Privacy policy

This policy describes the website and project services being implemented. It has not been legally reviewed.

Who to contact

Elevate Digital Labs is operated by Brad George in Raymond, Alberta. For privacy questions or a request to access, correct, export, or delete your information, email brad.george@elevatedigitallabs.net or call 825-212-1687.

Information we use

Project enquiries include your name, business name, email, optional phone, requested service, and project details. They become CRM leads so we can respond and follow up. Employees may add contact details, internal notes, project information, and outreach drafts.

Client projects may contain uploaded logos, photos, written content, documents, preview links, feedback, revision requests, and approval records. An approval records the account, email, time, and specific design version referenced. Upload only material you are entitled to share.

Accounts and access

Clerk is the selected account provider for email/password sign-in, email verification, invitations, and password resets. Account access is invitation-only. Employees have access to the CRM; clients have access only to their assigned active projects. Internal sales notes and outreach drafts are not part of the client portal. Passwords are handled by the account provider and are not stored in CRM records.

Hosting and service providers

The site uses Sites hosting, a shared database, and private file storage. Resend is the selected provider for enquiry notifications and project invitations for existing accounts. Clerk handles new-account invitation, verification, and password-reset emails. Providers may process information outside Canada under their own terms. Integrations become available when their configuration has been completed.

If an employee requests an AI outreach draft, relevant company-profile and business-record information is sent to the configured xAI or Google Gemini service. Drafts are reviewed by an employee; the CRM does not automatically send them. Do not put sensitive personal information in outreach notes.

Browser storage and security

Sign-in uses account-provider cookies. Session storage remembers whether you skipped the introduction and temporarily holds an invitation while you sign in. CRM records and uploaded files are stored on the server. With your permission, we use Google Analytics 4 cookies to understand visits to our public home and policy pages, successful contact-form submissions, and clicks on phone and email links. A phone or email click does not tell us whether a call or message was completed. Analytics does not load until you choose Accept. Choosing Decline keeps it off. The Cookie preferences link in the footer on public pages lets you change your choice; declining after acceptance stops future collection, clears this site's Analytics cookies, and refreshes the page to unload Analytics. This does not delete data already received by Google. Your choice is saved in this browser's local storage until you change it or clear site storage. If the browser cannot save your choice, Analytics stays off. Google processes browser and device information, IP addresses, and pseudonymous identifiers and may process information outside Canada. We do not send enquiry contents, account details, arbitrary query values, URL fragments, or referring URLs to Analytics. Account, employee CRM, and client portal pages are excluded. Only predefined source, medium, and campaign labels for Instagram, Facebook, X, and email marketing links are accepted. Other query values, click identifiers, and referring URLs are not sent. Links with account, sensitive, or unrecognized parameters are not measured. Untagged or unsupported links may have no source attribution. Advertising features and enhanced measurement are disabled. The employee CRM loads Google Fonts, which receives standard browser request information.

Requests are validated and rate-limited. Enquiries use a hidden spam field and duplicate-submission protection. We keep delivery status and limited error details to troubleshoot notifications. File downloads require authorized project access. These measures reduce risk but cannot eliminate it.

Retention and your choices

We retain information as needed to manage enquiries, deliver projects, maintain business records, and handle disputes or applicable obligations. Contact Brad about deletion or retention for your project. Removing access does not by itself delete project history. Exported backups are the responsibility of the person downloading them.

Updates

We will revise this policy as the service changes. Questions are welcome before you submit information.