Privacy Policy

This Privacy Policy explains what information Zeph James, a sole proprietor doing business as “ImZephyy” (“we,” “us”) collects when you visit ImZephyy’s website or use the Services, how we use it, and the choices you have. We are based in Ontario, Canada, and handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Information we collect

Information you give us

• Name, email address, and phone number (when you book a call, purchase, or contact us).
• Payment details — handled entirely by Stripe; we never see or store your full card number.
• Booking details (call time, event type) via Cal.com.
• Any messages, intake forms, or content you send us.

Information collected automatically

• Pages visited, referring page, and timestamps, via our own first-party analytics. We do not load third-party advertising trackers.
• A session identifier stored in your browser’s session storage (cleared when you close the tab) used only to group your own pageviews together — see our Cookie Policy.
• If you arrive from an ad, the campaign identifiers in the link (for example utm_source or a click ID). Where you go on to buy, these are stored with the order so we can tell which campaign produced the sale.
• Your IP address, recorded briefly against a request counter so we can rate-limit abuse of our public forms and sign-in page. It is not used to identify or profile you, and is deleted automatically — see section 4.

2. How we use your information

• To process payments and deliver the product or service you purchased.
• To schedule and manage bookings.
• To send transactional emails (order confirmations, booking confirmations) via Resend.
• To send you marketing emails, only if you’ve opted in — see Section 5.
• To understand site usage and improve our pages, in aggregate.
• To comply with legal and tax obligations.

3. Who we share information with

We share information only with the service providers needed to run the business:

• Stripe — payment processing.
• Cal.com — scheduling and booking management.
• Resend — transactional and marketing email delivery.
• Our hosting and database providers, to operate the site.
• Sentry — error monitoring. When something breaks, a report of the failure is sent so it can be fixed. It can include the page you were on and your browser version. It is configured not to send personal information or to record your session, and the data is stored in the European Union.

We do not sell your personal information.

4. Data retention

We keep order, booking, and communication records for as long as needed to provide the Services, comply with tax/accounting obligations, and resolve disputes — typically the duration required by applicable law.

Operational records are deleted automatically on a schedule:

• Rate-limiting records, including the IP address they are keyed on — 7 days.
• Sign-in attempts on our admin area — 30 days.
• Analytics pageview records — 400 days.
• Per-message email delivery records — 730 days.

5. Email marketing consent

We send marketing email to people who asked for it — by downloading a free guide, subscribing, or buying something — and to people who began a checkout and did not finish, so we can remind them. Every marketing email carries a one-click unsubscribe link, and unsubscribing is honoured immediately and permanently.

Contacting us for support does not subscribe you to anything. Opting out of marketing does not affect transactional messages tied to an order or booking you’ve made, such as a receipt or a download link. We do not send marketing SMS.

6. Your rights

Under PIPEDA, and depending on where you live also under laws such as the GDPR in the EU/UK or the CCPA/CPRA in California, you have rights to access, correct, delete, or export your personal information, and to object to certain processing. To exercise any of them, email us at support@imzephyyofficial.ca and we will respond within 30 days.

One limit worth stating plainly: where you have bought something, we are required to keep the sales record for tax purposes. In that case we delete or anonymise everything else and retain only what the law obliges us to.

If you are not satisfied with how we have handled a request, you can complain to the Office of the Privacy Commissioner of Canada.

7. Children's privacy

The Services are not directed to anyone under 18, and we do not knowingly collect information from children.

8. Security

We use industry-standard measures (encrypted connections, restricted database access) to protect your information, but no method of transmission or storage is 100% secure.

9. Changes to this policy

We may update this Privacy Policy from time to time; the "Last updated" date above will reflect the latest revision.

10. Contact

Questions about this Privacy Policy or your data can be sent to support@imzephyyofficial.ca.