Privacy policy

Who we are

Heritage Media is a software studio based in Kelowna, British Columbia, Canada. It is an unincorporated business operated by its owner. For anything in this policy, including a request to see or delete your information, contact [email protected] or write to us at 650 Eastbourne Road, Kelowna, BC V1X 5K9, Canada.

What this policy covers

This policy covers this website only — the pages at heritage-media.ca.

It does not cover the applications we build. Those are operated by the school districts, organisations, and businesses that license them, and the information held in them belongs to those organisations. If you are a parent, student, or employee asking about data held in one of our applications, the organisation that operates it is the right place to ask, and their own privacy policy applies. We handle that information only as their service provider, under our agreement with them.

What we collect

When you use the contact form

We collect what you enter:

• Your name
• Your email address
• Your organisation, if you choose to give it — this field is optional
• The content of your message

This is used for one purpose: to read your message and reply to it. We do not add you to a mailing list, and we do not send marketing to an address given here.

When a message is submitted

To be able to tell whether a message actually sent, and to stop the form being abused to send bulk mail, the server records a short technical log entry for each submission: the date and time, the outcome (sent, rejected, or rate-limited), an irreversible one-way hash of the sending IP address, and — for messages that were sent — the email address given, so a missing message can be traced.

The IP address itself is not stored. It is hashed, which lets the system tell one sender apart from another without keeping anything that identifies you. The rate limiter keeps the same kind of hash for one hour and nothing else.

When you read a page

We use Umami, a privacy-preserving analytics service, to count how many people visit and which pages they read. It is what tells us whether writing any of this was worthwhile.

Umami does not use cookies and does not track anyone across other websites. It does not store IP addresses, and it does not build a profile of you or attempt to recognise you on a later visit. What it records is aggregate and anonymous: the page viewed, the referring site, and general information about the browser, operating system, device type, and country.

Because nothing it collects identifies you, and no cookies are involved, this site does not need a cookie consent banner. If you would rather not be counted at all, any standard content or tracker blocker will stop it, and the site will work exactly as before.

What we do not collect

• No cookies are set by this website
• No advertising, ad networks, or cross-site tracking
• No session recording, heatmaps, or scroll tracking
• No profiles, and no attempt to identify individual visitors
• No accounts, and no passwords

Our hosting and security providers keep their own standard server logs, and Cloudflare may set a strictly necessary cookie to protect the site against automated abuse. We do not use these for analytics or profiling.

How long we keep it

• Your message and contact details: up to 24 months from when you send it, so that we can pick up a conversation that resumes in a later budget year. Then it is deleted.
• The technical submission log: 90 days, after which entries are deleted automatically by the software.
• The rate-limiting record: one hour.
• Analytics: aggregate counts only, with nothing that identifies a person, so there is nothing about you to delete.

You can ask us to delete your information sooner, at any time.

Who else is involved

We do not sell personal information, and we do not share it for anyone else's marketing. Two providers necessarily handle it in order for the site and its email to work:

• Our web host, which stores the site and runs the mailbox that receives your message.
• Cloudflare, which delivers the site and protects it from attack and automated abuse.
• Umami, which counts page views. It receives no personal information and no cookies.

Both operate servers outside Canada, including in the United States, so information submitted through this site may be stored or processed outside Canada and may be subject to the laws of those countries, including lawful access by their courts and authorities. By using the contact form you consent to this.

Your rights

Under Canadian privacy law you can ask us to confirm what personal information we hold about you, to give you a copy of it, to correct it if it is wrong, or to delete it. Email [email protected] and we will respond within 30 days. There is no charge.

If you are not satisfied with how we have handled a privacy question, you may complain to the Office of the Privacy Commissioner of Canada.

Keeping it secure

The site is served only over an encrypted connection, the contact form is rate-limited to prevent abuse, and the technical logs are not readable from the web. No system is perfectly secure, but we collect as little as possible, which is the most effective protection available.

Children

This website is intended for adults enquiring about our work and is not directed at children. We do not knowingly collect personal information from children through this site.

Changes to this policy

If we change what we collect or how long we keep it, we will update this page and the date at the top. This policy was last updated on 10 August 2026.