Privacy Policy
effective date: may 2, 2026
last updated: may 2, 2026
1. introduction
welcome to jadyn design lab.
jadyn design lab is an innovation studio working across design, branding, digital products, websites, creative strategy, product development, systems, ventures, and other innovation-led work.
this privacy policy explains how we collect, use, store, share, and protect personal information when you visit our website, contact us, submit an inquiry, work with us, subscribe to updates, or otherwise interact with our services.
we are committed to protecting your privacy and handling personal information responsibly, transparently, and only for purposes that are reasonable and necessary.
for Canadian private-sector businesses, the federal private-sector privacy law, PIPEDA, generally applies to organizations that collect, use, or disclose personal information in the course of commercial activity. The Office of the Privacy Commissioner of Canada describes PIPEDA as setting the ground rules for how businesses handle personal information in commercial activities.
2. who this policy applies to
this privacy policy applies to personal information we collect from:
website visitors;
clients and prospective clients;
nonprofit and community partners;
vendors, collaborators, and contractors;
people who submit forms or project inquiries;
people who communicate with us by email, phone, social media, or other channels;
people who subscribe to newsletters, updates, or marketing communications;
people who participate in consultations, discovery calls, workshops, or projects.
this policy does not apply to third-party websites, platforms, or services that we do not own or control.
3. what personal information means
“personal information” generally means information about an identifiable individual.
this may include information that directly identifies you, such as your name or email address, or information that could identify you when combined with other information.
personal information may include:
name;
email address;
phone number;
business or organization name;
job title or role;
mailing or billing address;
payment or invoice information;
project details you provide;
messages, feedback, or files you send to us;
website usage information;
device and browser information;
ip address;
marketing communication preferences;
meeting notes, project notes, or consultation details.
we do not intentionally collect more personal information than we need for the purpose we identify.
4. information we collect
4.1 information you provide directly
we may collect personal information when you:
fill out a contact form;
submit a project inquiry;
book a consultation;
send us an email;
request a quote or proposal;
subscribe to a newsletter or update;
communicate with us on social media;
participate in a survey, interview, research session, or workshop;
provide content, assets, documents, or access for a project;
make a payment or receive an invoice;
sign a contract, agreement, or statement of work.
this information may include your name, contact details, organization information, project goals, budget range, timeline, brand materials, business information, and any other details you choose to provide.
4.2 information collected automatically
when you visit our website, certain technical information may be collected automatically through cookies, analytics tools, server logs, or similar technologies.
this may include:
ip address;
browser type;
device type;
operating system;
pages visited;
time spent on pages;
referring website;
approximate location based on ip address;
clicks and interactions;
date and time of visit;
general usage patterns.
this information helps us understand how people use our website, improve performance, fix issues, and make our content more useful.
4.3 information from third-party platforms
we may receive personal information from third-party tools or platforms we use to operate our business.
this may include:
website forms;
email platforms;
calendar booking tools;
payment processors;
project management tools;
analytics tools;
social media platforms;
cloud storage platforms;
design, prototyping, or collaboration tools;
customer relationship management tools.
the information we receive depends on how you interact with us and the settings of those platforms.
5. how we use personal information
we may use personal information to:
respond to inquiries;
communicate with you;
provide quotes, proposals, and project recommendations;
schedule calls, meetings, consultations, or workshops;
deliver design, strategy, innovation, product, branding, website, or related services;
manage client relationships;
prepare contracts, invoices, and receipts;
process payments;
request feedback or approvals;
send project updates;
provide customer support;
improve our website and services;
understand how visitors use our website;
send newsletters or marketing updates, where permitted;
maintain internal records;
protect our business, website, clients, and users;
comply with legal, regulatory, tax, accounting, or contractual obligations.
we only use personal information for the purposes for which it was collected, for compatible purposes, or as otherwise permitted or required by law. The Saskatchewan Information and Privacy Commissioner notes that personal information should generally only be used for the purposes for which it was collected and protected by appropriate safeguards.
