Legal · Ironmark Systems
Privacy Policy
This page explains how Ironmark Systems handles personal information on this website and in our branded client portal. It describes our actual services — not a generic template.
01Who we are
Ironmark Systems is a web design and automation studio operating in Winnipeg, Manitoba, Canada. Mantesh Dhillon is the owner and the person responsible for privacy questions.
Contact for any privacy request: hello@ironmarksystems.org
This notice applies to ironmarksystems.org and the branded portal at app.ironmarksystems.org (the “Portal”). A client business that uses a Portal account may have its own privacy notice for its customers and contacts; see section 04.
02What we collect
We do not require an account to use our marketing website and we do not track its visitors across other websites. There are three main ways information reaches us:
a) The enquiry form. When you submit the form on our home page, we receive:
- Your name and email address (required)
- Your phone number, business or trade (optional)
- The service you're interested in and your budget range (optional)
- Anything you type into the project description
We use it to reply to your enquiry and, if you become a client, to discuss or deliver the project. We do not sell or rent personal information. An enquiry does not add you to a marketing list; marketing messages require consent or another basis permitted by law.
b) Portal accounts. If you are an authorized Portal user, the Portal may process your account profile, sign-in and security information, device or usage logs, and business information that you or your organization enter or connect to it. We use this to provide, secure, support, and administer the account and the services you request.
c) Anonymous website analytics. We measure which pages get visited so we know what is worth improving. This does not identify you — see section 05.
No Ironmark website cookies. This marketing website does not set cookies or write to your browser's local storage. The service providers listed below may still receive ordinary web-request information, such as an IP address, when their resources load. The Portal is a separate service and may use necessary cookies, logs, or similar technologies to provide secure sign-in and platform features.
03Third parties that receive data
Loading or using this site involves these companies. Each one is listed because your data — or at minimum your IP address — reaches it.
| Service | What it receives | Why |
|---|---|---|
| FormSubmit formsubmit.co |
Everything you type into the enquiry form | It processes the form and delivers it to our business email inbox. |
| Umami Cloud cloud.umami.is |
Anonymous page-view data. No cookies, no cross-site tracking, no profile. | Traffic analytics. |
| HighLevel / LeadConnector gohighlevel.com |
Portal account, usage, and business data entered or connected by authorized users. | Provides the branded Portal and its CRM, communication, and automation features. |
| Netlify netlify.com |
Your IP address and browser type, in standard server logs | Hosts and serves this website. |
| Google Fonts fonts.googleapis.com fonts.gstatic.com |
Your IP address, when fonts load | Serves the typefaces this site uses. |
| jsDelivr · Cloudflare CDN cdn.jsdelivr.net · cdnjs.cloudflare.com |
Your IP address, when scripts load | Serve the animation libraries (GSAP, Lenis) that run the site's motion. |
If you email us directly, or submit the form, the message is handled by our email provider in the ordinary course. Our service providers, including the Portal provider, may process information outside Manitoba or Canada. Their own terms and privacy notices also apply to their services.
04Client-account data in the Portal
Where we set up, administer, or support a Portal account for a client business, that business is responsible for the information it collects from its own customers, leads, employees, or other contacts and for providing the notices and obtaining the permissions required for its use. We access that data only as needed to provide the agreed setup, support, automation, or related services.
If your information was collected by one of our client businesses through a form, booking page, message, or other Portal feature, please send your privacy request to that business first. We will assist the client as appropriate under our agreement and applicable law.
05Analytics, in plain terms
We use Umami, a cookie-free analytics tool. It records that a page was viewed, roughly where in the world the visit came from, and what kind of device was used. It does not set cookies, does not follow you to other websites, and does not build a profile of you. We cannot identify an individual visitor from it.
06Artificial intelligence
The website enquiry form does not send what you type directly to an AI model. It goes to our inbox through the form processor described above.
We do use AI tools internally to help build websites and produce content. If you become a client and a service we provide for you involves sending your business's data to an AI provider — for example an AI receptionist that answers your calls — we will tell you which provider, what is sent, and whether it is used for training, in writing, before that service starts.
07How long we keep things
We keep enquiry and client information only as long as reasonably necessary for the purpose it was collected, to meet legal or accounting duties, resolve a dispute, or enforce an agreement. We securely delete or de-identify it when it is no longer needed. Analytics are aggregate and are not tied to you.
08Your rights
Subject to applicable law, you may ask us to:
- Tell you what personal information we hold about you
- Correct anything that is wrong
- Withdraw consent for a use of your information, where consent is the basis for that use
- Ask us to delete information we no longer need, subject to legal, contractual, and record-keeping requirements
Email hello@ironmarksystems.org. We will respond within the time required by applicable privacy law. If you are not satisfied with our answer, you may complain to the Office of the Privacy Commissioner of Canada.
09Marketing email and CASL
When we send a commercial electronic message, we follow Canada's Anti-Spam Legislation (CASL), including consent or another lawful basis where required, our identification information, and a working unsubscribe mechanism. You may opt out at any time.
10Security
This site is served over HTTPS. We keep information we control on access-controlled accounts and collect only what a project genuinely needs. No method of transmission over the internet is perfectly secure, and we will not pretend otherwise. The marketing website does not collect payment card details, government ID, or other sensitive personal information through its enquiry form.
11Children
This site is aimed at business owners and is not directed at children under 13. We do not knowingly collect their information.
12Changes
If we change what we collect or who receives it, we update this page and change the date at the top. Material changes will be dated and described here.