Privacy policy
What celinh.com collects when you visit, chat, book a call or pay us, why we need it, who helps us run the site, and how to have your information corrected or deleted. Written in plain English.
Last updated: November 3, 2026 · Effective: November 3, 2026
Visits
Your approximate location, device, how you found us and what you looked at. Never your name, unless you give it to us.
Messages
What you type in the chat or a form reaches our team so we can reply, including an email or phone number typed before you press Send.
Never sold
No ads, no advertising cookies, no selling or renting your information. Ask, and we delete it.
01Who we are
CELINH is a web design studio. CELINH is a trade name of Winwinfix LLC, a Florida limited liability company, and our studio is based in Ottawa, Ontario, Canada. In this policy, “CELINH”, “we”, “us” and “our” mean Winwinfix LLC doing business as CELINH. We are responsible for the personal information described here (the “controller” under European law).
Our person in charge of the protection of personal information is Cedric Pey, founder. You can reach him, and anyone on our team, at hello@celinh.com.
02What this policy covers
This policy applies to celinh.com and all of its pages, including our features page and demos, brand kit, digital business cards and payment page. It also covers our website chat, contact form, call booking and the emails you exchange with us.
It does not cover other websites, including websites we build for our clients (see section 13), or third-party services you reach through a link, which have their own policies.
03What we collect when you visit
Like most websites, ours receives some information automatically when you open a page:
- Technical information: your IP address, browser and device type, operating system, screen size, language and time zone.
- Approximate location: our server reads your IP address to estimate your city, region, country, time zone and internet provider. We never collect your precise location. Our server also uses your IP address to limit spam, by counting how many messages arrive from the same address each hour.
- How you use the site: the pages and sections you view, how long you stay, how many times you have visited, the site that sent you and any campaign tags in the link (such as utm_source).
- A random visitor ID: a random code stored in your browser, so we can tell a return visit from a new one and keep your chat conversation together. It does not contain your name or any contact details.
Visit notifications. We use this information to send our team a short internal email when someone visits a page, for example “New visitor on celinh.com from Ottawa, Ontario, Canada”, with the pages and sections viewed. This helps us understand which work interests people. We send at most one notification per visitor, per page, per day. If your browser sends a Global Privacy Control or Do Not Track signal, we send no visit notification at all.
Statistics. We also use Cloudflare Web Analytics, which counts visits in aggregate without cookies and without building a profile of you.
Server logs. Our hosting and network providers (GitHub and Cloudflare) keep short-lived technical logs, including IP addresses, to deliver the site and protect it against attacks.
04What you give us
Website chat. Before your first message, our chat asks for your name, email address and phone number. Your contact details and messages are sent to our team in Telegram, where we read and answer them, and are saved in our database so the conversation continues if you come back. We also receive an email when a new visitor starts a chat.
Contact form. The form asks for your name, business, email, phone number and message, and lets you attach files. When you press Send, all of it is emailed to our team.
Unfinished messages. If you type a valid email address or phone number in our chat or form and then leave without sending, what you have typed so far may still reach us, so we can follow up on your enquiry. If you don’t want us to have it, clear the field before you leave.
Call booking. When you book a call, our booking provider Cal.com collects your name, email, the time you choose and any notes you add, and creates a calendar event with a Google Meet link. Cal.com checks our own calendars for free time; it does not see yours.
Payments. On our payment page you enter an invoice number, your email and the amount. Card payments are completed on a secure checkout page run by Stripe. We never see or store your full card number. Stripe tells us that a payment succeeded and shares limited details such as your name, email, amount, the last four digits and brand of your card, and your billing country.
Emails and project work. When you write to us or become a client, we receive whatever you choose to send, such as your business details, brand files, content and feedback.
Please don’t send us sensitive information (such as health or financial account details, or government ID numbers) through the chat or forms.
05Cookies and browser storage
celinh.com does not set advertising or tracking cookies. To work properly, it saves a few small items in your browser’s local storage. They stay on your device until you clear your browsing data:
| What | Why |
|---|---|
| Preferences (light or dark theme, accent colour, language, currency, temperature unit, cursor) | Remember the choices you made on the site. |
| Weather and exchange-rate cache | Show our Ottawa weather box and prices in your currency instantly, without asking the services again. |
| Visitor ID and visit counters | Tell a new visit from a return one, avoid duplicate visit notifications and keep your chat together. |
| Chat and form memory | Keep your conversation and the details you already gave, so you don’t have to repeat them. |
Some services we use may set their own cookies when you use them: Stripe on its checkout page (for example, to prevent fraud) and Cal.com in the booking window. Their policies explain how they use them.
06Why we use it
| Purpose | Legal basis (where the law requires one) |
|---|---|
| Answer your messages, calls and questions | Steps you ask us to take before a contract; our legitimate interest in replying to people who contact us |
| Prepare quotes, deliver projects and support our clients | Performing our contract with you |
| Take payments and keep accounting records | Performing our contract; legal obligations (tax and accounting) |
| Understand which pages and work interest visitors, and improve the site | Our legitimate interest in running and improving our business; your consent where the law requires it |
| Keep the site, chat and forms secure, and stop spam and abuse | Our legitimate interest in protecting our services |
| Comply with the law and defend legal claims | Legal obligations; our legitimate interests |
We do not sell your personal information, “share” it for cross-context behavioural advertising, or use it to make automated decisions that have legal or similarly significant effects on you. We don’t send newsletters today. If we ever do, we will only email you with your consent, and every email will have an unsubscribe link.
