Privacy Policy

Effective date: October 14, 2026

Business: Northwick Automation, a sole proprietorship based in Sarnia, Ontario, Canada

This policy explains what personal information we collect, why, and how we protect it. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and its 10 fair information principles.

1. Who is responsible

Our Privacy Officer is the owner of Northwick Automation. Contact: [email protected]. They are accountable for how we handle personal information.

2. What we collect

Clients: business name, contact details, billing details, website content and logins you give us to do the work.
Email: when you email us at [email protected], your name, email address, anything else you include (such as your business name, phone number or message), and our replies.
Contact form: when you use the form on our website, your name, business name (optional), email address and message. We use these only to reply to you. The form also has a hidden anti-spam field; we don't store your IP address, though our host processes it briefly to block abuse.
Technical data: IP address, browser type and similar data processed by our host (Cloudflare) for security and delivery. We do not use analytics.

We do not collect more than we need, and we do not sell personal information.

3. Why we use it

To answer your question or quote request.
To build, run and bill for our services.
To keep our sites secure and working.
To send business emails only as allowed by Canada's anti-spam law (see our Anti-Spam Policy).

We use your information only for these purposes unless you agree to something new or the law requires it.

4. Consent

By emailing us or using our contact form, you agree to us using the information you give to reply to you and to deal with your request. You can withdraw consent at any time by emailing us, subject to legal or contract limits. Withdrawing may mean we can't help with your request.

5. Service providers we use

We share information only with providers that help us run the business, under contract or terms that require them to protect it: - Cloudflare, Inc. — website hosting, security, and email routing (forwarding mail sent to [email protected]). - Wave Financial — invoicing and payments. - Brevo — delivers messages sent through our contact form to our inbox by email.

Some providers store or process data outside Canada, including in the United States. There, it may be accessible to courts and authorities under local law.

6. How long we keep it

Email and contact-form enquiries: up to 12 months after the last contact, unless you become a client.
Client records and invoices: as long as you're a client, and then as long as tax law requires (generally 6 years in Canada).
After that, we delete or anonymize it.

7. How we protect it

We use reasonable safeguards: encrypted (HTTPS) connections, accounts with strong passwords and two-factor authentication, and access limited to people who need it. No system is perfectly secure. If a breach creates a real risk of significant harm, we will notify affected people and the Privacy Commissioner as PIPEDA requires.

8. Your rights

You can ask to see the personal information we hold about you, ask how it was used and shared, and ask us to correct it. Email [email protected]. We'll respond within 30 days and may need to confirm your identity. Access is at no cost in most cases.

9. Complaints

Please contact our Privacy Officer first. If you're not satisfied, you can complain to the Office of the Privacy Commissioner of Canada: priv.gc.ca, 1-800-282-1376.

10. Changes

We may update this policy and will post the new version here with a new effective date.