Privacy Policy

Effective August 20, 2026 · Rainshadow Systems Ltd. (British Columbia, Canada)

Plain language, like everything else we do. This page explains what personal information Rainshadow Systems Ltd. ("Rainshadow", "we") collects, why, and what we do with it — both on this website and in the work we do for clients.

Who we are

Rainshadow Systems Ltd. is a technology and consulting company incorporated in British Columbia, Canada, based in the Comox Valley. Privacy questions and requests go to info@rainshadowsystems.ca.

What we collect on this website

• Contact and intake forms. If you write to us or fill in an intake form, we receive what you send — typically your name, email address, business name, and whatever you tell us about your project. We use it to reply and to prepare for working with you. Nothing else.
• Newsletter. Subscribing uses double opt-in: we only add your email after you confirm from your inbox, consistent with Canada's anti-spam law (CASL). Every email includes a working unsubscribe link, and unconfirmed signups are automatically purged.
• Analytics. We use Google Analytics 4 to understand, in aggregate, how people use this site (pages visited, rough region, device type). This involves cookies set by Google. We don't use advertising trackers, and we don't try to identify individual visitors. You can block analytics cookies in your browser, or use Google's opt-out add-on, and this site works exactly the same.

Information we handle for clients

Our client work — website management, marketing and SEO, software, and automation — sometimes means clients grant us authorized access to their business accounts and data (for example, a business profile, an analytics property, or a scheduling system). Three rules govern all of it:

• We only access accounts and data a client has explicitly authorized us to manage, and only for the services they hired us to deliver.
• Client data stays the client's. We don't sell it, rent it, or use it for anything beyond that client's engagement, and access is removed when an engagement ends or on request.
• Credentials entrusted to us are stored in a managed, encrypted vault — never in plain text, never shared.

Google API Services

Some client services use Google APIs (for example, the Business Profile APIs) under access each client authorizes. Rainshadow's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In practice: data obtained through Google APIs is used only to provide the client-facing services the account owner authorized, is never sold or used for advertising, and is never transferred except as needed to provide those services, comply with law, or as part of a merger with notice.

Who processes data on our behalf

We keep the list short. This website is hosted on Railway; transactional and newsletter email is sent through Resend; analytics is Google Analytics. Each processes data only to provide their service to us. Some of these providers operate infrastructure in the United States, which means data they process may be stored or handled there.

What we never do

• Sell or rent personal information. To anyone. Ever.
• Send marketing email without consent.
• Collect more than the work in front of us needs.

Retention

We keep personal information only as long as it serves the purpose it was collected for, or as law requires (business and tax records, for example). Newsletter consent records are retained while you're subscribed; abandoned, unconfirmed signups are purged automatically.

Your rights

Under British Columbia's Personal Information Protection Act and Canada's PIPEDA, you can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. Email info@rainshadowsystems.ca and we'll respond promptly — usually within days, at most within the 30 days the law allows. If you're not satisfied, you can contact the Office of the Information and Privacy Commissioner for BC or the Privacy Commissioner of Canada.

Security

Connections to this site are encrypted (HTTPS). Access to systems holding personal information is limited to who needs it, protected by strong authentication, with credentials kept in an encrypted vault. No system is perfect; if a breach ever created a real risk of significant harm, we would notify affected people and the appropriate authorities.

Changes

If this policy changes, the new version appears here with a new effective date. Material changes to how we handle client data get communicated to clients directly.

Questions about any of this — including the reasoning behind it — are welcome: info@rainshadowsystems.ca.