Dragos Design Creative
Privacy Policy
Effective date: November 9, 2026
Dragos Design Creative Ltd. (“DDC”, “we”, “our” or “us”) designs and hosts websites and runs Beacon, our AI calling, chat and text messaging service. This Privacy Policy explains what personal information we collect, how we use it, who helps us handle it, and the choices you have. It applies to dragosdesigncreative.com, our phone lines, Beacon, and the services we provide.
We’re a Canadian company. We handle personal information in line with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws, including Quebec’s.
The short version
- We use what you share to reply to you, do the work you hire us for, and bill for it.
- We don’t sell personal information, and we never share your mobile number or texting consent for anyone’s marketing.
- Our website measures visits with AnalyticsWP, which runs on our own website, and Google Analytics. Both stay off unless you allow analytics cookies. We don’t use advertising pixels, and we don’t use Google Analytics for advertising.
- Beacon chats and calls are handled by AI, and records are saved so our team can follow up.
- You can ask to see, correct or delete your information at any time.
1. Who is responsible
DDC is responsible for the personal information we collect. Our Privacy Officer is Matt Dragos, Co-owner. You can reach him at support@dragosdesigncreative.com or 1 (866) 580-3232.
2. Information we collect
Information you give us
- Contact form: your name, email address, phone number (optional), the topic you choose and your message.
- Sign-up forms: when you ask to get started with a plan or a project: your name, business or organization, email address and phone number. For Beacon AI Calling, also the plan you choose and, if you add them, your website, type of business and a note. For a website project, also what you need, the type of website and when you’d like to launch and, if you add them, your current website, a rough budget and what the website should do. For WordPress hosting, also the plan you choose, your website address, where it’s hosted now and whether you own your domain and, if you add them, where your domain is registered and a note. We save these details when you move to the next step, even if you don’t finish booking or paying.
- Booking a call: when you book a call with us after our website project form, whether through Beacon or our booking page, we receive your name, phone number, email address, the time you choose and the project details you entered, so we have them for the call.
- Beacon chat: anything you type, such as your name, contact details, questions or project details. With an enquiry, Beacon also notes how you arrived: the page you landed on, the website that referred you, any campaign tags, and whether you came from a Google, Facebook or Microsoft ad. Beacon doesn’t use cookies.
- Phone calls, text messages and the voice demo: your phone number and caller ID name, what you say or text, and the details of any message or booking. Calls may be recorded and transcribed. Recording starts after the greeting, which tells you the call may be recorded. The website voice demo and chat keep text transcripts only, with no audio, and the voice demo only uses your microphone after you press start and allow it in your browser.
- Clients: business and billing contact details, project content and materials, website or account access you give us, approvals and support requests.
- Payments: Stripe handles our online payments, including the checkout in our hosting sign-up form. Your card details go straight to Stripe. We receive your name, email, the amount, and the card type and last four digits, never your full card number. With a hosting sign-up, we also give Stripe the details from your form, such as your website address, so your payment and your hosting setup stay together. For e-transfers from Canadian clients, we receive your name, email, the amount and any message.
Information collected automatically
- Website analytics: AnalyticsWP records each page view, including the page, the website that referred you, any campaign tags in the link, your device type and browser, and your IP address. It stores a random visitor ID in a cookie and in your browser’s local storage so return visits can be counted. If you’re signed in to our website, it also records your account email. AnalyticsWP runs on our own website, so this information stays in our website’s database.
- Google Analytics: Google Analytics records the pages you view, the website or campaign that brought you here, your approximate location (city and country), your device, browser and screen size, and actions such as scrolling, clicking a link to another website, downloading a file, searching our site or starting a form. It stores a random visitor ID in cookies so return visits can be counted. Google Analytics doesn’t store your IP address. We’ve turned off Google signals and advertising features, so this information isn’t used to show you ads. Google processes it for us, mostly in the United States.
- AnalyticsWP and Google Analytics only run after you choose Allow in our cookie banner.
- Security and server logs: our host, WP Engine, and its security provider, Cloudflare, keep standard server logs and set short-lived security cookies to keep the site running and block attacks. Failed sign-in attempts to our admin area are logged with the IP address.
- Spam protection: WP Armour adds a hidden field to our forms to catch automated spam. It doesn’t store information about you.
- Broken links: Rank Math records addresses on our site that couldn’t be found, the page that linked to them and the browser type. It doesn’t record your IP address.
Information from others
When someone refers you to us, or a business that uses Beacon passes along your enquiry, we may receive your name and contact details from them.
3. How we use your information
- Respond to enquiries, quote requests and support requests.
- Book calls and consultations, including through a connected calendar.
- Design, build, host and support the services you’ve asked for.
- Operate Beacon for us and for the businesses that use it.
- Send invoices, take payments and keep business records.
- Send service updates, such as renewals, maintenance notices and changes to our policies.
- Understand which pages are helpful and improve our website.
- Protect our website, forms and systems from spam, fraud and attacks.
