Privacy Policy

1. Who We Are

Ragusto ("we," "us," or "our") provides website design, development, hosting, maintenance, application, domain-management, and related digital services.

Questions about this Privacy Policy may be directed to Ragusto's Privacy Officer at jacob@ragusto.com.

2. Scope of This Policy

This Policy applies when you visit https://ragusto.com, contact Ragusto, request a consultation or preview, receive or purchase services, use a Ragusto billing or support process, or otherwise interact with Ragusto.

This Policy also describes Ragusto's role when personal information is submitted through websites or applications that Ragusto hosts or supports for customers. Those customers may have their own privacy policies and may independently control the information collected through their services.

3. Personal Information We May Collect

3.1 Contact and identity information

• Name, business name, job title, email address, telephone number, and preferred contact method.
• Billing address, business address, and other information used to identify or administer a customer relationship.

3.2 Inquiry, project, and service information

• Information about a business, project goals, website or application requirements, desired features, timelines, and budgets.
• Messages, meeting notes, support requests, approvals, revisions, instructions, and records of electronic acceptance.
• Logos, text, photographs, videos, credentials, account details, and other materials supplied for a project.

3.3 Billing and transaction information

• Selected services, prices, subscription status, invoice and receipt details, payment status, transaction identifiers, and tax information where applicable.
• Payment-card information is processed by payment providers such as Stripe. Ragusto does not intend to store complete card numbers or security codes.

3.4 Domain and technical account information

• Requested domain names, registrant and administrative contact details, registrar information, renewal dates, authorization details, DNS records, and nameserver settings.
• Hosting, deployment, database, email-delivery, analytics, or other account information that a customer authorizes Ragusto to access.

3.5 Website and application usage information

• IP address, browser and device type, operating system, referring page, pages visited, date and time of access, error logs, security logs, and similar technical information.
• Cookie or similar identifiers where those technologies are implemented.

3.6 Customer Website and Application Data

Customer websites and applications may collect names, email addresses, telephone numbers, messages, appointment information, account information, uploaded content, usage information, or other data ("Customer Service Data"). The applicable customer generally determines why that information is collected and how it is used. Ragusto may process, transmit, temporarily store, or access Customer Service Data to host, secure, maintain, troubleshoot, and support the applicable service.

4. How We Collect Information

• Directly from you, your business, or an authorized representative.
• Through contact forms, email, calls, meetings, support communications, and project-management processes.
• Through Stripe and other payment or billing providers.
• Through hosting, domain, email, database, security, analytics, and infrastructure providers.
• From publicly available business sources when reasonably relevant to a prospective or existing business relationship.
• Automatically through our website and technical systems.

5. How We Use Personal Information

• Respond to inquiries and evaluate potential engagements.
• Prepare proposals, previews, estimates, product descriptions, invoices, and service confirmations.
• Design, develop, host, maintain, secure, and support websites and applications.
• Register, configure, renew, manage, and transfer domains.
• Process payments, subscriptions, one-time charges, invoices, refunds, and failed-payment recovery.
• Communicate about projects, launches, maintenance, security, billing, support, and contractual matters.
• Verify identity, authority, approvals, and payment instructions.
• Prevent fraud, abuse, unauthorized access, and security incidents.
• Diagnose errors, monitor performance, and improve services and workflows.
• Maintain accounting, tax, insurance, legal, and business records.
• Enforce agreements and establish, exercise, or defend legal claims.
• Comply with legal obligations and protect Ragusto, customers, users, and third parties.
• Send promotional communications where permitted and where any required consent has been obtained.

6. Consent and Choices

Ragusto obtains express or implied consent as appropriate to the sensitivity of the information and the circumstances. We identify relevant purposes at or before collection and seek additional consent where required for a materially different purpose.

You may withdraw consent, subject to legal, contractual, security, and operational restrictions and reasonable notice. Withdrawal may prevent Ragusto from providing services that require the information.

Service, billing, security, legal, and account-administration communications are not promotional messages and may continue while required for an active or recently concluded relationship.

7. Information Submitted Through Customer Websites and Applications

When an individual submits information through a customer's website or application, the customer generally decides what is collected, why it is collected, how it is used, who may access it, and how long it is retained. The customer's privacy policy or notice governs the customer's handling of that information.

Ragusto acts as a technical service provider when it processes Customer Service Data solely to host, transmit, secure, maintain, troubleshoot, or support a customer service. Ragusto does not use Customer Service Data for its own independent advertising or marketing unless the individual separately provides information directly to Ragusto and appropriate consent has been obtained.

Questions about a customer's use of information should generally be directed to that customer. Questions about Ragusto's handling of information as a service provider may be directed to Ragusto's Privacy Officer.

8. Cookies and Similar Technologies

Ragusto's website may use cookies, local storage, pixels, or similar technologies to operate essential features, maintain security, prevent abuse, remember preferences, measure traffic, and understand performance.

Where required, Ragusto will request consent before using non-essential analytics, advertising, or tracking technologies. Browser settings may allow you to restrict cookies, although disabling essential technologies may affect functionality.

