Cookie Policy

Last Updated: 30 December 2025

1. Introduction

This Cookie Policy explains how Kelvin Wong ("we", "us", "our") uses cookies and similar tracking technologies when you visit our website at kelvinwong.ca (the "Site").

This policy should be read in conjunction with our Privacy Policy and Terms of Service, which provide additional details about how we collect, use, and protect your personal information.

This Cookie Policy complies with:

• Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and the Consumer Privacy Protection Act (CPPA)
• The General Data Protection Regulation (GDPR) and ePrivacy Directive for visitors from the European Economic Area (EEA), UK, and Switzerland
• The California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA)

2. What Are Cookies and Similar Technologies?

Cookies are small text files placed on your device (computer, smartphone, or tablet) when you visit a website. They help websites remember information about your visit, such as your preferences and previous actions.

Similar technologies we use include:

• Web beacons/pixels: Small graphic images embedded in web pages or emails that track whether content has been accessed
• Local storage: Technology that allows websites to store data locally on your browser
• Session storage: Temporary storage that expires when you close your browser

Throughout this policy, we use "cookies" to refer to cookies and all similar tracking technologies.

3. Why We Use Cookies

We use cookies for the following purposes:

Essential Operations

• Enabling basic site functionality and security
• Remembering your privacy preferences and consent choices
• Maintaining session state as you navigate the Site

Analytics and Performance

• Understanding how visitors use our Site
• Identifying technical issues and improving Site performance
• Analyzing traffic patterns and user behavior in aggregate

Future Use Cases

• Customer relationship management (when implemented)
• Email marketing campaign effectiveness (when implemented)

4. Categories of Cookies We Use

4.1 Strictly Necessary Cookies

These cookies are essential for the Site to function and cannot be disabled without severely affecting your ability to use the Site.

Examples:

• Cookie consent preferences
• Security and authentication cookies
• Load balancing cookies

Legal Basis (GDPR): Legitimate interests in operating the Site

Legal Basis (CPPA/PIPEDA): Necessary for service provision

Retention: Session-based or up to 1 year

4.2 Analytics Cookies

We use Google Analytics to understand how visitors interact with our Site. Google Analytics uses cookies to collect information about your use of the Site in an anonymized, aggregated form.

Information Collected:

• Pages visited and time spent on pages
• Referring website or search terms
• Browser type, device type, and operating system
• General geographic location (city/country level)
• IP address (anonymized)

Data Processor: Google LLC (USA)

Privacy Shield/Adequacy: EU-U.S. Data Privacy Framework participant

Retention: Up to 26 months

Your Rights: You can opt out using the Google Analytics Opt-out Browser Add-on

Legal Basis (GDPR): Consent

Legal Basis (CPPA/PIPEDA/CCPA): Consent (analytics are not strictly necessary)

For more information, see Google's Privacy Policy.

4.3 Functionality Cookies

These cookies enable enhanced functionality and personalization but are not essential.

Examples:

• Remembering your language or region preferences
• Remembering form inputs to improve user experience

Retention: Up to 1 year

Legal Basis (GDPR): Consent

Legal Basis (CPPA/PIPEDA/CCPA): Consent

4.4 Third-Party Service Cookies

Formspree (Form Processing) When you submit forms on our Site, Formspree processes your submission. Formspree may use cookies for spam prevention and service functionality.

Data Processor: Formspree, Inc. (USA)

Information Collected: Form submission data, IP address, timestamp

Retention: Per Formspree's privacy policy

More Information: Formspree Privacy Policy

Future CRM Implementation When we implement a CRM tool, we will update this policy to reflect:

• The specific CRM provider
• What data is collected and shared
• Retention periods
• Your rights regarding this data

5. How Long Cookies Remain on Your Device

Session Cookies: Deleted when you close your browser

Persistent Cookies: Remain on your device for a set period (from days to years) as specified by each cookie

Our Retention Approach:

• Essential cookies: Up to 1 year
• Analytics cookies: Up to 26 months (Google Analytics default)
• Preference cookies: Up to 1 year
• We regularly review and minimize retention periods

6. Your Rights and Choices

6.1 Cookie Consent Management

When you first visit our Site, you'll see a cookie consent banner allowing you to:

• Accept all cookies
• Reject non-essential cookies
• Customize your preferences by category

You can change your consent preferences at any time by clearing your browser cookies and revisiting the Site.

6.2 Browser Controls

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer:

• Chrome: Settings > Privacy and security > Cookies and other site data
• Firefox: Settings > Privacy & Security > Cookies and Site Data
• Safari: Preferences > Privacy > Cookies and website data
• Edge: Settings > Cookies and site permissions

Note: Blocking all cookies may affect Site functionality.

6.3 Additional Rights

For EEA/UK Visitors (GDPR):

• Right to access your data
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with your supervisory authority

For Canadian Visitors (PIPEDA/CPPA):

• Right to access your personal information
• Right to challenge accuracy and completeness
• Right to withdraw consent
• Right to request deletion
• Right to file a complaint with the Privacy Commissioner of Canada

For California Residents (CCPA/CPRA):

• Right to know what personal information is collected
• Right to know whether personal information is sold or shared
• Right to opt out of sale/sharing of personal information
• Right to request deletion
• Right to correct inaccurate information
• Right to limit use of sensitive personal information
• Right to non-discrimination for exercising your rights

We do not sell or share your personal information for cross-context behavioral advertising.

To exercise these rights, contact us at: code@kelvinwong.ca

7. International Data Transfers

Our Site is hosted by Dreamhost in Portland, Oregon, USA. When you use our Site:

• Your data may be transferred to and processed in the United States
• Google Analytics (USA) and Formspree (USA) also process your data
• These transfers are protected by appropriate safeguards including:
  • EU-U.S. Data Privacy Framework participation (Google)
  • Standard Contractual Clauses where applicable
  • Your explicit consent for non-essential cookies

8. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature. Our Site does not currently respond to DNT signals because there is no industry-standard interpretation. However, you can control cookies through your browser settings.

9. Children's Privacy

Our Site is not directed to children under 16 (or under 13 in the United States). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Changes to This Policy

We may update this Cookie Policy to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. Material changes will be communicated through:

• A prominent notice on our Site
• Email notification (if you're subscribed)
• Updating the "Last Updated" date above

We encourage you to review this policy periodically.

11. Contact Us

Data Controller: Kelvin Wong

Contact Information:

• Email: code@kelvinwong.ca
• Website: kelvinwong.ca

For Privacy-Related Inquiries:

• Privacy Commissioner of Canada: www.priv.gc.ca
• California Attorney General (Privacy): oag.ca.gov/privacy

12. Definitions

Personal Information/Personal Data: Information that identifies, relates to, or could reasonably be linked with you or your household.

Processing: Any operation performed on personal data, including collection, storage, use, and disclosure.

Data Controller: The entity that determines the purposes and means of processing personal data (Kelvin Wong).

Data Processor: An entity that processes personal data on behalf of the controller (e.g., Google, Formspree, Dreamhost).

---

13. Cookie Declaration

Nb: This table will be updated as we implement additional services and cookies.