- Meet legal, tax, regulatory and phone carrier requirements.
We only send marketing emails if you’ve agreed to receive them or Canadian anti-spam law otherwise allows it. Every marketing email includes a way to unsubscribe.
Beacon uses AI to answer questions, take messages and summarize conversations. We don’t use AI to make decisions about you that have legal or similarly significant effects. A person on our team reviews enquiries and follows up.
4. Beacon AI calling, chat and voice
Beacon is our AI communication service. On our website, the Beacon chat button appears on every page, a chat panel is built into our Contact and Beacon Chatbots pages, and a voice demo appears on our Home and Beacon AI Calling pages. Beacon also answers our phone numbers. It can answer questions, take a message, book a call with our team, or transfer you to a person.
To understand and respond to you, conversations are processed by the providers listed in section 8. Call and chat records, including recordings, transcripts, summaries and contact details, are kept in Beacon’s private dashboard so our team can review them and follow up. AI responses can be incomplete or wrong, so anything important, such as a price, a booking or a project commitment, is confirmed by a person on our team.
How long we keep calls, chats and email copies
Calls to a business that uses Beacon, including DDC, may be recorded and transcribed, and the greeting tells you so at the start of the call. Website chats, including voice chats on a website, are saved as text only. Recordings, transcripts and chats are stored in that business’s private Beacon dashboard and are deleted automatically after its storage period, usually 90 days. A business may keep a specific conversation longer, for example to follow up with you, until it deletes it.
After a call or a text message, Beacon may email the business a short summary with your phone number and caller ID name, or a copy of the text you sent. Some of these emails may also include part or all of the conversation, such as a transcript. These email copies stay in the business’s inbox until someone deletes them, so the automatic deletion above does not apply to them.
We send Beacon emails through Proton Mail, an encrypted email service, and our own mailboxes are stored encrypted with Proton. When an email goes to an address with another email provider, that provider’s own security practices apply to its copy.
You can ask us to delete your recordings, transcripts or emails about you at any time using the contact details in section 16.
5. Text messages (SMS)
We may collect your mobile phone number when you submit a form, call us, request information, book a consultation, request a quote, become a client, verbally agree to receive follow-up, use our chat, or otherwise provide your phone number.
By opting in to receive SMS messages, you agree to receive text messages related to customer care, appointment scheduling, missed-call follow-up, booking links, appointment reminders, quote requests, support updates, service updates, and other service-related communication.
SMS consent is voluntary and is not required as a condition of purchase. Message frequency may vary. Message and data rates may apply. You may opt out at any time by replying STOP, and you may request help by replying HELP or by contacting us at support@dragosdesigncreative.com or 1 (866) 580-3232.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. Information may be shared with service providers, subcontractors, or technology providers only as needed to operate our business, deliver the requested services, support SMS functionality, comply with legal or carrier requirements, or protect our rights.
6. Businesses that use Beacon
When a business uses Beacon to talk with its own customers, that business decides what information is collected and how it’s used. We process that information on the business’s behalf to provide the service. Messages may identify the business and say they’re sent via Beacon, for example: “Sent on behalf of Precision Painting via Beacon. Reply STOP to unsubscribe.”
Each business is responsible for its own privacy policy, customer consent and compliance. If you have a question about how a business uses your information, please contact that business first. We’ll help where we can.
7. Cookies and similar technologies
Cookies are small files a website stores in your browser. We keep them to a minimum.
| Cookie or storage | Set by | Why | How long |
|---|---|---|---|
| unique_session_id (cookie and local storage) | AnalyticsWP, on our website | Counts visits and return visits | Cookie 1 year; local storage until cleared |
| _ga, _ga_KMNZHWTJG3 | Google Analytics, on our website | Counts visits and return visits, and shows how people use the site | 2 years |
| ddc_cookie_consent | Our website | Remembers your cookie choice | 12 months |
| cf_clearance, __cf_bm, _cfuvid | Cloudflare, through our host | Security and bot protection | Up to 1 year, 30 minutes, and the end of your visit |
| wordpress_logged_in_*, wordpress_sec_*, wp-settings-* | WordPress | Keeps our team and clients signed in | Only set when you sign in |
| YouTube cookies | YouTube (Google), on project pages with videos | Plays the video, plus YouTube’s own purposes | Set by YouTube |
| Rumble cookies and storage, including __cf_bm and Google Analytics | Rumble, on project pages with Rumble videos, only after you press play | Plays the video, plus Rumble’s own purposes such as view counts and ads | Set by Rumble and Google |
| __stripe_mid, __stripe_sid | Stripe, only when you reach the payment step of a hosting sign-up | Fraud prevention for payments | 1 year and 30 minutes |
| beacon-chat:invitation:ddc, beacon-chat:acquisition:ddc:* (session storage) | Beacon | Remembers whether the chat greeting was shown, and how you arrived (landing page, referring site, campaign tags) so an enquiry can be credited to the right source | Until you close the tab (arrival details are reused for up to 30 minutes) |
Analytics cookies are only set after you accept them in our cookie banner. If your browser sends a Global Privacy Control signal, we treat it as declining analytics and don’t show the banner. Project videos use YouTube’s privacy-enhanced mode, so YouTube doesn’t set cookies until you press play. Some project videos are hosted on Rumble. Nothing loads from Rumble until you press play on one of them; its player then sets its own cookies and may load Google Analytics and advertising. You can change your choice at any time with the Cookie settings link at the bottom of every page. Choosing No thanks stops both analytics tools and deletes their cookies from our website. You can also block and delete cookies in your browser settings. Blocking the essential cookies may stop parts of the site from working.
