Privacy Policy

Rocks Media is a web design and development studio based in Ontario, Canada. We build custom websites for small and medium-sized businesses across Canada and the United States. This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website or contact us about our services.

This policy is written in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, U.S. state privacy laws including the California Consumer Privacy Act (CCPA).

We only collect information you voluntarily provide to us. When you submit our contact form, we collect:

• Your full name
• Your phone number
• Your email address
• Your type of business
• Your preferred time to be contacted
• Your preferred consultation dates

We do not collect payment information directly — any payments are processed through secure third-party payment processors who have their own privacy policies.

We do not automatically collect cookies, tracking pixels, or analytics data beyond what your browser sends as standard HTTP traffic (e.g., IP address, browser type). We do not use advertising trackers or sell your data to any third party.

We use the information you provide solely to:

• Respond to your inquiry about our web design services
• Schedule and conduct a free consultation with you
• Send you a confirmation email acknowledging your request
• Communicate with you throughout your project
• Follow up after your project is complete, if applicable

We will never use your information to send unsolicited marketing emails, sell leads, or contact you for any purpose unrelated to the services you asked about.

We do not sell, rent, or trade your personal information. We may share your information only in the following limited circumstances:

• EmailJS — We use EmailJS to deliver contact form submissions to our inbox. EmailJS processes your name, email, phone, and message content as part of sending the email. EmailJS is GDPR-compliant and acts as a data processor on our behalf.
• Legal obligations — We may disclose your information if required by law, court order, or government authority.

We retain your contact information only as long as necessary to fulfill the purpose for which it was collected — typically for the duration of your project and a reasonable period afterward for follow-up or legal record-keeping purposes (generally no longer than 2 years).

If you would like your information deleted sooner, you may contact us at any time using the details in Section 9.

As a Canadian resident, you have the right to:

• Know what personal information we hold about you
• Request access to your personal information
• Request corrections to inaccurate information
• Withdraw consent to our use of your information (subject to legal limitations)
• Request deletion of your personal information
• File a complaint with the Office of the Privacy Commissioner of Canada

To exercise any of these rights, contact us directly at [email protected]. We will respond within 30 days.

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to request deletion, and the right to opt out of the sale of personal information.

We do not sell personal information. To submit a privacy request, contact us at [email protected].

Residents of other U.S. states with applicable privacy laws (Virginia, Colorado, Connecticut, etc.) may also contact us to exercise their rights under those laws.

We take reasonable precautions to protect your personal information. Our website is served over HTTPS (SSL/TLS encryption). Contact form data is transmitted securely through EmailJS to our private inbox and is not stored on any public server.

No method of transmission over the internet is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of our website after changes are posted constitutes your acceptance of the updated policy.