Privacy Policy
Last updated: September 2026
Who is responsible for your data
Ginkgo Sustainability Inc. 760 Pacific Rd, Oakville, Ontario
For anything in this policy, including access and deletion requests, write to j.ferguson@ginkgosustainability.com.
Under the GDPR, Ginkgo Sustainability Inc. is the data controller for the information described below. Under PIPEDA, the same contact is our privacy officer.
What we collect
When you sign up for launch notifications or asset library updates:
- Your email address
- The file formats you select in the preference checkboxes
- The date and time you submitted the form
That is the whole list. We do not ask for your name, company, job title, or phone number, and there is no field on the site that accepts them. We send only what you signed up for, launch notification for the asset library, nothing broader.
Automatically, from server logs:
Our hosting and CDN providers record standard request data: IP address, browser and operating system string, referring page, the URL requested, and a timestamp. We use this only to keep the site running and to identify abuse such as scraping or denial of service attempts. We do not link it to your email address.
Through analytics, if you allow it:
We use Vercel Web Analytics to count page views and see which pages people visit. It sets no cookies and stores nothing on your device. Visitors are counted using a hash generated from the request, which Vercel discards after 24 hours and resets daily, so the same person visiting on Tuesday and Wednesday cannot be connected to one another. The data we see is aggregate: page paths, referring sites, country, browser, and device type. We cannot identify you from it.
Analytics only run if you accept them in the banner shown on your first visit. The banner defaults to off, so declining requires no action from you. You can change your choice at any time here.
What we do not collect:
We do not run advertising pixels, session recording, heatmap tracking, or cross-site trackers. We do not buy contact data from third parties. We do not collect payment information on this site.
Why we collect it, and our legal basis
If you gave email consent, you can withdraw it at any time using the unsubscribe link in any email we send, by writing to the following address: 760 Pacific Rd, Oakville, Ontario, or by sending us an email at j.ferguson@ginkgosustainability.com.
Who else sees it
We do not sell your personal information. We do not share it for cross-context behavioural advertising. We do not rent, trade, or otherwise disclose it for anyone else’s marketing.
We use the following service providers, each of which processes data only on our instructions:
- Supabase, Inc. for storing the mailing list
- Vercel Inc. for website hosting, CDN, and analytics
We will also disclose information where a court order, subpoena, or applicable law requires it, and in that case we will tell you unless we are legally barred from doing so.
Where your data is stored
Our servers and service providers are located in the United States. If you are in Canada or the European Economic Area, your data will be transferred to and stored in the US.
For transfers out of the EEA we rely on the European Commission’s Standard Contractual Clauses, which are in place with each provider listed above. You can request a copy of the relevant clauses by writing to us.
For Canadian residents: while your data is held in the United States, it is subject to lawful access requests by US courts and authorities.
How long we keep it
Email addresses and format preferences are kept until you unsubscribe or ask us to delete them, and are removed from our systems within 30 days of that request. Backups are overwritten on a rolling 90-day cycle.
Server logs are retained for 1 day, then deleted.
The hash Vercel uses to count a visitor is discarded after 24 hours and cannot identify you. The aggregate page view and referrer counts built from it are kept for 12 months, then deleted.
Cookies
This site does not use cookies. Vercel Web Analytics is cookieless. Your answer to the analytics banner is saved in your browser’s local storage, not a cookie, so it stays on your device and is never sent to our servers. Clearing your browser’s site data will reset it and the banner will ask again.
Your rights
If you are in the European Economic Area or the UK
You can request access to your data, correction of it, deletion of it, restriction of how we process it, or a copy in portable form. You can object to processing based on legitimate interests. You can withdraw consent at any time. If you think we have handled your data improperly, you can complain to your national supervisory authority, and you do not need to contact us first.
If you are in Canada
You can ask what personal information we hold about you, ask us to correct it if it is wrong, and challenge our handling of it. If our response does not satisfy you, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.
If you are a California resident
You can request the specific pieces and categories of personal information we have collected, the purposes for collecting it, and the categories of third parties we disclosed it to. You can request deletion or correction. You can opt out of sale or sharing, though we do neither, so there is nothing to opt out of. We will not discriminate against you for exercising any of these rights.
All of these requests go to j.ferguson@ginkgosustainability.com. We respond within 30 days. We may ask you to confirm you control the email address in question, which is the only verification we can do, since the email address is the only identifier we hold.
Security
Data is transmitted over TLS. Access to the mailing list is restricted to employees who need it and is protected by multi-factor authentication. No transmission or storage system is perfectly secure, and we do not claim ours is. If a breach affects your data and creates a real risk of significant harm, we will notify you and the relevant regulators within the timeframes the applicable law requires.
Children
The site is built for architecture, design, and engineering professionals. It is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has submitted an email address to us, write to us and we will delete it.
Changes to this policy
If we change how we handle your data, we will post the revised policy here with a new effective date. For material changes affecting people already on the mailing list, we will email you before the change takes effect.
Contact
Ginkgo Sustainability Inc.
760 Pacific Rd, Oakville, Ontario
j.ferguson@ginkgosustainability.com