Privacy Policy

Last updated October 22, 2026

What we collect through this website and when we talk with you, why we collect it, and the choices you have.

Who we are

Thirteenth Studio builds websites, Google profiles, missed-call automation and ads for owner-run local businesses. Gavyn Asuchak is the person responsible for privacy here.

What we collect and why

When you book a call: your name, business name, email and phone number, your website if you add it, and any note you leave. We also note your time zone so the times show correctly, and if you booked from your business check, we link that report to your booking and copy what it found (like your town, Google rating and reviews, address and Google Maps link) onto your file with us. We use it to hold the call, send your invite and follow up. Once you book, we also prepare a check of your business from public information, to go through on the call. If we have your website, that check runs it through Google’s speed test and looks its web address up in the public domain register (rdap.org).
When you send a message: your name, email, your business name and phone number if you add them, and your message. We use it to reply. If you leave a phone number, we also save your details and message on file with us so we can call you back.
When you use the free business check: the business details you type in (like its name, town and website), and the report we make from public information about that business — its website, its Google listing, its email setup and other things anyone can see online. We only look at what’s public. To make the report, we run its website through Google’s speed test (PageSpeed), and look its web address up in the public domain register (rdap.org). If you leave the website out, we may also try a few likely web addresses made from the business’s name. If you came from one of our ads, we note which ad it was (a short code in the link, like “a”), so we can tell which ads help. That code comes from the link itself, not from a cookie, so it’s kept with the report whatever you pick on the cookie notice, and we don’t share it with anyone. If you ask us to call you about the report, we also keep the name and phone number you leave.
Calls and emails with our team: notes of what was said, so we can pick up where we left off. Calls with our team may be recorded for training and quality.
On our video call: the numbers you share about your business (like jobs a month and what a typical job is worth), your answers to our questions, and any screenshots we take of your public Google listing or website are kept in our CRM with your plan, so we can show you your own copy; only our team sees them.
Public business details: to reach businesses we might be able to help, we use business contact details that are already public, like the name, phone number and website on a Google listing. We may also show a business a sample website page with its public name, town, phone and Google rating filled in. Those details travel in the page’s link only: the sample page doesn’t store them, says it’s a sample, and is hidden from search engines.
If you become a client: what you share with us to do the work — your onboarding answers (like your business details, the email addresses you want us to set up and the job software you use) — your business’s legal name and address, and your signed agreement. We also keep which steps you’ve marked done, told us you don’t have yet, or asked for help with, so we can help you finish. If we set up texting for you (our missed-call text-back), we also ask for your business number (CRA Business Number or EIN), your legal business name and your registered address, because phone companies make every business that sends texts register first. We only use them for that registration, which goes through our texting provider to the phone companies. When you sign, we record the name, title and email you type, the time, your internet address and your browser, so the signature can be checked later. Payments are handled by Stripe — we never see or store your card number. If you pay us another way (like an Interac e-Transfer), we note the amount, the day and how it was paid.
Our feedback form: if you’re a client and fill in our feedback form, we keep your rating, your words, the permissions you ticked, your typed name, and the time, internet address and browser it was sent from, as a record of what you agreed to. We use your words, name or business name only in the ways you ticked, and you can take that permission back any time by emailing gavyn@thirteenthstudio.net.
Forms on websites we build: some websites we build for our clients send their contact or quote form to us. When you use one, we receive what you type (your name, contact details and message), keep it for 12 months, and pass it to that business so they can answer you — by email if they’ve asked us to. We don’t use it for our own marketing. When a message comes in through one of those forms, a short notice with your name, contact details and the start of your message goes to a private Discord channel only our owner can see.
To stop spam: a scrambled (hashed) version of your internet address, kept for up to a day — never the address itself.
Website analytics: Google Analytics counts visits and shows us which pages help people, using cookies (see our Cookie Policy). It doesn’t tell us who you are, and you can switch it off any time. In Europe, the UK, Switzerland and Quebec it only starts once you press OK.
Measuring our ads: we run ads on Facebook and Instagram, and the Meta Pixel tells Meta whether they bring visitors who look at our pages, finish a business check, book a call or send a message. It never sends what you type into a form, and it doesn’t load on business check reports. It follows the same cookie choice as analytics: in Europe, the UK, Switzerland and Quebec it only starts once you press OK, and No thanks switches it off.

Who we share it with

We don’t sell your personal information, and we don’t share it for advertising. We use a few service providers to run things, and they only use it to provide their service to us:

Vercel — hosts the website
Supabase — our database
Google — email, calendar invites, Google Meet, website analytics, and for the business check, testing its website’s speed
Meta (Facebook and Instagram) — measuring whether our ads bring visitors, as described above
Stripe — payments
Telnyx and Twilio — phone calls and text messages
Discord — when you book a call or ask us to call you, your name, business name, phone number or email, and your booking go to a private Discord channel only our owner sees, so we can call you back quickly (and if a card payment is disputed, the business name and the amount; and when a message comes in through a form on a client’s website we built, the short notice described above)
rdap.org — the public domain register, for when a business’s web address was registered and when it’s due to renew
Apple — our own private iCloud storage, for the weekly backups of our records

These providers may store information in Canada, the United States or other countries, where the law may let authorities there see it. We also share information if the law requires us to.

How long we keep it

As long as we need it for the reasons above — usually while we’re talking or working together — and longer where the law says business records must be kept (like tax records). The scrambled internet address is deleted after a day. Business check reports are kept so your link keeps working; ask and we’ll delete yours. Messages sent through a form on a client’s website are deleted after 12 months. We keep weekly backups of our records for 8 weeks, in our own private iCloud storage (Apple).

Your choices

See, correct or delete your information: ask us any time and we’ll answer within 30 days. If you ask us to delete it, we may keep a short note that you asked not to be contacted, so we don’t contact you by mistake, and anything the law makes us keep.
Stop hearing from us: reply “no” to any message, or tell us, and we’ll stop the same day.
Analytics and ad measurement: pick “No thanks” on the cookie notice, or use Cookie settings on our Cookie Policy page.

Canada and the US

We follow Canada’s privacy laws for businesses. If you’re unhappy with how we’ve handled your information, tell us first and we’ll work to put it right. You can also contact the Office of the Privacy Commissioner of Canada, or the provincial privacy commissioner where that applies.

If you’re in the US: we don’t sell your personal information or share it for targeted advertising, and wherever you live you can ask to see, correct or delete it the same way as above.

Children

This site is for business owners. It isn’t meant for children, and we don’t knowingly collect their information.

Changes

If we change this policy, we’ll update this page and the date at the top.

Contact us

For questions or privacy requests, reply to any email from us or reach us through our Contact page.

See also our Terms of Use and Cookie Policy.