6. legal basis and consent
we collect, use, and disclose personal information with your consent, where required, or as otherwise permitted by law.
your consent may be express, such as when you submit a form, sign an agreement, subscribe to updates, or give written permission.
your consent may also be implied, such as when you contact us with a project inquiry and we use your information to respond.
under Canadian privacy guidance, businesses are expected to meet obligations around meaningful consent, privacy breach requirements, and the principles under PIPEDA.
you may withdraw consent at any time, subject to legal, contractual, or practical limitations. withdrawing consent may affect our ability to provide certain services.
7. why we collect specific types of information
7.1 contact information
we collect contact information so we can respond to you, communicate about projects, schedule meetings, provide support, and maintain a working relationship.
7.2 project information
we collect project information so we can understand your goals, prepare proposals, design appropriate solutions, manage scope, and deliver agreed services.
7.3 billing information
we collect billing information to issue invoices, process payments, manage accounting, and meet tax or legal requirements.
7.4 website usage information
we collect website usage information to improve the website, understand audience needs, monitor performance, and identify technical issues.
7.5 marketing preferences
we collect communication preferences so we can send relevant updates and respect unsubscribe requests.
8. payment information
if you make a payment, payment information may be processed through a third-party payment provider, bank, accounting platform, or invoicing tool.
we generally do not store full credit card numbers or complete payment card details on our own systems. payment providers may collect and process payment information according to their own privacy policies and security standards.
we may keep records of payment status, invoice numbers, transaction dates, billing names, billing addresses, and amounts paid for accounting and legal purposes.
9. cookies and tracking technologies
our website may use cookies, pixels, analytics tools, and similar technologies.
cookies are small files stored on your device that help websites function, remember preferences, measure usage, and improve user experience.
we may use cookies for:
website functionality;
analytics and performance;
security;
remembering preferences;
understanding traffic sources;
improving page content;
marketing or remarketing, if used.
you can usually manage or disable cookies through your browser settings. however, disabling cookies may affect how the website functions.
10. analytics
we may use analytics tools to understand how visitors use our website.
analytics tools may collect information such as page views, traffic sources, device type, browser type, approximate location, session duration, and user interactions.
we use this information in an aggregated or limited way to improve the website and understand what content is helpful.
where possible, we aim to avoid collecting unnecessary personal information through analytics tools.
11. email, newsletters, and marketing communications
if you subscribe to our newsletter, request updates, or agree to receive marketing communications, we may use your email address to send you relevant content.
this may include:
studio updates;
new projects;
case studies;
articles or insights;
service updates;
community-impact work;
offers or announcements.
you can unsubscribe at any time by using the unsubscribe link in our emails or contacting us directly.
we do not want to send unwanted messages. we aim to follow applicable consent and anti-spam requirements where they apply.
12. project files, client materials, and confidential information
during a project, you may share files, documents, brand assets, photos, videos, business information, user research, internal strategy, or other materials.
we use these materials only to provide the agreed services unless you give us permission to use them for another purpose.
you are responsible for ensuring you have the right to share any materials you provide to us.
we take reasonable steps to protect project files and confidential information, but no system can be guaranteed to be completely secure.
13. sensitive personal information
we do not intentionally request sensitive personal information unless it is necessary for a specific project or service.
sensitive information may include information about health, finances, government identification, children, vulnerable persons, immigration status, racial or ethnic origin, religious beliefs, or other highly personal details.
if a project involves sensitive information, we will aim to limit collection, use stronger safeguards where appropriate, and clarify how the information should be handled.
please do not send sensitive information unless it is necessary for the project or we have specifically requested it.
14. children’s privacy
our website and services are not directed to children under the age of 13, and we do not knowingly collect personal information from children without appropriate consent.
some projects may involve designing products, campaigns, or services for children, youth, families, schools, or community organizations. in those cases, any personal information related to children or youth should be handled carefully and only where necessary.
if you believe a child has provided us with personal information without appropriate consent, please contact us so we can take appropriate steps.
15. how we share personal information
we do not sell personal information.
we may share personal information only where reasonably necessary, including with:
service providers who help us operate our business;
contractors or collaborators working on your project;
payment processors;
accounting or bookkeeping providers;
website hosting providers;
email and communication platforms;
cloud storage providers;
analytics providers;
legal, tax, or professional advisors;
government, regulatory, or law enforcement authorities where required by law.
when we use third-party service providers, we aim to work with providers that use reasonable privacy and security practices.
