1. Purpose and scope

This policy describes the Cinerey Studios website and related inquiry, booking, content-delivery and account workflows. Cinerey Studios is a service-area business in Edmonton, Alberta, Canada.

2. Inquiries and communications

The Contact form requests your name, email and message, with optional phone, project type, general area, services and timeline. We use inquiry information to respond and discuss requested services. The form does not enroll you in marketing. Service-related email and other communications may also form part of project records. Avoid confidential documents and unnecessary sensitive personal information.

3. Booking, payments and media delivery

Normal listing bookings and Client Login are handed to Aryeo, which provides booking, payment and media-delivery workflows. Our website requests service-catalog information server-side to display CAD estimates; this does not create an order or customer. Final booking options and charges are confirmed through Aryeo. The Contact form does not collect payment-card details. Payment methods and processing arrangements are governed by the applicable booking or checkout service.

External services have their own privacy practices. Linking to Aryeo does not mean Cinerey Studios controls Aryeo's independent collection or processing.

4. Website hosting and inquiries

Netlify hosts the independent public website and captures Contact submissions through Netlify Forms. Inquiry notifications are delivered to cinereystudios@gmail.com, and related correspondence may be retained in that business inbox. Website-to-form capture and email notification receipt have been verified.

Hosting, spam-prevention and delivery services may process technical request information, such as IP addresses and submission timestamps. Inquiry information is used to respond and manage the requested communication, not to enroll visitors automatically in marketing. Access, retention and deletion are handled through the business procedures described below.

5. Content management and authentication

The public website serves an independent approved-content snapshot. It does not give public visitors access to Studio Manager, private drafts or CMS administration.

The private Studio Manager uses Supabase for managed content, media and authorized administrative authentication. Administrative authentication and its session cookies are separate from public website visits. The existing Supabase projects are configured in Canada Central; that does not establish that all provider processing takes place only in Canada. Client booking and portal access are provided separately through Aryeo.

6. Embedded media and external services

The current public site uses iGUIDE viewers and Aryeo-supplied media, including Mux video resources. Vimeo configurations are retained, but the homepage hero is currently in image mode and Social Content is hidden; those configured Vimeo players do not load from those placements in the current snapshot. An enabled Vimeo player may load when visible under its playback settings. The iGUIDE viewer loads after a visitor activates the tour. Loaded players and external media requests can disclose technical request information; do-not-track settings and lazy loading do not guarantee that no provider data or cookies are processed.

Images, video and posters may also be delivered through Aryeo media/CDN URLs and Aryeo-supplied Mux or DigitalOcean-hosted resources. A browser requesting those resources can disclose technical connection information. These media requests are separate from the optional GA4 analytics consent control.

No Matterport viewer is assigned in the current public snapshot. If a booked service uses Matterport or another platform, its applicable provider information must also be considered. External booking, portal and social links lead to independent services with their own policies; Cinerey Studios does not control their independent privacy practices.

7. Analytics and marketing

When optional website analytics is enabled, Cinerey Studios uses Google Analytics 4 to understand how visitors find and use the website, including service and portfolio views, pricing interactions, booking-link clicks and successful Contact form responses. The analytics script and analytics cookies are enabled only after you choose to accept optional analytics. Declining does not affect booking or contacting us. You can change your choice using Analytics choices and withdraw consent to stop future collection by this integration. Your choice is remembered for up to 60 days, after which you may be asked again. Existing private aggregate reporting is separate and may remain available to authorized business users.

Google Analytics can process technical and usage information, including cookie identifiers, device/browser information and general traffic or campaign context. Google may process information outside Canada. This website's analytics event payloads are designed to exclude inquiry names, email addresses, message text, property addresses and other property details. Booking-link clicks are measured as interest rather than confirmation that a booking or payment was completed. Withdrawing consent stops future collection by this integration; it does not automatically delete information already processed by Google.

Provider operational logs, embedded-media processing and the independent practices of external booking services are not disabled by the website's GA4 setting. The old GoDaddy site's cookie or reCAPTCHA practices are not automatically adopted by this website.

8. Information sharing and processing

Verified services include Netlify for website hosting and inquiry capture; Google Gmail for business-email notifications and correspondence, and Google Analytics for optional, consent-based website usage measurement; Aryeo for external booking, client access and media delivery; Planitar/iGUIDE for interactive tours; Vimeo for currently inactive retained video configurations; and Mux or DigitalOcean-hosted resources referenced by Aryeo media. Supabase supports private management infrastructure rather than the public snapshot reader. This list identifies observed functions, not a claim of a direct contract with every underlying media provider.

Information may be handled outside Canada. Netlify's provider documentation lists US hosting infrastructure; Aryeo and Vimeo describe US and other-country processing; Google describes worldwide servers; Mux describes US and other-country processing. Planitar's policy describes cross-border processing, including Canada and the United States. These provider-wide statements do not establish the exact route or country for every individual request.

For questions about our use of service providers outside Canada, their purposes, or our related policies and practices, contact the Owner at cinereystudios@gmail.com. Provider information is available at netlify.com/trust-center/, policies.google.com/privacy, aryeo.com/resources/privacy-policy, vimeo.com/legal/privacy, goiguide.com/privacy-policy, mux.com/privacy and digitalocean.com/legal/privacy-policy. We do not promise Canada-only storage or claim unverified contractual safeguards.

9. Retention and deletion

Our contact-inquiry retention period is 12 months after the last meaningful contact. Retention is managed manually through quarterly reviews, covering applicable Netlify Forms submissions and business-email records. It is not an automatic-deletion system. Records no longer needed are identified and removed through that process.

This inquiry schedule is not applied indiscriminately to invoices, tax records, completed service orders, contracts or other records with different retention obligations. Information needed for an ongoing service, accounting requirement, complaint or legal matter may be retained under its separate documented basis and reviewed when that need ends.

Deleting a Netlify submission does not delete Gmail notifications, replies or other copies. Relevant copies must be considered separately. Provider-managed logs and backups may follow different deletion cycles; we do not promise immediate deletion from every backup or third-party system. The Terms' media-gallery hosting and archive periods are separate from contact-inquiry retention.

10. Access, correction and privacy requests

The Owner of Cinerey Studios handles privacy requests, including access, correction and deletion requests. Contact cinereystudios@gmail.com or (780) 292-3011. We may request information reasonably necessary to verify identity and clarify the request.

We assess deletion requests against the purpose of retention and applicable legal or contractual requirements. Where information must be retained for a justified requirement, that limitation is explained rather than promising deletion that cannot be performed. Records that can be removed are addressed through the applicable Netlify, email and business-record procedures.

11. Safeguards and applicable law

The website uses authenticated administrative access and separates private drafts from approved published image derivatives. These controls do not guarantee absolute security.

12. Approval and future changes

Version 1.1 is dated October 24, 2026. This policy does not represent acceptance of an earlier version.

Changes to the actual collection, use or disclosure of personal information require review and an updated notice, and consent where applicable. The Owner is the privacy contact.