Privacy Policy

Last Updated: August 1, 2025

1. Introduction

Welcome to BORING STUDIO INC. ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our corporate website at https://boringstudio.ca (the "Website").

This Website serves as our corporate presence, providing information about our company, team, vision, and mission. We collect only minimal personal information necessary to respond to inquiries and improve your experience through website analytics.

Please read this Privacy Policy carefully. By accessing or using our Website, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Website.

2. Information We Collect

Information You Provide Directly

We collect information you voluntarily provide when contacting us through our Website, including:

  • Your name
  • Email address
  • Company name (if applicable)
  • Message content
  • Any other information you choose to provide in your communications

Information Collected Automatically

When you visit our Website, we automatically collect certain information through Google Analytics and server logs:

Analytics Information:

  • Pages visited and time spent on each page
  • Browser type and version
  • Operating system
  • Device type (desktop, mobile, tablet)
  • Screen resolution
  • General geographic location (city/country level based on IP address)
  • Language preference
  • Referring website
  • Date and time of visit
  • Click behavior and site navigation patterns

Technical Information:

  • IP address (anonymized)
  • Cookie identifiers
  • Log file data

Information We Do Not Collect

We want to be clear about what we do not collect:

  • We do not collect sensitive personal information (health, financial, religious, or political data)
  • We do not track individual users across websites
  • We do not sell or rent personal information to third parties
  • We do not use data for behavioral advertising
  • We do not collect payment information (our corporate website does not process transactions)

3. How We Use Your Information

We use the information we collect for the following purposes:

To Respond to Inquiries: We use contact information you provide to respond to your questions, comments, or requests for information about our company.

To Improve Our Website: We use analytics data to understand how visitors interact with our Website, identify technical issues, and improve user experience.

To Comply with Legal Obligations: We may use your information to comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

To Protect Rights and Safety: We may use information to protect the rights, property, or safety of our company, our users, or others.

4. Legal Basis for Processing (For EU/UK Visitors)

If you are visiting our Website from the European Union or United Kingdom, we process your personal information based on the following legal grounds:

  • Consent: For analytics cookies, we process data based on your consent, which you can withdraw at any time
  • Legitimate Interests: For responding to inquiries and improving our Website, based on our legitimate interest in operating an effective corporate website
  • Legal Obligations: When necessary to comply with applicable laws

5. Information Sharing and Disclosure

We share your information only in the following circumstances:

Service Providers: We share information with third-party service providers who assist us in operating our Website:

  • Google LLC (for Google Analytics) - data is processed according to Google's privacy policy and may be stored on servers in the United States and other countries

Legal Requirements: We may disclose information if required by law, court order, or other legal processes, or if we believe disclosure is necessary to protect our rights, property, or safety.

Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

With Your Consent: We may share your information for other purposes with your explicit consent.

6. International Data Transfers

Our company is based in British Columbia, Canada. If you access our Website from outside Canada, please be aware that your information may be transferred to, stored, and processed in Canada and other countries where Google maintains servers.

Canada is recognized by the European Commission as providing adequate data protection. For transfers to other countries, we rely on appropriate safeguards such as standard contractual clauses or other lawful transfer mechanisms.

7. Cookies and Tracking Technologies

What Are Cookies?

Cookies are small text files placed on your device when you visit a website. We use cookies solely for analytics purposes through Google Analytics.

Cookies We Use

  • Essential Cookies: Required for basic Website functionality (session management)
  • Analytics Cookies: Google Analytics cookies that help us understand Website usage:
    • _ga: Distinguishes unique users (expires after 2 years)
    • _gid: Distinguishes unique users (expires after 24 hours)
    • _gat: Limits request rate (expires after 1 minute)

Managing Cookies

  • For EU/UK Visitors: We will ask for your consent before placing any analytics cookies. You can accept or reject cookies through our consent banner.
  • For All Visitors: You can control cookies through your browser settings:
    • Most browsers allow you to refuse or delete cookies
    • You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on
    • You can manage your preferences through our cookie settings (available in the Website footer)

Please note that disabling cookies may affect the functionality of our Website.

8. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

Rights for All Users

  • Access: Request information about what personal data we hold about you
  • Correction: Request correction of inaccurate personal information
  • Contact Preferences: Opt out of receiving communications from us

Additional Rights for EU/UK Residents (GDPR)

  • Erasure: Request deletion of your personal information
  • Restriction: Request restriction of processing your personal information
  • Portability: Receive your personal information in a portable format
  • Objection: Object to processing based on legitimate interests
  • Automated Decision-Making: Right not to be subject to automated decision-making (we do not engage in this)
  • Withdraw Consent: Withdraw consent for cookie-based tracking at any time
  • Lodge a Complaint: File a complaint with your local data protection authority

Additional Rights for California Residents (CCPA/CPRA)

  • Know: Right to know what personal information we collect, use, disclose, or sell
  • Delete: Request deletion of personal information
  • Opt-Out: Opt out of the sale or sharing of personal information (we do not sell or share personal information)
  • Correct: Request correction of inaccurate personal information
  • Limit Use: Limit use and disclosure of sensitive personal information (we do not collect sensitive information)
  • Non-Discrimination: Right not to receive discriminatory treatment for exercising privacy rights

Exercising Your Rights

To exercise any of these rights, please contact us using the information in the "Contact Us" section below. We will respond to your request within the timeframe required by applicable law (generally within 30 days).

We may need to verify your identity before processing your request. We will not discriminate against you for exercising your privacy rights.

9. Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

  • Contact Information: We retain inquiry-related information for 2 years or as required for legal obligations
  • Analytics Data: Google Analytics data is automatically deleted after 14 months
  • Cookie Data: Session cookies expire when you close your browser; persistent cookies expire according to their set duration

10. Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Secure Socket Layer (SSL) encryption for data transmission
  • Regular security assessments
  • Access controls limiting who can view personal information
  • Security training for personnel with access to personal information

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

11. Children's Privacy

Our Website is not intended for children under the age of 16 (or 13 in some jurisdictions). We do not knowingly collect personal information from children. If you are a parent or guardian and believe we have collected information from your child, please contact us immediately.

12. Links to Other Websites

Our Website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any website you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by updating the "Last Updated" date and, where appropriate, providing additional notice on our Website.

Your continued use of our Website after such modifications constitutes your acknowledgment and acceptance of the updated Privacy Policy.

14. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Data Protection Officer

Under certain regulations, we may be required to appoint a Data Protection Officer. If you need to contact our DPO, please use the email address above and mark your communication "Attention: DPO".

EU Representative

[To be appointed if required under GDPR Article 27]

Supervisory Authorities

You have the right to lodge a complaint with a supervisory authority:

  • Canada: Office of the Privacy Commissioner of Canada (www.priv.gc.ca)
  • British Columbia: Office of the Information and Privacy Commissioner for BC (www.oipc.bc.ca)
  • EU: Your local data protection authority
  • UK: Information Commissioner's Office (ico.org.uk)
  • California: California Privacy Protection Agency (cppa.ca.gov)