Second Coat is an independent web design and technical services business operated by Scott Cornfoot in Port Dover, Ontario. Aaryn is Second Coat's Principal Engineer and leads engineering work from London, Ontario. This page explains what personal information I collect through Second Coat and what happens to it.
What I collect
Through the contact form: your name, email address, your website address if you have one, the type of work you are asking about, your message, and your preferred call window or days if you request a call.
If you email, text or phone me directly, I have whatever you send me and the email address or phone number you use to contact me.
I do not use analytics, advertising pixels or third-party tracking scripts on this website. This site does not set tracking cookies, so there is no tracking-cookie banner.
Why I collect it
To reply to you, understand what you need, prepare a quote, and deliver the work if you hire Second Coat. That is the list.
What I do not do
I do not sell your information. I do not add you to a mailing list. I do not send marketing you did not ask for.
Information is disclosed only when it is needed to handle your enquiry or deliver agreed work. That can include service providers used to receive or store the information and, when relevant, someone working with Second Coat on your enquiry or project. For technical work, that may include Aaryn. They get only what they need for that work.
Where it lives
Contact-form submissions are processed by FormSubmit so they can be delivered to my email inbox. FormSubmit says it retains form submissions for 30 days. Once an enquiry reaches me, it is also stored with my email provider.
Client project files may be stored with the hosting, cloud or file-storage providers being used for that project. Depending on the provider, information may be stored or processed outside Canada under that provider's own privacy and security practices.
How long I keep it
Enquiries that do not become projects are deleted after twelve months.
Client project, accounting and business records may be kept for up to seven years where they are needed for tax, accounting or business record-keeping. The Canada Revenue Agency generally requires required business records to be kept for at least six years from the end of the relevant tax year, and some records can require a different period.
Client website data
If you hire Second Coat, Scott or Aaryn may need access to your website, hosting, domain or other business systems to do the agreed work. That access is used only for the work you authorized. Please do not send passwords through the public contact form. If access is needed later, we will arrange it directly and tell you when it is no longer needed so you can revoke it.
If a website or system we build collects information from your customers, that information belongs to your business. You are responsible for the privacy obligations that apply to your customers and your business. I can help you put clear privacy copy in place for the site.
Your rights
You can ask what personal information I hold about you and how it has been used or disclosed. You can ask me to correct inaccurate information. You can also ask me to delete information that is no longer needed, subject to records I am required to retain for tax, accounting, contractual or other legal reasons.
Questions or complaints
Email me at scott.cornfoot@gmail.com. If you are not satisfied with how your personal information has been handled, you can contact the Office of the Privacy Commissioner of Canada.
Changes
If this page changes, the date below changes with it.
Last updated: August 6, 2026