Last Updated: June 11, 2025
Privacy Policy
Your privacy matters to us. This Privacy Policy explains how Bhuwan Rokaha collects, uses, and protects your personal information in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada’s Anti-Spam Legislation (CASL).
1. Who We Are
Bhuwan Rokaha is a digital marketing and web design professional based in the Greater Toronto Area, Ontario, Canada, operating through bhu1roka.com. As a sole proprietor, Bhuwan Rokaha serves as the Privacy Officer and is accountable for compliance with PIPEDA. For all privacy inquiries, contact: bhu1roka@gmail.com.
2. What Personal Information We Collect
Information you provide directly:
- Name, email address, phone number, and business name (via contact or lead forms)
- Project details and messages you submit through our website
- Billing information (name, address — payment card data is handled exclusively by third-party processors and is never stored by us)
Information collected automatically when you visit our website:
- IP address, browser type, device type, and operating system
- Pages visited, time spent on pages, and referral sources
- Cookie and tracking data (see Section 6)
- Approximate geographic location (country/region level, derived from IP address)
Information collected during service delivery:
- Login credentials for your website, hosting account, or ad platforms (retained only as long as needed to perform the service)
- Business data you share with us for the purpose of strategy and campaign management
3. Why We Collect Your Information
We collect personal information only for the following purposes (as required by PIPEDA Principle 2):
- To respond to your inquiries and provide service quotes
- To deliver contracted web design, development, and digital marketing services
- To issue invoices and process payments
- To send project updates, reports, and communications related to active projects
- To improve our website and user experience through analytics
- To send marketing communications (only with your consent, as required by CASL)
- To comply with legal obligations and prevent fraud
4. Consent
We collect, use, and disclose personal information only with your knowledge and consent, as required by PIPEDA Principle 3:
- Express consent is obtained before sending marketing emails and before sharing your data with third parties for their own purposes
- Implied consent applies when you submit a contact form or request a quote — you consent to us using that information to respond
- You may withdraw consent at any time by contacting us at bhu1roka@gmail.com, subject to any legal or contractual obligations that require us to retain certain records
5. Cookies & Tracking Technologies
Our website uses cookies and similar technologies to improve your experience and measure performance. We use the following types of cookies:
| Type | Purpose | Can You Opt Out? |
|---|---|---|
| Essential | Security, form functionality, session management | No — required for the site to function |
| Analytics | Track how visitors use our site (Google Analytics) | Yes — via browser settings or tools.google.com/dlpage/gaoptout |
| Marketing | Retargeted advertising (Google Ads, Meta Pixel) | Yes — via youradchoices.ca or adssettings.google.com |
| Preference | Remember your settings and preferences | Yes — via browser settings |
You can manage cookies through your browser settings. Note that disabling certain cookies may affect website functionality.
6. Third-Party Services & Data Sharing
We use the following trusted third-party services to operate our website and deliver services. Each has its own privacy policy:
| Service | Purpose |
|---|---|
| Google Analytics | Website traffic analysis |
| Google Ads / Google Tag Manager | Advertising & conversion tracking |
| Meta (Facebook) Pixel | Remarketing & campaign measurement |
| Stripe / PayPal | Secure payment processing |
| WordPress / WPEngine | Website hosting & content management |
| Cloudflare | Security, CDN, and performance |
We never sell your personal information to any third party. We share data with the above services only as necessary to operate our business. We may disclose personal information if required by law, court order, or government authority.
7. Cross-Border Data Transfers
Some third-party services (Google, Meta, Stripe, etc.) may store or process your data in the United States or other countries outside Canada. Data stored in the US is subject to US laws, including potential government access under the US CLOUD Act. We ensure all third-party service providers have appropriate data protection agreements in place. By using our website, you consent to this cross-border transfer of your information.
8. Data Retention
We retain personal information only as long as necessary for the identified purpose:
- Contact form inquiries: up to 24 months
- Client project records & invoices: 7 years (required by Canada Revenue Agency for tax purposes)
- Marketing contact lists: until you withdraw consent
- Analytics data: as per Google Analytics retention settings (26 months by default)
After the applicable retention period, data is securely deleted or anonymized.
9. How We Protect Your Information
We implement appropriate technical and organizational safeguards including:
- SSL/TLS encryption (HTTPS) for all data transmitted through our website
- Restricted access — only we and authorized service providers can access your data
- Payment card data is never stored by us — processed exclusively by PCI-compliant third-party processors
- Regular security updates and monitoring of our website infrastructure
In the event of a data breach that poses a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada (OPC) as required by PIPEDA’s Breach of Security Safeguards Regulations.
10. Your Privacy Rights (PIPEDA)
Under PIPEDA, you have the right to:
- Access — request a copy of the personal information we hold about you
- Correction — request that we correct inaccurate or incomplete information
- Withdrawal of consent — opt out of non-essential data collection and marketing communications at any time
- Deletion — request deletion of your personal information where it is no longer required
To exercise any of these rights, email us at bhu1roka@gmail.com with the subject line “Privacy Request”. We will respond within 30 days and may require identity verification. If you are unsatisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.
11. Online Behavioural Advertising
We may use retargeting cookies (Google Ads, Meta Pixel) to show relevant ads to people who have previously visited our website. You can opt out of interest-based advertising at any time:
- 🇨🇦 Digital Advertising Alliance of Canada: youradchoices.ca
- Google Ad Settings: adssettings.google.com
- Facebook Ad Preferences: facebook.com/ads/preferences
Opting out stops targeted ads but does not prevent you from seeing all advertising online.
12. CASL & Email Marketing
We comply with Canada’s Anti-Spam Legislation (CASL). We only send commercial electronic messages (newsletters, promotional emails) to individuals who have provided express or implied consent. Every commercial email includes:
- Our contact information
- A clear and easy unsubscribe link
You can unsubscribe at any time by clicking “Unsubscribe” in any email or by contacting us directly. We honour all unsubscribe requests within 10 business days.
13. Children’s Privacy
Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal information from minors. If we discover that a minor has submitted personal information to us, we will delete it promptly. If you believe a minor has provided us with their information, please contact us at bhu1roka@gmail.com.
14. Third-Party Links
Our website may contain links to third-party websites (social media, partners, tools). We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policy of any third-party site you visit.
15. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. Material changes will be communicated via email or a prominent notice on our website. The “Last Updated” date at the top of this page always reflects the most recent revision. Your continued use of our website after changes are posted constitutes acceptance of the updated policy.
16. Contact Us
For any privacy-related questions, requests, or concerns, please contact our Privacy Officer:
Bhuwan Rokaha — Privacy Officer
Greater Toronto Area, Ontario, Canada
📧 bhu1roka@gmail.com
🌐 bhu1roka.com
If you are not satisfied with our response to your privacy concern, you have the right to contact the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca or by calling 1-800-282-1376.
Bhuwan