Privacy Policy
This Privacy Policy explains how CBBSOFT Custom Built Business Software Inc. ("CBBSOFT", "we", "our", or "us") collects, uses, discloses, and protects personal information when you visit cbbsoft.com, micro-saas.ca, or contact us through those sites.
This policy applies to our public websites and website contact forms. It does not replace the privacy terms that may apply to a separate client project, product, contract, or hosted application.
1. Who We Are
CBBSOFT Custom Built Business Software Inc. is based in Vancouver, British Columbia, Canada. You can contact us about privacy questions or requests at or by mail at 621-550 West Broadway, Vancouver, BC, V5Z 0E9.
2. Information We Collect
We collect only the information we need to operate the website, respond to enquiries, protect the site, and understand how visitors use our pages.
- Contact information you provide. When you submit a contact form, email us, or call us, we may collect your name, email address, phone number, subject, message, and any other information you choose to include.
- Technical and security information. Our website, hosting provider, Cloudflare services, and contact form systems may process IP address, browser type, device information, requested URLs, date and time of access, referrer, error logs, security events, and similar technical data.
- Analytics information. If you accept analytics, we use Google Analytics 4 to collect aggregate information such as pages viewed, referring websites or campaigns, approximate location, device/browser type, performance information, and interaction events such as contact-form submissions or CTA clicks. We do not use analytics to collect the contents of contact form messages.
- Cookie and local storage choices. We store your cookie/analytics preference in your browser so the website can remember your choice.
3. How We Use Information
We use personal information for the following purposes:
- to respond to enquiries and provide information about our services;
- to operate, maintain, secure, and troubleshoot the website;
- to reduce spam, abuse, fraud, and automated form submissions;
- to understand website traffic, content performance, and lead-generation activity;
- to improve our website, services, accessibility, and visitor experience;
- to keep business records and meet legal, regulatory, or contractual obligations.
4. Cookies, Local Storage, and Analytics
Our website uses a small amount of browser storage for essential site preferences. The cookie notice choice is stored as cbbsoft_analytics_consent in local storage and as a cookie. This preference is used only to remember whether you accepted, declined, or dismissed the notice, and it is set for up to one year.
With your consent, we use Google Analytics 4 to understand traffic and improve the site. Analytics may include page views, visits, referring sources, campaign parameters, approximate location, device/browser type, page performance, and non-sensitive events such as clicking a contact button or successfully submitting the contact form.
Google Analytics may set first-party analytics cookies and process device/browser information, IP address, and on-site activity to provide measurement reports. Google Analytics does not log or store IP addresses for GA4 properties. We have disabled Google Signals and ad personalization signals in the website tag unless and until we add a separate advertising consent flow.
We do not sell website analytics data, use it for behavioural advertising, or use analytics to read contact-form message contents. Analytics loads only after you choose "Accept analytics cookies" in the cookie notice.
You can decline optional analytics in the cookie notice. You can also clear this site's cookies and local storage in your browser to reset your choice.
5. Contact Form and Anti-Spam Protection
Our contact form is protected with Cloudflare Turnstile to help confirm that submissions come from real people and to reduce spam. Turnstile and related Cloudflare services may process technical signals such as IP address, browser/device characteristics, and challenge-response data for security purposes.
Contact form submissions are sent to a Cloudflare Worker endpoint and then delivered to us using Amazon Web Services Simple Email Service (AWS SES). Please do not include sensitive personal, financial, medical, or confidential information in a website contact form unless we have specifically requested it.
6. When We Share Information
We do not sell personal information. We may share or make information available only as needed for the purposes described in this policy, including with:
- website hosting, DNS, CDN, security, analytics, email delivery, and IT service providers;
- professional advisors, contractors, or service providers who help us operate our business;
- public authorities, regulators, courts, or other parties when required or permitted by law;
- another organization if reasonably necessary for a business transaction such as a merger, financing, reorganization, or sale of assets.
7. Hosting and Cross-Border Processing
The public website is hosted through HostGator and served/protected through Cloudflare. Contact form processing uses Cloudflare Workers and AWS SES. These providers may process or store information in Canada, the United States, or other jurisdictions where they or their subprocessors operate.
When information is processed outside your province or country, it may be subject to the laws of that jurisdiction. We use service providers for legitimate business and security purposes and take reasonable steps to protect personal information in our custody or control.
8. Retention
We keep personal information only as long as reasonably necessary for the purposes described in this policy, including responding to enquiries, maintaining business records, resolving disputes, improving security, and meeting legal or contractual obligations.
Contact form messages may be retained as part of our business correspondence. Technical logs and analytics records are retained according to our operational needs and the retention settings of the relevant service providers. Cookie-notice preferences are kept in your browser for up to one year unless you clear them earlier.
9. Safeguards
We use administrative, technical, and organizational safeguards appropriate to the sensitivity of the information, including HTTPS, access controls, encrypted provider secrets, spam protection, security headers, and limited access to contact submissions. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security.
10. Your Choices and Rights
You may ask to access, correct, or delete personal information we hold about you, subject to legal and operational limits. You may also withdraw consent for optional uses of information, including optional analytics, where consent is the basis for that use.
To make a privacy request, contact us at . We may need to confirm your identity before completing a request.
11. External Links
Our website may link to third-party websites, social platforms, or services. Their privacy practices are governed by their own policies, not this Privacy Policy.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page shows when the current version took effect. If we make material changes, we will provide notice appropriate to the nature of the change.
13. Applicable Privacy Laws
We aim to handle personal information in accordance with applicable Canadian privacy laws, including British Columbia's Personal Information Protection Act (PIPA) and, where applicable, Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).