1. Scope and responsibility
This policy applies to the Ktisis Arc website, project brief form, and related email communications. Ktisis Arc is an independent software studio based in Vancouver, British Columbia.
Ktisis Arc is responsible for personal information under its control. Questions and privacy requests can be sent to the privacy contact at [email protected].
2. Information collected
Information is collected when you choose to send a project brief or contact the studio. Depending on what you provide, this may include:
- Your name, email address, and optional phone number.
- Your business name, current website, and a reference website you like.
- Project type, goals, timing, budget range, and the details written in your message.
- How you heard about Ktisis Arc.
- Messages, attachments, and other information sent by email.
When the site is requested, hosting and security providers may receive standard technical information such as an IP address, browser and device details, timestamps, request data, and security signals. The home page uses browser session storage only to remember whether the entrance animation has played in the current tab.
This site uses Cloudflare Web Analytics to understand aggregate visits and page views, referring sites, general country, device type, browser, operating system, and page performance including Core Web Vitals. It is configured not to inject the analytics beacon for visitors in the European Union.
Cloudflare states that Web Analytics does not use cookies or localStorage to collect usage metrics and does not collect or use visitors’ personal data. The site does not use advertising trackers or a marketing email signup.
3. How information is used
Personal information is used only for purposes a reasonable person would consider appropriate in the circumstances, including to:
- Receive, assess, and respond to a project inquiry.
- Determine project fit and prepare a proposal or next step.
- Communicate about requested or contracted work.
- Operate, protect, troubleshoot, and improve the website and form.
- Meet legal, accounting, security, and record keeping obligations.
Information is not sold or rented. It is not used to add you to an unrelated marketing list.
4. Service providers and disclosure
The website uses a small number of service providers for functions visible in the current site:
- Cloudflare hosts the site, provides Turnstile spam protection on the project brief form, and provides aggregate Web Analytics and performance measurement.
- Basin receives, stores, filters, and routes project brief submissions.
- Google Fonts delivers the Inter typeface used by the site.
These providers may process information in jurisdictions outside British Columbia or Canada. Information handled there may be subject to the laws of those jurisdictions. Ktisis Arc may also disclose information where required by law, to protect legal rights or security, or to professional advisers who are bound to handle it appropriately.
Sending a project brief causes the form information you enter to be transmitted to Basin. Turnstile processes browser and security signals to help distinguish genuine visitors from automated traffic.
5. Retention and security
Information is kept only as long as reasonably necessary for the purposes described above and for applicable legal or business requirements. Where information is used to make a decision that directly affects an individual, applicable privacy law may require it to be retained for at least one year. When information is no longer needed, reasonable steps are taken to delete it or make it anonymous.
The site uses HTTPS, spam screening, and reputable service providers. Reasonable safeguards are used according to the sensitivity of the information. No online transmission or storage system can be guaranteed completely secure, so please do not send passwords, payment card details, government identifiers, health information, or other sensitive data through the project brief form.
6. Access, correction, and consent
You may ask whether Ktisis Arc holds personal information about you, request access to it, or ask for an error to be corrected. You may also withdraw consent for future use where the law allows, although this may limit the ability to respond or provide requested services.
A request may require reasonable identity verification. Some information may be withheld where permitted or required by law. If a privacy concern is not resolved directly, you may contact the Office of the Information and Privacy Commissioner for British Columbia.
7. Changes and contact
This policy may be updated when the website, service providers, or legal requirements change. The effective date at the top will be revised when a material update is published.
Privacy questions, requests, and complaints can be sent to [email protected].