07Services that help us
We use trusted providers to run the site and our business. They process personal information on our behalf, only for the purposes above:
| Provider | What they do for us |
|---|---|
| Cloudflare, Inc. (USA) | Domain name and network, the small server that runs our chat, forms, visit notifications and payment requests, our database, email forwarding and cookie-free statistics |
| GitHub, Inc. (USA) | Hosting of the website files |
| Google LLC (USA) | Our email inbox (Gmail), calendar and Google Meet video calls, and the fonts used on the site (Google Fonts receives your IP address when the fonts load) |
| Telegram (Telegram FZ-LLC and affiliates) | The messaging app our team uses to read and answer website chats |
| Cal.com, Inc. (USA) | Call booking and availability |
| Stripe, Inc. and its affiliates (USA, Ireland) | Card payments. Stripe also acts independently to meet its own legal duties, such as fraud prevention and anti-money-laundering checks |
| Open-Meteo (Switzerland) and the Norwegian Meteorological Institute | Weather data for our Ottawa box. Your browser contacts them directly, so they receive your IP address, but no other personal information |
We may also share information with our professional advisers (such as lawyers and accountants), with authorities when the law requires it, or with a buyer or successor if our business is sold or reorganised, in which case this policy will continue to protect your information.
08International transfers
We are a Canadian-based studio, owned by a US company, working with clients and team members in several countries. Your information may be stored and processed in the United States, Canada, the European Union and other countries where our providers operate. Their privacy laws may differ from those where you live, and authorities there may be able to access the information under their laws.
When we transfer personal information from the European Economic Area, the United Kingdom or Switzerland, we rely on safeguards recognised by those laws, such as the EU-US Data Privacy Framework (where the provider is certified) or the European Commission’s Standard Contractual Clauses included in our providers’ terms.
09How long we keep it
- Visit notification records in our database: 40 days, then deleted automatically.
- Anti-spam counters (which include IP addresses): up to 30 days.
- Visit notification emails in our inbox: up to 24 months.
- Chat conversations, form messages and booking details: as long as we need them to answer you. If no project follows, we delete them within 24 months of our last contact with you.
- Client project files and communications: for the length of our relationship, then up to 7 years for legal and accounting reasons.
- Payment and invoicing records: 7 years, as required by tax laws.
- Information in your browser: until you clear your browsing data.
We may keep information longer if the law requires it or to resolve a dispute.
10Your choices and rights
Wherever you live, you can ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct information that is wrong or incomplete;
- delete your information, unless we must keep it by law;
- stop using it for a purpose you object to, or withdraw a consent you gave.
Email hello@celinh.com with your request. It is free. We will reply within 30 days and may ask you to confirm your identity first. You can also act yourself: clear your browser’s site data to remove everything we stored on your device, and enable Global Privacy Control or Do Not Track to stop visit notifications.
Canada. You have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) and, in Quebec, under the Act respecting the protection of personal information in the private sector (Law 25). You can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, to the Commission d’accès à l’information.
European Economic Area, United Kingdom and Switzerland. Under the GDPR and similar laws you also have the right to restrict processing and to receive your data in a portable format. You can complain to your local data protection authority (for example, in the Czech Republic, the Office for Personal Data Protection, ÚOOÚ). Where we rely on legitimate interests, you can object at any time.
United States. Depending on your state, you may have the right to know, access, correct and delete your personal information, and to opt out of its sale, sharing for targeted advertising or profiling. We do none of these, so there is nothing to opt out of, but we honour Global Privacy Control signals all the same. We will not treat you differently for using your rights. You can name an authorised agent to make a request for you.
11Security
The whole site uses encrypted HTTPS connections. Only our team can access the inbox, database and chat where your information is kept, and we protect our accounts with strong passwords and two-step verification where it is available. Our providers use industry-standard security. No system is perfectly secure, but if a breach puts your information at real risk, we will tell you and the authorities as the law requires.
12Children
celinh.com is meant for businesses and adults. It is not directed to children under 16, and we do not knowingly collect their personal information. If you think a child has given us information, contact us and we will delete it.
13Websites we build for clients
When we design, build or look after a website for a client, the client decides how its visitors’ information is used and is responsible for its own privacy policy. We handle that information only on the client’s instructions and under our agreement with the client. If you are a visitor of one of our clients’ websites, please contact that business directly.
14Changes to this policy
We may update this policy when our services or the law change. We will change the date at the top and, if the changes are significant, point them out on the site before they take effect.
15Contact us
For any question, request or complaint about your personal information:
- hello@celinh.com
- Person in charge
- Cedric Pey, founder
- Company
- Winwinfix LLC, doing business as CELINH (Florida, USA)
- Studio
- Ottawa, Ontario, Canada