Identity and contact

Open Street Media Inc., doing business as Spartan Atlas Web Design, is responsible for the personal information collected through this site. Privacy enquiries and requests go to privacy@spartanatlas.com.

Information you provide

The contact forms on this site collect your email address. They optionally collect your name, phone number, the address of your current website, and, where a message field is offered, whatever you write in it. A form sent from a demo also records the business the demo was built for, the address of the demo page, and which form was used, so an enquiry can be matched to the work it refers to. The forms on this site do not collect payment details, and no part of the site requires an account.

Payments

Invoices and care plan subscriptions are billed through Stripe. Payment is completed on a payment page Stripe provides, so card details are entered directly into Stripe's systems and are never received by this site or held on its servers. To take a payment, Stripe holds the cardholder name, email address, billing address, and card details, and reports back to us the amount, the date, whether it succeeded, and the card brand and last four digits. Stripe uses that information to process the payment, to prevent fraud, and to meet its own legal obligations, under its privacy policy. Where a care plan renews on a schedule, Stripe keeps the payment method on file until the plan is cancelled.

Usage measurement

Page views are measured with Vercel Web Analytics, which sets no cookies and reports in aggregate. It records the page viewed, the referring site, the country, and the general device and browser type. Vercel Speed Insights measures how quickly pages load, recording the page and timing figures taken from your browser. A further event records which form a submission came from and, where a submission fails, the error it failed with. None of it is linked to you as an individual.

Server logs

Submitting a form exposes your IP address to the server, which uses it to limit repeated submissions from the same source. It is held in memory and not written to a database. A submission blocked as automated or over that limit is recorded in the server log along with the IP address it came from. Those entries and the hosting provider's ordinary request logs, both of which include IP addresses, are retained for no longer than 30 days.

Purposes

Personal information collected through this site is used to reply to enquiries, to build requested demos, to prepare quotes, and to keep records of work discussed and performed. Usage measurement is used to judge which pages are working. Personal information is not sold, rented, or traded, and contacting this site does not add you to a marketing list.

Service providers

Three processors handle this data on our behalf. Their servers are located outside Canada, generally in the United States, where information can be accessible to local courts and authorities under local law.

• Vercel hosts the site and provides the usage measurement described above.
• Formspree delivers form submissions by email.
• Stripe processes invoice and care plan payments.

Google Search Console reports aggregated search statistics about the site and receives no personal information from it.

Embedded content

Demo, concept, and preview pages embed Google Maps, and some embed YouTube video. Loading one of those pages gives Google your IP address, your browser and device type, and the address of the page you are viewing, and lets Google set its own cookies in your browser. Google receives that information directly and uses it for its own purposes under its own privacy policy. Video players load only after you press play, though the still image on each video comes from Google when the page loads.

Cookies

This site sets no advertising or tracking cookies of its own. Google may set cookies through the embedded maps and video described above. Should this site begin setting cookies of its own, consent will be requested first.

Security

Traffic between your browser and spartanatlas.com is encrypted with TLS, enforced by the host on every page and every form submission. No customer database runs on this site, and nothing you submit through a form is written to one: a submission is passed straight to email and kept from there in the project records. Card details are never received by this site, and no payment credentials are stored on it. The only personal information held on the server itself is the short-lived request and rate-limiting log described above.

Accounts with our service providers, and the email account enquiries arrive in, are protected with unique passwords and two-factor authentication. Access to enquiries and project records is limited to those who need it to carry out the work, and providers are engaged only where they offer comparable protection under their own agreements. Automated and repeated form submissions are blocked before delivery. No safeguard is absolute, and a breach affecting personal information under our control is reported to the Office of the Privacy Commissioner of Canada and to those affected where it creates a real risk of significant harm.

Retention

Enquiries and project records are kept indefinitely unless you ask for them to be deleted. Records relating to paid work are kept for at least seven years to satisfy tax and business record requirements. Anything held about you is deleted on request, except where a record must be retained by law. Analytics data is aggregated and retained by the provider on a rolling basis.

Your rights

You may request a copy of the personal information held about you, request that it be corrected, or request that it be deleted. Requests go to privacy@spartanatlas.com and receive a response within 30 days.

Demo sites

Demo sites, ranging from a single page to a complete multi-page build, are made from publicly available information, such as the business's existing website, public listings, published photographs, and published customer reviews. A review is shown with the name its author published it under. A demo is published at an unlisted address, excluded from search engine indexing, and removed on request, as is any individual review shown in one.

Linked sites

The portfolio and demo sections link to client sites and third-party products that operate under their own privacy practices. This policy applies to spartanatlas.com.

Complaints

Complaints about the handling of personal information go to privacy@spartanatlas.com. If the response is unsatisfactory, the Office of the Privacy Commissioner of Canada accepts complaints at priv.gc.ca.