8. Who we share information with
We don’t sell or rent personal information. We share it only with service providers who help us run our business, and only what they need.
| Provider | What they do for us |
|---|---|
| WP Engine and Cloudflare | Website hosting, security and performance |
| Website analytics through Google Analytics, only if you allow analytics cookies | |
| Proton | Our email: hosts our mailboxes and sends email from our website and Beacon, including contact and sign-up form messages |
| Stripe | Online payments, including the checkout in our hosting sign-up form, and our billing portal |
| Make | Automations: starting a Stripe checkout from our hosting sign-up form and sending the confirmation email after you pay |
| OpenAI, Telnyx, LiveKit and Make (Beacon’s providers) | AI that understands and answers calls and chats (OpenAI), phone calls and text messages (Telnyx), website voice connections (LiveKit), and automations such as call recap emails (Make) |
| Calendar and CRM tools | Booking calls and keeping track of enquiries |
| YouTube and Rumble | Showing project videos |
| Accountants, lawyers and other advisers | Professional services, under confidentiality |
We may also disclose information when the law requires it, to protect our rights, our clients or the public, or as part of a sale or reorganization of our business, where the new owner agrees to protect it as this policy describes.
9. Where your information is stored
Our service providers store and process information in Canada, the United States and other countries, including Switzerland for Proton. We choose providers that protect personal information. Information stored outside Canada is subject to the laws of that country and may be accessible to its courts and authorities.
10. How long we keep it
| Information | How long we keep it |
|---|---|
| Contact form messages, sign-up requests and enquiry emails that don’t lead to work | Up to 2 years after our last conversation |
| Client project and billing records | While you’re a client, then as long as Canadian tax law requires (usually up to 7 years) |
| Beacon call recordings, transcripts and chat conversations | Usually 90 days, then deleted automatically. We may keep a specific conversation longer to follow up on your request, and we’ll delete it if you ask. |
| Beacon email copies (call summaries and copies of text messages) | Until someone deletes them from the inbox. The 90-day automatic deletion doesn’t apply to them. |
| Website analytics | 14 months |
| Server and security logs | As set by our hosting and security providers |
| Text message opt-outs | As long as needed to honour your choice |
Our providers keep their own copies for a limited time: OpenAI and Make for up to 30 days, and LiveKit for 30 days for test calls only. Telnyx keeps basic call logs (phone numbers and times), and bookings stay in our calendar. When we no longer need information, we delete it or remove anything that identifies you.
11. How we protect it
We use safeguards suited to the sensitivity of the information, including encrypted connections (HTTPS), access limited to people who need it, sign-in protection for our admin area, and private storage of form messages. No system is perfectly secure. If a breach creates a real risk of significant harm to you, we’ll tell you and report it to the Privacy Commissioner of Canada, as the law requires.
12. Your choices and rights
- Ask what personal information we hold about you and how it’s been used.
- Ask us to correct information that’s wrong or incomplete.
- Ask us to delete your information, unless we have to keep it for legal or business records.
- Withdraw your consent, for example to texts or marketing emails. If a service needs certain information to work, we’ll explain.
- Turn off analytics cookies with the Cookie settings link, or stop texts by replying STOP.
- If you live in Quebec, you can also ask for your information in a commonly used format, and ask about information used in any automated decision.
To make a request, contact our Privacy Officer at support@dragosdesigncreative.com. We may need to confirm your identity first, and we’ll reply within 30 days.
If you’re not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada, or in Quebec, the Commission d’accès à l’information. If you live outside Canada, you may have other rights under your local law, and we’ll help you use them.
13. Children
Our website and services are meant for businesses and adults. We don’t knowingly collect personal information from children under 16. If you believe a child has given us information, contact us and we’ll delete it.
14. Other websites
Our portfolio links to client websites, and our site links to services such as Stripe, YouTube and Rumble. Those websites have their own privacy practices, which this policy doesn’t cover.
15. Changes to this policy
We may update this policy as our services or the law change. We’ll post the new version here with a new effective date. For significant changes, we’ll also add a notice on our website or contact clients directly.
16. Contact us
Dragos Design Creative Ltd.
Privacy Officer: Matt Dragos, Co-owner
Email: support@dragosdesigncreative.com
Phone: 1 (866) 580-3232
Ontario, Canada