Legal · Effective 24 September 2026
Privacy.
What byImprint collects, including analytics that run by default, why, where it is kept and how to turn it off.
This describes what byImprint actually does. It is not legal advice.
01
Who byImprint is
byImprint is byImprint, LLC, a Delaware company. James Hutchings runs it on his own from Squamish, British Columbia. When this notice says byImprint, it means him.
It covers byimprint.com and the work byImprint does with clients. It does not cover other companies’ websites you reach from a link here. Those have their own notices.
02
What is collected
Contact details you send. If you email or phone James, byImprint holds your name, the address or number you used and whatever you wrote.
Engagement records, if you become a client. The proposal, the answers you give at intake, the signed agreement, invoices and the documents delivered to you.
Public business information, for research. A website, a Google Business Profile, public reviews, public social profiles and public directory listings. Nothing that needs a private account, unless you provide that access for your own engagement.
Technical logs. Hosting keeps ordinary web server logs, including the IP address a request came from, the browser type and the page asked for. Your IP address is also used to rate limit public endpoints so they cannot be flooded.
byImprint never sees or stores your card number. Stripe handles that.
03
Analytics and error reports
PostHog is used to understand how people use this website. It counts visits by default. To stop it, choose “Turn off analytics” at the foot of any page, or turn on your browser’s Global Privacy Control; either stops it straight away and on later visits.
It records the pages you view, the site or search that brought you here, your browser and device type, your country and province, and the links and buttons you click. It never records what you type into a form. A random identifier is kept in your browser’s local storage for up to 13 months so repeat visits can be counted; turning analytics off deletes it. Your IP address is not stored.
If you are in Quebec, or your region cannot be determined, visits are counted without storing any identifier on your device.
When you send an enquiry or an application with analytics on, it is linked to the pages that browser viewed beforehand, so byImprint can see what was useful. Turn analytics off before sending if you prefer.
PostHog and Vercel, the website host, process this data in the United States, where it may be accessible to US courts, law enforcement and national security authorities.
Session recording, device fingerprinting and advertising trackers are not used. No visitor profile is built.
Sentry receives error reports when error reporting is switched on. An error report can include the page you were on and the technical detail of the fault.
Fonts and images are served from byimprint.com, so loading a page does not tell another company that you read it.
04
Why it is collected
To answer your enquiry. To do the work that has been agreed and hand it over. To invoice you and take payment. To keep the records tax law and contract law require. To see which pages people actually use, so the site can be made clearer.
byImprint does not sell your information, does not share it for anyone else’s marketing and does not use it to build advertising profiles.
05
Who else processes it
Vercel hosts the site and keeps the server logs. Supabase stores engagement records. Stripe handles invoices and payments. Resend sends the transactional email an engagement needs and carries enquiry messages to James. Upstash runs the rate limit that protects public endpoints. PostHog receives the analytics records described above. Sentry receives error reports. Google Workspace carries James’s email and calendar.
Each publishes its own privacy notice and its own data processing terms. byImprint sends each one the least it needs to do its job.
06
Where it is kept
The site and the services above run in data centres in the United States. If you are in Canada, the United Kingdom or the European Union, your information is transferred to the United States and held there, where it may be accessible to US courts, law enforcement and national security authorities.
Each provider publishes data processing terms covering that transfer, including standard contractual clauses where they apply.
Information travels over HTTPS. Access to the database and to the accounts above is limited to James and protected by authentication.
07
How long it is kept
Enquiries: 24 months after the last contact, then deleted.
Client records: 7 years, because tax law and contract law require it.
Analytics events: kept under the retention period set on the PostHog project. They carry no name, email or IP address.
Server logs and error reports: kept under each provider’s own retention period.
If you ask for your information to be deleted, byImprint removes what it can within 30 days and tells you plainly what it has to keep and why.
08
Your rights
You can ask to see the personal information byImprint holds about you. You can ask for a correction. You can ask for deletion, and byImprint will do it unless the law requires the record to be kept. You can ask for a copy in a portable format. You can withdraw consent for anything done on the basis of consent.
Email james@byimprint.com and say what you want. byImprint replies within 30 days.
byImprint operates from British Columbia, so PIPEDA and the British Columbia Personal Information Protection Act apply. If you are not satisfied with the answer, you can complain to the Office of the Privacy Commissioner of Canada, or to the Office of the Information and Privacy Commissioner for British Columbia.
09
Public business data
byImprint Research and the reports byImprint publishes use public sources only. byImprint does not sign in as a customer, does not get around authentication and does not use anything that needs a private account, unless a client provides that access for their own engagement.
If a business wants a correction, or wants its details taken out of something byImprint has published, email james@byimprint.com. Name the business and the page and byImprint will deal with it.
10
Machine-readable surfaces
byImprint publishes files for AI agents and crawlers: /llms.txt, /llms-full.txt, Markdown versions of several public pages and a read-only endpoint for the Model Context Protocol.
They are public, they need no sign-in and they contain no personal information. Reading one creates an ordinary server log entry and nothing else. They give information. They do not give an agent permission to send a message, spend money or commit byImprint to anything.
11
Children
byImprint works with businesses. The site is not directed at anyone under 18 and byImprint does not knowingly collect information from children.
12
Changes
This notice is effective from 24 September 2026 and replaces the version dated 13 September 2026. This update makes analytics run by default. A footer toggle turns it off, replacing the privacy preferences dialog, and the enquiry and application forms explain what a submission records.
If it changes in a way that matters to you, the effective date at the top of this page changes and the change is noted here.
13
Contact
Questions about this notice, or a request about your own information, go to james@byimprint.com.
byImprint, LLC c/o Legalinc Corporate Services Inc. 131 Continental Dr, Suite 305 Newark, DE 19713, US