can see it

Our website runs on Cloudflare Pages with a Cloudflare D1 database, so Cloudflare processes the data on our behalf as our hosting provider. Only the site owner can sign in to the enquiry system, and the sign-in area is password-protected. If you email us directly, your message is handled by our email provider, Google (Gmail).

We do not use analytics, advertising or social media tracking, and we do not sell your details. We will not disclose them to anyone else unless the law requires it or you ask us to.

Where it is stored

Cloudflare runs a global network, and data may be processed or stored outside Canada, including in the United States. We do not control which country Cloudflare uses for a given request. You can read more in Cloudflare's privacy policy.

Cookies

This website sets one cookie of its own, and only if the owner signs in. It is called ns_session, it is marked HttpOnly and SameSite=Strict, and it is deleted when the owner signs out. It contains a random session identifier and nothing else. The session record also stores a hashed network address and browser user-agent string. It stops working at sign-out, after one hour without activity, or after 12 hours at most.

Cloudflare may also set short-lived security cookies while serving the site. We do not control or read those, and they are not used by us for tracking. If you never sign in, this site sets no cookie of its own.

Your choices

Ask us what we hold about you, and we will tell you.
Ask us to correct anything that is wrong.
Ask us to delete your details, and we will do it.
Withdraw your consent to be contacted, and we will stop.

Email northstardigital22@gmail.com and we will action it without fuss. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada.

Security

The site is served over HTTPS only. Passwords are never stored in readable form, and the owner session cookie is protected with the flags described above. Enquiries are held in a private database that is not publicly readable.

Changes to this notice

If we change how we handle your information, we will update this page and change the date below.

Last updated: 22 October 2026