Privacy Policy

Last updated: July 9, 2026

This Privacy Policy describes how GridFlow Design (GridFlow Design Limited) collects, uses, and protects your personal information. We are committed to protecting your privacy and handling your data responsibly and in accordance with applicable data protection laws.

Who We Are (Data Controller)

We operate a responsive design and mobile-first development learning platform serving Toronto-based web designers and developers. We act as the data controller for any personal information you provide through our website and services. Our commitment is to provide transparent information about how we process your data.

Information We Collect

We collect information in several ways to provide and improve our services:

• Contact Form Data: When you contact us, we collect your name, email address, phone number, and message content.
• Account Information: If you register for courses or services, we collect registration details including name, email, and profile information.
• Usage Data: We collect information about how you interact with our website, including pages visited, time spent, and browsing patterns.
• Cookie Data: We use cookies to enhance your browsing experience and understand site usage patterns.
• Device Information: We collect basic device and browser information to optimize our responsive design.

Legal Basis for Processing

We process your personal information based on the following legal grounds: Your Consent: When you submit contact forms or create accounts, you consent to us processing your information. Legitimate Interest: We process usage data and cookies to improve our services, understand user behavior, and enhance site performance. Legal Obligation: We may process data when required by Canadian law or to comply with regulatory requirements. Contract Performance: When you enroll in courses, we process your data to provide the services you've requested.

How We Use Your Information

We use the information we collect for specific, legitimate purposes. We provide and deliver our courses, services, and educational content. We respond to your inquiries and provide customer support. We improve our website functionality and optimize the responsive design experience across all devices. We send you updates about our services, course materials, and relevant educational content (only with your consent). We analyze user behavior to enhance our platform's usability and performance. We protect against fraud and ensure the security of our systems.

Data Retention Periods

We retain your personal information only as long as necessary to fulfill the purposes for which it was collected:

• Contact Form Submissions: We retain contact messages and associated personal data for up to 24 months from the date of your last interaction with us.
• Account and Course Data: If you register for courses, we retain your account information for 36 months after course completion or account closure.
• Cookies and Analytics Data: Tracking cookies and analytics information are retained for up to 14 months.
• Server Logs: Technical server logs containing IP addresses are retained for up to 12 months.
• Email Communications: We retain email correspondence for up to 24 months unless you request deletion sooner.

Your Privacy Rights

Under Canadian privacy laws, you have important rights regarding your personal information. You have the right to access your personal data and receive a copy of the information we hold about you. You can request correction of inaccurate or incomplete information. You have the right to request deletion of your personal data, subject to legal retention requirements. You can withdraw consent at any time for uses based on your consent. You have the right to restrict or object to certain processing activities. You may request to receive your data in a portable format. To exercise any of these rights, please contact us with your request. We will respond within 30 days of receiving your request.

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our website. Cookies are small text files stored on your device that help us remember your preferences and understand how you use our site. We use essential cookies necessary for basic website functionality. We use analytical cookies to track site usage and improve performance. We use preference cookies to remember your settings. You can control cookie settings through your browser preferences. Refusing non-essential cookies will not prevent you from accessing our core services, though some features may be limited.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. We use secure data transmission protocols, regular security assessments, and limited access controls. However, no security system is completely impenetrable. We cannot guarantee absolute security of your data transmitted over the internet. You are responsible for maintaining the confidentiality of any passwords or account credentials.

Third-Party Sharing

We do not sell your personal information to third parties. We may share your data with service providers who assist us in operating our website and delivering our services, subject to strict confidentiality agreements. We may disclose information when required by law, to comply with legal processes, or to protect our rights and safety. We will not share your information for marketing purposes without your explicit consent.

International Data Transfers

Our services are operated in Canada. Your personal information is stored and processed primarily within Canadian jurisdiction. If we transfer your data internationally, we implement appropriate safeguards to ensure your data receives equivalent protection under applicable laws.

Supervisory Authority

If you have concerns about our data practices or believe we have violated your privacy rights, you have the right to lodge a complaint with the relevant Canadian data protection authority. In Canada, you can file a complaint with the Office of the Privacy Commissioner of Canada (OPC), which oversees compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and other privacy legislation.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by posting the updated policy on our website and updating the "last updated" date. Your continued use of our services after changes indicates your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.