16. third-party service providers
we may use third-party platforms to support our work, including tools for:
website hosting;
forms;
email;
scheduling;
video calls;
file storage;
design and prototyping;
project management;
payments;
analytics;
customer relationship management;
collaboration and communication.
these providers may process personal information on our behalf or according to their own terms and privacy policies.
we are not responsible for the privacy practices of third-party websites or services that we do not control.
17. links to other websites
our website may contain links to third-party websites, platforms, articles, resources, social media pages, or client websites.
when you click on those links, you leave our website. we are not responsible for the privacy policies, content, security, or practices of third-party websites.
we encourage you to review the privacy policies of any third-party website you visit.
18. international storage and transfers
some third-party tools or cloud services we use may store or process personal information outside your province, territory, or country.
this means your information may be subject to the laws of other jurisdictions.
we aim to use reasonable safeguards when personal information is handled by service providers, but we cannot control all third-party processing environments.
19. how long we keep personal information
we keep personal information only as long as reasonably necessary for the purposes described in this policy, or as required by law, contract, tax, accounting, or business obligations.
retention periods may vary depending on the type of information.
for example:
inquiry emails may be kept for a reasonable period to manage follow-up;
client records may be kept for business, tax, and legal purposes;
project files may be archived for future reference unless deletion is requested and legally possible;
marketing subscription information may be kept until you unsubscribe;
payment and invoice records may be kept as required for accounting and tax purposes.
when information is no longer needed, we may delete, anonymize, or securely archive it.
20. security safeguards
we use reasonable physical, technical, and administrative safeguards to protect personal information against loss, theft, misuse, unauthorized access, disclosure, copying, modification, or destruction.
safeguards may include:
password-protected accounts;
limited access to project files;
secure cloud storage tools;
two-factor authentication where appropriate;
restricted access to client materials;
secure payment processing through third-party providers;
reasonable device security practices;
internal confidentiality expectations;
careful sharing of files and links.
however, no method of transmission over the internet or electronic storage is completely secure. we cannot guarantee absolute security.
21. privacy breaches
if we become aware of a privacy breach involving personal information under our control, we will take reasonable steps to contain, investigate, and address the issue.
where required by law, we may notify affected individuals, regulators, or other relevant parties.
Canadian business guidance under PIPEDA includes breach-related obligations, including meaningful consent and privacy breach requirements.
22. your privacy rights
depending on where you live and the laws that apply, you may have the right to:
request access to your personal information;
request correction of inaccurate or incomplete personal information;
withdraw consent where consent is the basis for processing;
ask how your information has been used or shared;
request deletion of personal information, subject to legal or contractual limits;
unsubscribe from marketing communications;
ask questions or make a privacy complaint.
to exercise these rights, contact us using the contact details at the end of this policy.
we may need to verify your identity before responding to a request.
23. access and correction requests
you may request access to personal information we hold about you.
you may also request correction if you believe the information is inaccurate, outdated, or incomplete.
we will respond within a reasonable period, subject to legal limits and any exceptions that may apply.
we may not be able to provide access to information that includes confidential business information, information about another person, privileged information, or information we are legally restricted from disclosing.
24. withdrawing consent
you may withdraw consent for certain uses of your personal information.
for example, you may unsubscribe from marketing emails or ask us to stop using your information for a specific purpose.
however, withdrawing consent may not affect information already processed, and we may still need to retain certain information for legal, contractual, accounting, security, or legitimate business purposes.
25. accuracy of information
we rely on you to provide accurate and up-to-date information.
please contact us if your contact details, billing information, or project information changes.
we may periodically update records where necessary to maintain accuracy.
26. client responsibilities
if you provide us with personal information about another person, you are responsible for ensuring you have the authority or consent to share that information with us.
this may include information about employees, customers, donors, users, participants, clients, beneficiaries, volunteers, or stakeholders.
you should not share unnecessary personal information with us.
if a project requires user data, research data, survey responses, donor data, or participant information, we may request that the data be anonymized, limited, or shared securely.
27. research, surveys, interviews, and user testing
some projects may involve research activities such as interviews, surveys, usability testing, workshops, feedback sessions, or stakeholder conversations.
when we conduct research, we may collect information such as opinions, experiences, quotes, role information, demographic context, usage patterns, or feedback.
where appropriate, we aim to:
explain the purpose of the research;
collect only relevant information;
avoid unnecessary sensitive information;
protect participant confidentiality;
anonymize or summarize findings where possible;
use findings only for the agreed project purpose.
