Privacy Policy

1. About This Policy

360 Web Firm is a Canadian-owned website services business based in Cornwall, Ontario. This Policy applies to information handled through our public website and our direct business relationship with clients and prospective clients. Our services are intended primarily for businesses and adults in Canada and the United States.

We do not sell or rent personal information.

2. Information We May Collect

Information you voluntarily provide may include your name, business or organization name, email address, telephone number, mailing or billing information where applicable, website/domain address, project information, service requests, form submissions and billing/transaction records. Payment-card information may be processed directly by a third-party payment provider rather than stored by 360 Web Firm.

Technical and security information

Our website, hosting environment and security services may process technical information such as IP address, browser/device information, operating system, referring page, requested URLs, timestamps, server/security logs, form-security events and other information reasonably required to operate, protect, troubleshoot and improve the website.

3. How We Use Information

We may use information to respond to inquiries; prepare quotes; provide website design, development, hosting, maintenance, SEO, security, performance and related services; process billing; communicate with clients; operate 360 Website Intelligence services; troubleshoot technical issues; prevent fraud, spam and abuse; protect our systems; maintain appropriate business records; and comply with legal obligations.

We do not treat a website inquiry, scanner request or Link Opportunity Finder request as marketing consent.

4. Contact Form & Website Scanner Reviews

Our contact form may collect your name, email address, phone number, website address, selected service and message. You can also use it to ask about a Website Scanner review. We may use the information you provide and existing client records to coordinate the review and confirm that you are authorized to request it.

The contact form uses server-side validation and anti-abuse controls. Cloudflare Turnstile may process technical information necessary to distinguish legitimate users from automated abuse. Successful submissions may be transmitted through Brevo's transactional-email service so the inquiry can be delivered to 360 Web Firm.

Website Scanner

When a scan is arranged, the public website address and resulting technical findings may be processed and retained long enough to perform, review, communicate and document the service. The scanner is intended to review public website information and is not intended to collect private account credentials or access non-public areas.

5. 360 Link Opportunity Finder Privacy

The 360 Link Opportunity Finder is an additional Website Intelligence benefit for qualifying 360 Web Firm clients. To carry out a Link Opportunity Review, we may use the public website address, a broad business category, an optional business type or profession, and general business location consisting of city/locality, province or state, and country. These details may come from the client's project information or a discussion with the client.

There is no separate public Link Opportunity Finder request form. Client enquiries use the contact form described above, which may include personal contact details. We may also use existing client records to confirm eligibility and communicate about the review. A request for a review is not permission to send unrelated marketing.

We use the business information to identify and evaluate publicly available business listings, directories, local or regional resources, associations, industry resources and other potential link or visibility opportunities. Research may involve reviewing publicly available third-party websites and information relevant to the business and location.

Technical security information, including IP address, request timestamps, browser or session information, Cloudflare Turnstile results and rate-limit/security events, may be processed separately to protect our website and services from automated abuse and fraud.

Business information and research findings may be retained only as reasonably necessary to perform the client review, communicate or document the service, improve the quality of our Website Intelligence systems, resolve disputes, prevent abuse or meet legitimate business and legal record requirements. We do not sell this information or use it as permission to send unrelated marketing.

The service is designed to research public business information. Please do not send passwords, private account information, confidential personal information or non-public website credentials when requesting a review.

6. Third-Party Service Providers

We use service providers where reasonably necessary to operate our business and website. Depending on the service, these may include website hosting and infrastructure providers, domain/DNS providers, Cloudflare for website security and Turnstile, Brevo for transactional email delivery, payment processors, analytics providers and other technical platforms.

These providers process information under their own terms and privacy policies and may operate infrastructure outside your province, state or country. Information may therefore be processed in other jurisdictions and may be subject to lawful access requirements there.

7. Cookies, Sessions & Analytics

The website may use cookies or similar technologies for essential functionality, security, spam prevention, form/session protection, preferences and analytics. Secure form processing may use a session cookie to help protect submissions against cross-site request forgery and abuse. You can control many cookies through your browser, although disabling essential cookies may prevent certain website functions from working correctly.

8. Information Security

We use reasonable administrative and technical safeguards appropriate to the services we provide. These may include HTTPS/TLS, secure hosting, firewall and Cloudflare protections, server-side form handling, Turnstile, validation, rate limiting, backups, malware/security monitoring, software updates, access controls and limited exposure of private credentials.

No website, server, email system, software or internet transmission can be guaranteed completely secure.

9. Client Websites, Hosting & Backups

When we host, maintain or support a client's website, we may have administrative or technical access necessary to perform the contracted work. Client websites may contain personal information collected independently by that client. The client remains responsible for its own privacy obligations, notices, consent practices, retention requirements and lawful collection/use of information.

Backups may be created for disaster recovery where included. No backup system guarantees complete restoration in every circumstance.

10. Artificial Intelligence & Assisted Work

360 Web Firm may use artificial-intelligence tools to assist with website development, coding, research, content, SEO/AI-search work and workflow. We aim to use such tools responsibly and review outputs where reasonably practical.

We do not intentionally submit confidential client credentials, passwords or private keys to general-purpose AI systems. Clients remain responsible for reviewing and approving business claims and website content before publication.

11. Disclosure of Information

We may disclose information to service providers needed to deliver our services; where required by law or legal process; to protect our rights, users, systems or property; to investigate fraud, abuse or security incidents; or with your consent. We do not sell, trade or rent personal information.

12. Data Retention

We retain personal information only as long as reasonably necessary for the purpose for which it was collected and for legitimate business, security, accounting, dispute-resolution and legal-record requirements. Security logs and anti-abuse records may be retained for a limited period appropriate to investigating attacks and protecting systems. Backup copies may persist temporarily after information is removed from an active system.

13. Your Privacy Choices & Rights

Subject to applicable law and appropriate identity verification, you may contact us to request access to personal information we hold about you, correction of inaccurate information, withdrawal of consent where consent is the applicable basis, or deletion where legally permitted. Some information may need to be retained despite a deletion request where required for legal, accounting, security, fraud-prevention, contractual or legitimate business-record purposes.

14. External Websites & Children's Privacy

Our website and Website Intelligence findings may link to external websites. 360 Web Firm is not responsible for the privacy practices, security, content or services of third-party websites.

Our website and services are intended for businesses and adults. We do not knowingly solicit personal information from children under 13.

15. Geographic Availability & Cross-Border Access

360 Web Firm currently provides services primarily to clients in Canada and the United States. Third-party infrastructure used to operate our services may process information across borders as described above.

16. Changes to This Policy & Contact

We may update this Privacy Policy to reflect changes to our website, services, providers, technology or legal requirements. The current version and updated date will be published on this page.

General information only: This Privacy Policy describes 360 Web Firm's practices and is not legal advice to clients regarding their own legal or regulatory obligations.