Privacy Policy
This policy explains how Quote Before Dark ("we", "us") handles personal information collected through quotebeforedark.com. We are based in Ontario, Canada, and handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). Where the GDPR or UK GDPR applies to you, we also honour the rights described in section 6.
1. What we collect
| Information | Why we have it | Where it comes from |
|---|---|---|
| Name and email address | To deliver your files, send your receipt, and provide support | You, at checkout |
| Purchase records — what you bought, when, amount, currency | Order fulfillment, refunds, tax and accounting obligations | Stripe |
| Partial card details (card brand, last four digits, expiry) | To identify a transaction for refunds and support | Stripe |
| Billing country / region and tax status | To apply correct sales tax and meet tax reporting rules | Stripe |
| Correspondence you send us | To answer you and keep a record of the issue | You, by email |
| Intake form contents (Done-For-You customers only) | To customize your templates as purchased | You, if you buy that service |
We never receive your full card number, CVC, or bank credentials. Those go directly to Stripe, our payment processor, and are handled under their security standards. We could not disclose them if we wanted to, because we never hold them.
Done-For-You intake forms may contain your business's wage rates, overhead, and margin targets. This is commercially sensitive information. We use it solely to configure your calculator, we don't share it with anyone, and we delete the intake form once your setup is delivered and you've confirmed it works.
2. What we don't do
- We do not sell, rent, or trade your personal information. Not to advertisers, not to data brokers, not to anyone.
- We do not run advertising trackers, retargeting pixels, or third-party ad networks on this site.
- We do not require an account, so we don't hold a password of yours.
- We do not knowingly collect information from anyone under 18. This is a product for business owners.
3. Cookies and analytics
The pages on this site do not set advertising or tracking cookies. Stripe's checkout pages set cookies necessary to process your payment securely and prevent fraud — those are governed by Stripe's privacy policy.
Our host, Cloudflare, processes standard server request data (IP address, browser type, pages requested, timestamps) to serve the site and protect it from attack. We may use privacy-respecting, aggregate analytics to see which pages perform; if we do, it will not identify you individually.
4. Email from us
When you buy, we send transactional email: your receipt, your download links, and anything needed to deliver what you paid for. You can't opt out of these while an order is active, because they are the product delivery.
We may also send occasional emails about our other products and useful material for contractors. Under Canada's anti-spam legislation (CASL), we send these on the basis of your existing business relationship with us as a customer, or on your express consent. Every one of these has a working unsubscribe link, and unsubscribing takes effect promptly and never affects your access to files you've bought.
5. Who we share information with
Only service providers who need it to run the business, each under their own privacy obligations:
- Stripe — payment processing, receipts, refunds, fraud prevention
- Cloudflare — website hosting, security, and file delivery
- Our email provider — sending your download links and support replies
- Our accountant and, where legally required, tax authorities — sales records only
We may disclose information if required by law, a court order, or a lawful government request, or to protect our legal rights. If we're ever part of a business sale or merger, customer records may transfer to the buyer, who would remain bound by this policy.
6. Where your information is stored, and cross-border transfers
Our service providers, including Stripe and Cloudflare, operate globally and may store or process information on servers outside Canada, including in the United States and the European Union. While information is in another country, it may be accessible to that country's courts and law enforcement under that country's laws. By using the site, you understand that this transfer occurs.
7. Your rights and how to use them
You may ask us to:
- Access — tell you what personal information we hold about you
- Correct — fix anything inaccurate or incomplete
- Delete — erase your information (see the retention limit below)
- Withdraw consent — stop marketing email, or withdraw consent to processing
- Port — receive your information in a portable format (GDPR/UK GDPR)
- Object or restrict — object to certain processing (GDPR/UK GDPR)
Email support@quotebeforedark.com. We'll respond within 30 days, and we won't charge you or make it difficult. We may need to verify that the request comes from you before acting on it.
One limit worth stating honestly: tax and business law requires us to retain sales and financial records for a set period (generally six years in Canada). If you ask for deletion, we'll delete you from our email list and delete everything we're not legally required to keep, and we'll tell you plainly what's being retained and why.
If you're unhappy with how we've handled your information, you can complain to the Office of the Privacy Commissioner of Canada, or to your local supervisory authority if you're in the EU or UK.
8. How long we keep things
- Purchase and tax records: as long as tax law requires (generally six years)
- Email list membership: until you unsubscribe or ask for deletion
- Support correspondence: up to two years, then deleted
- Done-For-You intake forms: deleted once your setup is delivered and confirmed
9. Security
We use HTTPS across the site, keep customer data in access-controlled accounts, limit who can see it to those who need to, and deliberately avoid collecting information we don't need — the strongest protection for your card number is that we never have it. No system is perfectly secure, and we can't guarantee absolute security. If a breach ever affects your information in a way that creates a real risk of significant harm, we will notify you and the Privacy Commissioner as PIPEDA requires.
10. Changes to this policy
If we change this policy, the "Last updated" date changes. For significant changes affecting how we use your information, we'll notify customers by email.
11. Contact
Privacy questions, requests, and complaints:
Email: support@quotebeforedark.com