Privacy policy

Last updated: October 7, 2026

Who we are

Wonpost is a business systems studio based in Sault Ste. Marie, Ontario, Canada. This policy covers our website, enquiries, business correspondence and our handling of information when working with clients.

Contact hello@wonpost.com with a privacy question, request or concern.

Website visitors

Our hosting and security services process network and device information to deliver the website and protect it against abuse. We use cookieless, aggregate analytics to understand page visits and website performance. We do not use advertising pixels on this website.

The contact form uses security verification. This processes browser and network signals, including an IP address when available, to distinguish legitimate requests from automated abuse. Our submission counter stores a hash derived from an IP address and the current hour, rather than the raw address.

People who contact us

The contact form asks for your name, work email, company, role, industry, how sales happen today, approximate monthly request or order volume, and timeline. You may also provide your website, the systems you use, a description of your process and what prompted the enquiry.

We record a request identifier, submission time and status, your browser’s user agent, and the country reported with the request when available. Your enquiry is saved in our database and a copy is sent to our business inbox.

If you email us, we receive your email address, message and anything you include. Please do not send passwords, health records, payment card details or customer records through the contact form or an initial email.

We use enquiry information to understand your request, reply and follow up on the conversation. Sending a request does not subscribe you to a mailing list, authorize access to your business systems or start a paid engagement.

Clients and their systems

We process client information only to deliver and support the work covered by a written agreement. The client remains in control of its data and decides which systems and information we may access. The agreement sets out the purpose, access, responsibilities and data handling arrangements for the project.

We do not sell client data or use it to train AI models. If a project includes an AI feature, its purpose and permitted use of information must be agreed before it is enabled.

If your information belongs to an organization that has hired us, contact that organization first about your rights. We assist our clients with requests relating to the information we process for them.

Services used to run the work

We use services for website hosting, database storage, business email, security verification and aggregate analytics. Client work may also require development, monitoring, document storage or billing services. They receive information as needed for the agreed service.

We limit access to the people and services that need it for these purposes. We may disclose information when required by law or when necessary and permitted by law to address fraud, abuse or a security incident. We do not sell personal information or share it for unrelated advertising.

Retention and deletion

We keep enquiries and correspondence for as long as needed to respond, manage the resulting relationship and meet agreement or legal requirements. Retention depends on the purpose of the record. Client project information is retained, returned or deleted under the written agreement and applicable law.

You can ask us to delete an enquiry or related information by emailing hello@wonpost.com. We review the records we control, including database and email copies, and explain any information that must be retained and why.

Abuse-prevention counters use hourly periods. Expired counter records are removed when a later request is successfully saved.

Security and international processing

This website uses HTTPS. We use access controls and safeguards appropriate to the information and work involved. See Security and data for our approach to client systems. No storage or transmission method can guarantee complete security.

Information may be processed outside Canada by services used to operate the website and deliver agreed work. It may be subject to the laws and lawful access requirements of those countries. For client projects, we discuss applicable location and transfer requirements before agreeing the work.

Your rights and choices

Under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable privacy laws, you may request access to your personal information, ask how it has been used or disclosed, and request correction of inaccurate or incomplete information.

You may withdraw consent to further use, subject to legal or contractual limits, and request deletion. We will explain any limits and how withdrawing consent may affect our ability to respond or provide an agreed service.

Email hello@wonpost.com to make a request or raise a concern. We may need to verify your identity. We respond within the time required by applicable law and explain any restriction on access, correction or deletion. You may also contact the Office of the Privacy Commissioner of Canada.

Changes to this policy

We update the date above when this policy changes. If we propose a new use of personal information, we provide notice and obtain consent where required before using it for that purpose.