28. portfolio, case studies, and public project sharing
we may share completed work in our portfolio, website, proposals, social media, presentations, or case studies unless otherwise agreed in writing.
when sharing project work publicly, we aim not to disclose private, sensitive, confidential, or personal information without permission.
public case studies may include:
client or organization name;
project summary;
industry;
services provided;
screenshots or visuals;
high-level process;
outcomes or learnings.
if a project is confidential, you must notify us in writing before public sharing or before the project begins.
29. testimonials and reviews
if you provide a testimonial, review, quote, or public feedback, we may ask for permission to use it on our website, social media, proposals, or marketing materials.
we may display your name, role, organization, and testimonial if you consent.
you may contact us to request removal of a testimonial where reasonable.
30. social media interactions
if you interact with us on social media, the platform may collect information according to its own privacy policy.
we may see public information from your profile, comments, messages, tags, likes, shares, or other interactions depending on your privacy settings.
please avoid sending sensitive personal information through social media messages.
31. automated decision-making
we do not currently use personal information for automated decisions that produce significant legal, financial, or similarly important effects.
we may use basic automation tools for forms, email replies, scheduling, analytics, or workflow management, but these tools are used to support operations rather than make major decisions about individuals.
32. artificial intelligence and digital tools
as an innovation studio, we may use digital tools, including AI-supported tools, to assist with brainstorming, content organization, design exploration, research synthesis, drafting, workflow efficiency, or creative development.
we do not intentionally upload sensitive personal information, confidential client information, or private project materials into AI tools unless it is appropriate, permitted, and necessary for the agreed work.
where AI-supported tools are used, we remain responsible for reviewing outputs before using them in client work.
if your project has restrictions on AI tool use, please tell us in writing before the project begins.
33. nonprofit and community-impact projects
for nonprofit, grassroots, mission-led, or community-impact projects, we may collect information about the organization, mission, programs, participants, beneficiaries, donors, funders, volunteers, or community needs.
because these projects may involve vulnerable communities, we aim to be especially careful with personal information.
we encourage organizations to share only what is necessary and to anonymize participant or beneficiary information where possible.
we do not sell donor, participant, or community data.
PIPEDA may apply to private-sector organizations across Canada that collect, use, or disclose personal information in commercial activity, and commercial activity can include certain fundraising-list activities.
34. business transfers
if jadyn design lab is involved in a merger, acquisition, restructuring, sale of assets, partnership, or other business transaction, personal information may be transferred as part of that transaction where permitted by law.
we would take reasonable steps to protect personal information during such a process.
35. legal disclosure
we may disclose personal information if required or permitted by law, including to:
comply with court orders;
respond to lawful requests from authorities;
protect our legal rights;
enforce agreements;
investigate fraud, security, or misuse;
protect the safety of individuals;
meet tax, accounting, or regulatory obligations.
36. privacy by design
we aim to apply privacy-conscious thinking in how we design our services and systems.
this means we try to:
collect only what we need;
limit unnecessary access;
keep information accurate;
use secure tools where reasonable;
delete or archive information when no longer needed;
avoid collecting sensitive information unless necessary;
be transparent about our practices;
respect client confidentiality.
37. changes to this privacy policy
we may update this privacy policy from time to time.
changes may reflect updates to our services, tools, business practices, legal requirements, or privacy standards.
the updated policy will be posted on this page with a revised “last updated” date.
continued use of our website or services after updates are posted means you accept the revised policy.
38. privacy contact
if you have questions, requests, or concerns about this privacy policy or how we handle personal information, please contact us.
jadyn design lab
privacy contact: [insert name or title]
email: [insert email address]
website: [insert website url]
mailing address: [insert address, if applicable]
Under PIPEDA guidance, organizations are expected to be accountable for personal information practices, and privacy policies should make it clear how people can contact the person responsible for privacy questions or complaints.
39. closing statement
by using our website, contacting us, submitting information, or working with jadyn design lab, you acknowledge that you have read and understood this privacy policy.
we value your trust and are committed to handling personal information with care, respect, and responsibility.