Privacy policy

Baraworks is a web development studio operated as a sole proprietorship by Paul Krishnamurthy in Windsor, Ontario, Canada. For anything in this policy, including a request about your own information, write to hello@baraworks.com.

We handle personal information under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

When you submit the form on our contact page, we receive whatever you put in it:

• Your name and email address, which are required so we can reply.
• Your company name, your timeline, and the services you selected, all optional.
• The project details you write in the message field.

Our hosting provider also keeps standard server logs for every request to the site - IP address, browser user agent, the page requested, and a timestamp. These are generated automatically by the infrastructure, not by us, and we do not connect them to form submissions.

That is the complete list. There is no account system, no newsletter signup, and no payment processing on this site.

We use what you send to read your enquiry, reply to it, and continue the conversation if it turns into a project. That is the only purpose. We do not use it to build a profile of you, we do not add you to a mailing list, and we do not make automated decisions about you.

• We do not sell, rent, or trade your personal information to anyone, for any reason.
• We do not run analytics, tracking pixels, session recording, or advertising on this site.
• We do not set cookies. Nothing here needs them, so nothing here uses them.
• We do not load fonts or other assets from third-party servers at page load - the typefaces are bundled with the site, so your browser never contacts an outside host to render it.

Two service providers process data on our behalf, both under their own privacy commitments, and both only to the extent needed to run the site:

• Vercel hosts the site and generates the server logs described above.
• Resend delivers your contact-form submission to our inbox as an email.

Both are based in the United States, which means your information is stored and processed outside Canada and may be accessible to foreign authorities under the laws of that country. If that is a concern, email us directly instead of using the form.

We may also disclose information where we are legally required to, such as in response to a valid court order.

Enquiry emails stay in our inbox for as long as they are useful - typically for the life of the working relationship, and for a reasonable period afterwards so we can pick up where a past conversation left off. Ask us to delete yours and we will. Server logs are retained on our hosting provider's own short rolling schedule and then discarded.

The site is served entirely over HTTPS, form submissions travel encrypted, and access to our email is protected by strong authentication. No system is perfectly secure, so please do not send passwords, financial details, health information, or anything else genuinely sensitive through the contact form. If you need to share something like that for a project, ask us and we will arrange a better channel.

Under PIPEDA you can ask us to:

• Tell you what personal information of yours we hold, and how we have used it.
• Correct anything that is wrong.
• Delete what we hold, where we have no obligation to keep it.
• Stop contacting you, at any time.

Email hello@baraworks.com and we will respond within 30 days. We are a one-person studio, so the request reaches the person who can actually action it. If you are not satisfied with how we handle it, you can complain to the Office of the Privacy Commissioner of Canada.

This site is aimed at businesses and is not directed at children. We do not knowingly collect information from anyone under 13.

If we change how we handle personal information, we will update this page and the date at the top of it. Material changes will be described here rather than quietly folded in.