Privacy Policy

01Who we are

This Privacy Policy explains how Codetrivio Technologies Inc. (“Codetrivio”, “we”, “us”) collects, uses and protects personal information when you visit codetrivio.com, contact us, or talk to us about a project.

We are a software development company headquartered in Toronto, Canada, working with clients in Canada, the United States, Australia, the UK, Europe and worldwide. We are responsible for the personal information described in this policy.

02Information we collect

Information you give us

• Contact and quote forms: your first name, email address, phone number, company name and the message you write about your project.
• Email, phone and video calls: what you share when you contact us directly or book a discovery call, such as project requirements, budget and timeline.
• Client projects: billing and contact details needed to deliver and invoice the work you hire us for.

Information collected automatically

• Analytics: we use Google Analytics 4 (loaded through Google Tag Manager) to understand how the site is used, for example pages visited, time on page, referring website, device and browser type, and approximate location (city/country). Google Analytics does not log or store full IP addresses.
• Security and performance: our hosting provider and Cloudflare (our CDN and security service) process technical data such as IP address, browser user agent and request time to deliver the site quickly and block malicious traffic.

We do not ask for, and ask you not to send us, sensitive information such as health data, government ID numbers or payment card details through the website forms.

03How we use your information

• To reply to your inquiry, prepare proposals and estimates, and schedule calls.
• To deliver, support and invoice the services you engage us for.
• To improve our website, content and services using aggregated analytics.
• To keep the website secure and prevent spam, fraud and abuse.
• To comply with legal, tax and accounting obligations.

We will only send you occasional updates about our services if you are an existing client or have agreed to receive them, and every such message includes an easy way to unsubscribe. We do not sell your personal information, and we do not rent or trade it to anyone.

04Legal bases (EU, UK and similar laws)

Where the GDPR or UK GDPR applies, we rely on: your consent (for example, analytics cookies where consent is required); steps before entering a contract (responding to a quote request); performance of a contract (delivering a project); legitimate interests (keeping the site secure and understanding how it is used); and legal obligations (tax and accounting records). In Canada, we collect, use and disclose personal information with your consent, which you give when you submit a form or contact us, or as otherwise permitted by law.

05Cookies and analytics

Cookies are small files stored in your browser. We use a small number of them:

You can block or delete cookies in your browser settings, and you can opt out of Google Analytics on all websites with the Google Analytics opt-out browser add-on. Blocking strictly necessary cookies may affect how the site works. We currently do not use advertising or retargeting pixels on this website; if that changes, we will update this policy and ask for consent where the law requires it.

06Who we share information with

We share personal information only with trusted service providers that help us run our business, and only as much as they need:

• Website hosting and email providers: to host the site and deliver form submissions and emails to our team.
• Cloudflare, Inc.: content delivery and security.
• Google LLC: Google Analytics and Google Tag Manager.
• Codetrivio team members and group companies: the people who will plan and build your project, bound by confidentiality obligations.
• Professional advisers and authorities: accountants, lawyers, or where we are required by law, a court order, or to protect our rights and safety.

If Codetrivio is involved in a merger, acquisition or sale of assets, personal information may be transferred as part of that transaction, subject to this policy.

07International transfers

We are based in Canada, and our team and service providers may process information in Canada, the United States and other countries where they operate. These countries may have different data protection laws than where you live. When we transfer personal information, we use contractual and organizational safeguards (such as confidentiality agreements and, where required, standard contractual clauses) so that it stays protected to the standard described in this policy.

08How long we keep information

• Inquiries that don’t become projects: up to 2 years after our last contact, then deleted.
• Client records and invoices: for the length of our relationship and as long as required by tax and accounting laws (generally 6–7 years).
• Analytics data: kept in Google Analytics for up to 14 months, then deleted automatically.

09How we protect your information

We use HTTPS encryption across the entire site, Cloudflare security, access controls and two-step login protection on our systems, and we limit access to personal information to people who need it for their work. No method of transmission or storage is 100% secure, but we take reasonable measures appropriate to the sensitivity of the information and will notify you and the relevant authorities of a data breach where the law requires it.

10Your privacy rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you and get a copy of it;
• correct information that is inaccurate or incomplete;
• ask us to delete your information, or to restrict or object to how we use it;
• receive your information in a portable format;
• withdraw consent at any time (this doesn’t affect processing that already happened).

Canada: you have rights under PIPEDA and applicable provincial laws, and you may contact the Office of the Privacy Commissioner of Canada. EU/UK: you may lodge a complaint with your local data protection authority. United States: residents of California and other states with privacy laws can request to know, correct or delete their information, and we will not discriminate against you for exercising these rights. We do not sell or “share” personal information for cross-context behavioural advertising. Australia: we handle personal information in line with the Australian Privacy Principles, and you may contact the Office of the Australian Information Commissioner.

To make a request, email [email protected]. We may need to verify your identity, and we will respond within 30 days.

11Data in client projects

When we build software for a client, we may handle data that belongs to the client or their users (for example, test data or production databases). In that case we act on the client’s instructions as a service provider/processor under our contract and non-disclosure agreement, and the client’s own privacy policy applies to that data.

12Children

Our website and services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has sent us personal information, please contact us and we will delete it.

13Links to other websites

Our site links to other websites, including our own products (TradeScaner and DineBills) and social media pages. Those sites have their own privacy policies, and we are not responsible for their practices.

14Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top shows when it last changed. If we make significant changes, we will highlight them on this page.

15Contact us

Questions, requests or complaints about privacy can be sent to our Privacy Officer: