Who we are
Secure Web Labs Inc. ("we", "us") is a Canadian company. This policy explains how we handle personal information on this website (secureweblabs.com) and in Domain Health (app.secureweblabs.com). We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and the provincial privacy laws that apply to us.
Person in charge of personal information
Our President is the person in charge of the protection of personal information at Secure Web Labs Inc. To reach them about anything in this policy, including access or correction requests, use our contact page and choose "Privacy request".
What we collect, and why
| Information | Why we need it |
|---|---|
| Your name, email address, optional company name, time zone, and password (stored only as a one-way hash) | To create and secure your account, sign you in, and send alerts and daily summaries at a sensible time |
| The domains you add, their labels, and any DKIM selectors you enter | To run the checks you asked for. The check results themselves come from public information about those domains. |
| Your plan, subscription status and billing period, and the customer reference Stripe gives us | To give you the plan you pay for. Your card details go directly to Stripe; we never see or store them. |
| IP addresses and times of sign-in attempts | To protect accounts against password guessing |
| What you write to us through the contact form (name, email address, message) | To answer you |
We only collect what we need for these purposes. We do not sell personal information, show ads, or use analytics or tracking tools on this website or in Domain Health.
Cookies
This website sets no cookies. Domain Health sets one cookie, which is strictly necessary to keep you signed in. It ends when you close your browser or after 12 hours without activity. We use no advertising or tracking cookies.
Who we share information with
We share personal information only with service providers that help us run the service, and only what they need:
- Stripe processes payments for paid plans. Stripe receives your email address and the payment details you enter on its checkout page.
- Our hosting provider operates the servers that run this website and Domain Health and send our emails.
To check your domains, our servers send standard lookups to DNS servers, domain registries and spam blocklists. These lookups include the domain name being checked, but not your name or email address.
We may also disclose information when the law requires it.
Where your information is stored
Your information may be stored or processed outside your province, including elsewhere in Canada and in the United States (for example, by Stripe). Before personal information is sent outside Canada, we assess whether it will receive adequate protection, as Canadian privacy law requires.
How long we keep it
- Account information, your domains and their check history: while your account is open. When you ask us to delete your account, we delete this information within 30 days.
- Records of sign-in attempts: 7 days.
- Billing records: as long as tax and accounting laws require.
- Contact form messages: as long as needed to answer you and follow up.
How we protect it
Connections to this website and to Domain Health are encrypted (HTTPS). Passwords are stored only as one-way hashes. Access to our systems is limited to people who need it to run the service. If a confidentiality incident creates a risk of serious injury, we will notify the people affected and the privacy regulators that the law requires us to notify, including the Office of the Privacy Commissioner of Canada.
Your rights
You can ask to see the personal information we hold about you, to correct it, to receive a copy in a commonly used format, or to have it deleted. You can also withdraw your consent, for example by closing your account. Contact us through the contact page ("Privacy request"); we answer within 30 days.
If you are not satisfied with our answer, you can file a complaint with the Office of the Privacy Commissioner of Canada or with the privacy regulator in your province.
Children
Domain Health is a service for businesses and is not intended for anyone under 14.
Changes to this policy
We will post any change on this page with a new date. If a change significantly affects how we use your information, we will also tell account holders by email before it takes effect.