Legal

Privacy Policy

This page explains what personal information WP Doctor™ collects when you visit wpdoctor.ca or send us a form, why we collect it, who processes it for us, how long we keep it, and what you can ask us to do with it. It is written for the site as it is built today; when the site changes, this page changes with it.

Last updated: [WPDOCTOR_LEGAL_REVIEW_PRIVACY]. This policy applies to wpdoctor.ca and to the forms, calendar and email addresses linked from it. It does not cover the websites of our clients, which we work on under separate agreements.

[WPDOCTOR_LEGAL_REVIEW_PRIVACY]

Who we are

WP Doctor™ is a service of Novium Systems, a trade name of MC MEDIAS LLC, 30 N Gould St STE ST R, Sheridan, WY 82801, USA. MC MEDIAS LLC is the organization responsible for the personal information described on this page.

The person in charge of the protection of personal information is [WPDOCTOR_PRIVACY_OFFICER]. You can reach them at [email protected].

We serve clients in Canada, the United States and internationally. Depending on where you are, Canada's PIPEDA, Québec's private-sector privacy Act (as amended by Law 25), or a state law such as the CCPA may apply to how we handle your information. Where these laws give you more rights than this page describes, the law prevails.

What we collect, and why

Nothing, just for visiting. Reading pages on wpdoctor.ca does not require an account and does not set analytics or marketing cookies until you choose to allow them (see "Cookies and analytics" below). Our hosting provider keeps standard server logs (IP address, time, page requested, browser) for security and troubleshooting.

The Fix My Site (triage) form. When you ask for emergency help we collect your name, email address, website URL, the problem category and urgency you select, when it started, what changed before it, whether you have your hosting login, and the free-text notes you write. If you give a phone number, it is used only to call you back about that request. We also record the page you came from and any campaign tags in the link you used, so we know which page led you to us. We use all of this to triage your request, contact you, and document what we found.

The contact form. Name, email, website URL if you give one, what the message is about, and your message. We use it to reply to you.

Booking a call. The "Book a call" button opens a scheduling calendar run by GoHighLevel. The calendar collects the details you enter there (name, email, phone, chosen time) and stores them in our customer-relationship system so the call happens and so we have a record of it.

Email updates. Both forms have an optional, unchecked box asking whether we may send you occasional email about WordPress care, security and Canadian compliance. We only send such email if you tick that box, and every message carries an unsubscribe link. Your consent, the date and time, the form it came from and the exact wording you agreed to are recorded with your submission so we can prove it if asked.

When you become a client. The information needed to do the work and to invoice you (contact details, site access you give us, findings about your site, invoices and payment records) is covered by our service agreement with you as well as by this page.

We do not sell personal information, and we do not share it with anyone for their own marketing.

Who processes it for us

We use a small number of service providers. Each one processes personal information only to provide its service to us, under its own contract and privacy terms.

Hostinger hosts wpdoctor.ca and stores form submissions in the site's database.
GoHighLevel (HighLevel Inc., United States) is our customer-relationship system. Triage and contact submissions, and calendar bookings, are copied there so we can follow up and keep a record of the relationship.
Google provides analytics (Google Analytics 4) only if you allow analytics cookies. Google Consent Mode is configured so that no analytics identifier is set before you choose.
CookieScript (Cookie-Script, Lithuania, EU) runs the cookie banner and stores your banner choice.
Email delivery. Form notifications and replies travel through our transactional email provider.

Some of these providers are outside Canada and outside Québec, so personal information you send us may be stored or processed in the United States or the European Union. Where the law requires it, we assess that transfer before it happens and we keep the assessment on file.

Cookies and analytics

When you first visit, a banner asks whether you allow analytics cookies. Nothing is set until you choose. Reject keeps the site fully usable; the only cookie stored is the one that remembers your choice.

Strictly necessary: the cookie that remembers your banner choice, and any cookie needed to submit a form safely (spam protection). These do not require consent.
Performance (analytics): Google Analytics 4, used to see which pages are read and how people reach them. Only with your consent.
Targeting and functionality: none at present. We do not run advertising on this site.

You can change your choice at any time with the cookie icon in the corner of the page. The banner's cookie declaration lists every cookie by name, provider and lifetime.

How long we keep it

Form submissions (triage and contact) are kept in the site's form log for 12 months from submission, then deleted automatically.
Customer-relationship records are kept for as long as we have an active relationship with you and for the period after it that tax and contract law require. If you never become a client, we delete the record when it is no longer needed for the request you made.
Consent records for email updates are kept for as long as you are subscribed and for the period after you unsubscribe that we need to prove the consent existed.
Server logs are kept by our hosting provider for its standard rotation period.
Analytics data follows the retention period set in Google Analytics (currently the shortest option Google offers).

Your rights

Depending on where you live, you can ask us to:

tell you what personal information we hold about you and give you a copy;
correct it if it is wrong or incomplete;
delete it, where we are not required to keep it;
withdraw a consent you gave us, for example for email updates, with effect for the future;
explain how a decision about you was made, if it was made by automated means (we do not currently make any such decisions);
stop using it for a purpose you object to.

Write to [email protected]. We will confirm your identity in proportion to the sensitivity of the request, answer within the time the applicable law allows (30 days under PIPEDA and under Québec's Act), and tell you if we cannot do what you ask and why.

If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada, to the Commission d'accès à l'information du Québec, or to the privacy regulator where you live.

How we protect it

Access to form submissions and customer records is limited to the people who need it to do the work, behind individual accounts with two-factor authentication. Form submissions are not sent by email in full; notifications carry the fields needed to act and a link to the record. We ask you not to send passwords through our forms; if you need to share site access with us, we tell you how to do it safely once we are in contact.

If a confidentiality incident involving your personal information presents a risk of serious harm to you, we will notify you and the relevant regulator as the law requires, and we keep a register of incidents.

Children

wpdoctor.ca is a business service and is not directed at children. We do not knowingly collect personal information from anyone under 14.

Changes to this page

When we change how we handle personal information, we update this page and the date at the top. Material changes to what we collect or who processes it are announced on this page before they take effect.

Questions about your information?

Write to [email protected]. A person answers, and requests about your own data are handled before anything else in the inbox.