9. Service Providers, Contractors, and Disclosures

Ragusto may disclose personal information to service providers and contractors that support payment processing, cloud hosting, databases, software development, email delivery, domain registration, analytics, security, accounting, legal advice, insurance, and customer support. The providers used may change over time and depend on the applicable service. Ragusto limits disclosure to information reasonably required for the provider's function and uses contractual, organizational, or other reasonable measures to require appropriate protection.

Ragusto may also disclose information when reasonably necessary to comply with law, respond to lawful process, investigate fraud or security incidents, enforce agreements, protect rights or safety, obtain professional advice, or complete a financing, sale, reorganization, or transfer of the business.

Ragusto does not sell personal information to data brokers.

10. Processing Outside Canada

Some service providers may process or store information outside Ontario or outside Canada. Information processed in another jurisdiction may be subject to that jurisdiction's laws and may be accessible to courts, law-enforcement bodies, or governmental authorities.

Ragusto remains accountable for personal information under its control that is transferred to service providers for processing and uses contractual, organizational, and other reasonable measures to require appropriate protection.

11. AI-Assisted and Automated Tools

Ragusto may use AI-assisted tools for limited development, design, testing, research, drafting, or support activities. Ragusto applies human review appropriate to the task and does not represent that automated output is always accurate, complete, or suitable for a particular purpose.

Unless separately authorized in writing and subject to an appropriate privacy and security arrangement, Ragusto will not intentionally submit Customer Service Data, access credentials, complete payment information, or sensitive confidential personal information to a generative-AI service. Customers and users should not submit highly sensitive information through a general inquiry or unapproved workflow.

12. Marketing Communications

Ragusto may send promotional electronic messages where permitted by law and where any required consent has been obtained. You may unsubscribe using the mechanism in the message or by contacting Ragusto.

Unsubscribing from promotional communications does not prevent Ragusto from sending invoices, payment notices, project communications, security notices, or other non-promotional messages relating to an active or prior service relationship.

13. Retention and Disposal

Ragusto retains personal information only for as long as reasonably necessary for the identified purposes and applicable contractual, legal, accounting, tax, insurance, security, and dispute-resolution requirements.

Retention periods vary according to the type of information and relationship. Residual copies may remain temporarily in routine backups until overwritten or deleted through normal retention cycles.

When personal information is no longer reasonably required, Ragusto will delete, destroy, or anonymize it, subject to lawful retention obligations and technical limitations.

14. Safeguards

Ragusto uses reasonable administrative, technical, and organizational safeguards appropriate to the sensitivity, quantity, format, and use of the information. Safeguards may include access controls, secure third-party providers, authentication measures, encryption where appropriate, backups, software updates, monitoring, and confidentiality obligations.

No system or transmission method is completely secure. Ragusto cannot guarantee absolute security.

15. Privacy and Security Incidents

Ragusto assesses and responds to actual or reasonably suspected loss, unauthorized access, disclosure, alteration, or misuse of personal information in accordance with applicable law, including applicable investigation, recordkeeping, reporting, and notification requirements.

Where an actual or reasonably suspected incident materially affects Customer Service Data processed on behalf of a customer, Ragusto will notify the affected customer without undue delay after becoming aware of the incident, subject to lawful restrictions and the information reasonably available. Ragusto may provide updates as the investigation develops. The customer remains responsible for determining and completing its own notices, regulatory filings, and remedial obligations unless the parties agree otherwise in writing.

16. Access and Correction Requests

You may make a written request to access personal information under Ragusto's control, learn how it has been used or disclosed, or request correction of inaccurate information by emailing jacob@ragusto.com. Ragusto may need to verify identity before responding.

Ragusto will respond within the time required by applicable law, subject to permitted extensions. Access may be limited where permitted or required by law, including where disclosure would reveal another person's information, confidential commercial information, or legally privileged information.

17. Children

Ragusto's own services are intended for businesses and adults who have authority to enter commercial relationships. Ragusto does not knowingly collect personal information directly from children through its own website.

18. Third-Party Websites and Services

Ragusto's website and services may link to third-party websites or use third-party platforms. Ragusto does not control and is not responsible for their independent content, security, availability, or privacy practices. Review their policies separately.

19. Changes to This Policy

Ragusto may update this Privacy Policy as services, technologies, providers, or legal obligations change. The revised version will be posted with a new effective date. Material changes may also be communicated by email or another reasonable method where appropriate.

20. Nature of This Policy

This Privacy Policy describes Ragusto's current privacy practices. It does not create contractual rights or warranties beyond those required by applicable law or expressly stated in a separate written agreement. If a customer agreement or data-processing schedule imposes a more specific obligation on Ragusto, that obligation governs the applicable customer relationship.

21. Contact and Complaints

Privacy questions, access requests, correction requests, and complaints may be sent to Ragusto's Privacy Officer at jacob@ragusto.com.

Ragusto will investigate privacy complaints and respond within a reasonable period. You may also contact the Office of the Privacy Commissioner of Canada where applicable.