Perfect Blend Marketing & Design Inc.
Privacy Policy
- Updated October 23, 2026
- PIPEDA
- CASL
- We never sell your data
What personal information we collect when you visit perfectblend.biz, use the client area, host a website with us or work with us on a project; why we collect it; who we share it with; and the choices you have. We follow Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada’s Anti-Spam Legislation (CASL).
On this page
The short version
We collect what the work needs
Your contact and billing details, what you send us, and the records our systems keep to run and protect your services.
Sign-up checks run on our own server
To stop automated sign-ups we check a few technical details. The lists and the checks are ours, not a third party’s.
We never see your card number
Stripe handles cards. We keep the card type, last four digits, expiry and a few safety facts Stripe gives us.
You stay in control
See, correct, download or delete your information. Two-step sign in is available on every account.
Who is responsible
Perfect Blend Marketing & Design Inc., 123 Lunney Crescent, Bowmanville, Ontario L1C 5N9, Canada, is responsible for your personal information under this policy. Jordon Mills is our privacy officer and can be reached at info@perfectblend.biz or +1 (905) 926-3516.
What we collect
You give us
Your details
Name, company, email, phone and billing address when you create an account, order, open a ticket or fill in a form. Your messages, project files and media, and what you keep in the client area such as team members and Password Vault notes.
Our systems record
How the services are used
Your IP address, browser and device type, pages visited and times. The time and IP address of each sign in, which you can see yourself. In the Client Tools, what was done and by whom, kept in an activity history you can see.
When you sign up. To keep automated and fraudulent sign-ups off our servers, our own systems check each new sign-up before a hosting account is built. They record:
- your IP address and whether it belongs to a data centre, VPN or Tor network (checked against lists we keep on our own server);
- how many sign-ups and attempts came from the same address or network;
- how long the form took to fill in, and whether a small puzzle your browser solves in the background was completed (this sets no cookie and sends nothing to anyone else);
- simple patterns in the email address and name, such as copies of one address made with dots or a plus sign;
- facts our payment processor gives us about the saved card: its country, whether it is prepaid, whether the security code check passed, and a fingerprint that lets us recognise the same card on another account. Never the card number.
These details produce a score that decides one thing only: whether a hosting account is built at once, after a short wait, or not at all. A person at Perfect Blend can review and reverse any decision, and you can ask us to.
Payment details. Card payments are handled by Stripe. We never see or store your full card number; we keep the card type, last four digits and expiry date so you can recognise the card, and a token that lets Stripe charge renewals you have agreed to.
Your website and email. If you host with us, your website’s files, database and email live on our server. We do not read them. Our systems process them only to serve, back up, scan for malware, update and support your website, and our team looks at them only when you ask for help or when a problem on the server requires it.
Domains. To register a domain, the registry requires the registrant’s name, address, email and phone number. Where the domain supports it, we turn on ID protection so those details are not shown in public records.
Why we use it
- To provide what you bought: set up and run your hosting, register your domains, do your project, answer your tickets and change requests, and bill you for it.
- To keep accounts and websites safe: confirming email addresses, checking new sign-ups, verifying sign ins, blocking attacks, scanning for malware, taking backups, and telling you about security events that affect you.
- To tell you about your services: confirmations, renewal notices, invoices, payment reminders, maintenance notices and changes to our terms. You cannot opt out of these while you have a service with us, because you need them.
- To improve our services: understanding how our websites and tools are used, in aggregate wherever possible.
- To send news and offers, only if you have agreed. Every such email has an unsubscribe link, and we honour it within 10 business days as CASL requires.
- To meet legal obligations: tax and accounting records, and responding to lawful requests.
We rely on your consent, on the contract between us, and on our legitimate business needs, as PIPEDA allows. We do not sell personal information. The only automated decision we make is the sign-up check described above, and a person reviews it whenever you ask.
