Effective Date: January 15, 2025 | Last Revised: January 15, 2025
At Smartech Prismo, we build mobile apps for people who actually use them. That means we think about privacy from day one. This policy explains how we handle your information when you visit our website, contact us, or work with us on app development projects.
We're based in Courtenay, British Columbia, and we follow Canadian privacy laws—specifically the Personal Information Protection and Electronic Documents Act (PIPEDA). But really, this is just about being decent with your data.
Look, we're not in the business of hoarding data. We only collect what we need to run our business and serve our clients properly. Here's what that looks like in practice.
When you reach out through our contact form or email us at [email protected], we'll collect basic stuff like your name, email address, phone number if you share it, and whatever details you include about your project. If you're already a client, we keep records of our conversations, project files, contracts, and billing information.
Sometimes during discovery calls or project meetings, you might share business plans, user research, or technical requirements. We treat all of that as confidential client information.
Our website captures standard web analytics—IP addresses, browser types, pages you visit, how long you stick around. We use this to understand which content people find useful and to spot technical issues. Nothing creepy, just the basics that help us improve the site.
We don't use cookies for advertising or tracking across other websites. Any cookies we do set are strictly functional—keeping you logged into our client portal, remembering your preferences, that sort of thing.
We use what you share to actually do our jobs. That includes:
We don't sell your information. Period. We're not an ad company—we're app developers.
Most of the time, your information stays with us. But there are a few situations where we need to share it with others to get work done or comply with the law.
We work with a handful of third-party tools to run our business. Our email hosting provider handles client communications. Our accounting software processes invoices and payments. Our cloud storage provider keeps project files secure. These companies only get access to the minimum information they need to do their job, and they're all required to keep it confidential.
For Canadian clients, we prioritize service providers that store data within Canada whenever possible.
If a court order, subpoena, or valid legal request requires us to disclose information, we'll comply. We'll also notify you unless legally prohibited from doing so. This doesn't happen often—actually, it's never happened to us—but it's worth mentioning.
If Smartech Prismo is ever acquired or merges with another company, your information would transfer to the new entity. They'd be bound by this privacy policy unless they notify you otherwise and give you a chance to opt out.
Security isn't something we tack on at the end. It's built into how we work from the start.
No system is completely bulletproof, but we take reasonable precautions to protect against unauthorized access, alteration, disclosure, or destruction of your information.
Data Breach Notification: If we ever experience a security breach that affects your personal information, we'll notify you within 72 hours of becoming aware of it, as required by PIPEDA. We'll explain what happened, what information was affected, and what steps we're taking to address the situation.
Your information belongs to you. Canadian privacy law gives you specific rights, and we respect them. Here's what you can do.
You can request a copy of the personal information we hold about you. We'll provide it in a readable format within 30 days. There's no fee unless the request is unusually complex or repetitive.
If something we have on file is wrong, let us know. We'll update it promptly. For active clients, you can often update your own information through our client portal.
You can ask us to delete your personal information, and we'll honor that request unless we have a legitimate reason to keep it—like an active contract, unpaid invoices, or legal requirements to maintain business records. Canadian tax law requires us to keep financial records for seven years, for example.
If you've opted into marketing emails, you can unsubscribe anytime using the link at the bottom of any message. If you're a current client, withdrawing consent for us to process your information would make it difficult to continue providing services, but you have that right.
You can object to how we're using your information if you think it's being used for purposes beyond what you originally consented to. We'll review your objection and respond within 30 days.
Want to take your information to another service provider? We'll give you a copy of your data in a commonly used format that makes that possible.
We don't keep information longer than necessary. Here's our general approach to data retention:
| Type of Information | Retention Period |
|---|---|
| Inquiry forms and initial contact information | 2 years if no project results |
| Active client project files and communications | Duration of project plus 3 years |
| Contracts and legal documents | 7 years after project completion |
| Financial records and invoices | 7 years as required by CRA |
| Marketing consent records | Until you unsubscribe plus 1 year |
| Website analytics data | 26 months |
After these periods, we securely delete or anonymize the information so it can no longer identify you.
We're a Canadian company serving primarily Canadian clients. Most of your data stays in Canada. But some of our service providers—like cloud hosting and email platforms—operate globally and may store data on servers outside Canada, including in the United States.
When data does leave Canada, we make sure our service providers have adequate protections in place. We review their privacy policies and ensure they comply with standards comparable to PIPEDA. For clients in British Columbia specifically, we also consider BC's Freedom of Information and Protection of Privacy Act requirements.
If you're concerned about where your data is stored, mention it during our initial consultation. We can often accommodate preferences for Canada-only storage.
Our services are designed for businesses, not children. We don't knowingly collect information from anyone under 16. If you're a parent or guardian and believe your child has provided us with personal information, please contact us immediately. We'll delete it from our systems.
We review this policy at least annually and update it when our practices change. When we make significant changes, we'll post the updated policy here and note the revision date at the top. For major changes that affect how we use your information, we'll notify active clients directly by email.
The current version always lives at omagase.eu/privacy-notice.html. We recommend checking back occasionally, especially if you're a regular client.
If you have questions about this policy or concerns about how we're handling your information, we want to hear about it. Most privacy issues can be resolved through a simple conversation.
We take complaints seriously. Filing one won't affect our relationship with you or any services we're providing.
For privacy-related questions, requests, or concerns, reach out to us directly:
We aim to respond to all privacy inquiries within 5 business days. For requests requiring more investigation, we'll acknowledge receipt immediately and provide a full response within 30 days.