Who we share it with
We share personal information only with companies that help us provide our services, only what they need, and under their own privacy commitments.
| Who | What they do | What they receive |
|---|---|---|
| Stripe | Card payments and card safety checks | Name, email, billing address and card details, entered directly with Stripe |
| NameSilo | Our domain registrar | Registrant details for domains you register |
| Website statistics, and reCAPTCHA on forms that still use it | Anonymised visit statistics; reCAPTCHA signals from the form | |
| Elementor | Premium plugin licensing | Your website’s address when a license is activated on it |
| Pushover | Phone alerts for our own team | Short alerts such as a ticket title and your name |
| Our data centre | Houses the server we lease | Physical and network access to hardware, no authorised access to your data |
Our own email server sends the messages you receive from us, so their content does not pass through a marketing company. We may also share information when the law requires it, to protect someone’s safety, or as part of a sale of our business, in which case the buyer takes on this policy. We tell you about a legal request for your information unless we are not allowed to.
Where your information is kept
Our server is in North America and our business records are kept in Canada. Some of the companies listed above process information in the United States, where it may be reached by the authorities there under American law. We choose providers with strong privacy and security commitments and share the minimum they need.
How long we keep it
| Information | How long |
|---|---|
| Account, order and invoice records | 7 years after the last transaction, as Canadian tax law requires |
| Website files, databases, email and backups | While you host with us, then 30 days after your plan ends. Daily backups are kept 30 days. |
| Sign-up checks for active accounts | With your account record, for as long as the account exists |
| Sign-ups never confirmed | Closed after 7 days and deleted after 30. A short record (email, IP address and reason) is kept 12 months to stop repeat abuse. |
| Rate-limit records of sign-up attempts | 30 days |
| Support tickets and change requests | 3 years after they are closed |
| Activity and sign-in history in the Client Tools | 12 months |
| Website analytics | 26 months, in aggregate |
| Marketing consent and unsubscribe records | While we send marketing, plus 3 years |
| Project files | 1 year after the project ends, then offered to you and deleted |
Cookies
Needed to work
No consent needed
A session cookie that keeps you signed in, cookies that remember your currency and language, and the security cookies used by reCAPTCHA where a form still uses it.
Statistics
You can block these
Google Analytics cookies that show which pages are useful. IP addresses are anonymised, and Google offers an opt-out add-on.
Your preferences
Stay in your browser
Small settings our pages save in your browser, such as the currency you chose to see prices in. They never leave your browser.
We do not use advertising cookies or sell browsing data. Your browser lets you delete or block cookies at any time; blocking the ones needed to work will stop you from signing in.
How we protect it
Our websites and client area use encryption in transit (HTTPS). Two-step sign in with an authenticator app is available on every client account under Account, then Security. Passwords are stored only as salted hashes, and anything you keep in the Password Vault is encrypted. The server is protected by a firewall, weekly malware scans, regular security updates and daily backups, and only our team has administrative access, through individual accounts. Card details never touch our server.
If something goes wrong
No system is perfectly secure. If we discover a breach that creates a real risk of significant harm to you, we tell you and the Office of the Privacy Commissioner of Canada as soon as possible, as PIPEDA requires, along with what we are doing about it.
Your choices and rights
See it
Ask for a copy of the personal information we hold about you. We answer within 30 days.
Correct it
Change most details yourself in the client area, or write to us for anything else.
Take it with you
Download your website, database and email from cPanel Tools, and ask us for your account data in a common format.
Withdraw consent
Unsubscribe with the link in any marketing email. Withdrawing consent we need to provide a service may mean ending that service.
Delete it
Ask us to delete your information. If we must keep some for legal, tax or security reasons, we tell you what and why.
Complain
Write to our privacy officer first. You can also complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.
Children
Our services are for businesses and adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, write to us and we will delete it.
Changes to this policy
When we change this policy we post the new version here with its date. If a change affects how we use information we already hold about you, we email you before it takes effect.
Contact
- Company
- Perfect Blend Marketing & Design Inc.
- Privacy officer
- Jordon Mills
- Address
- 123 Lunney Crescent, Bowmanville, Ontario L1C 5N9, Canada
- Phone
- +1 (905) 926-3516
A question about your information?
Write to our privacy officer. We answer every request within 30 days, and most within a few days.
