Privacy Policy

This site is operated by Midway Management, an Ontario, Canada-based service that helps businesses automate their lead follow-up. You can reach us at david@midwaymanagement.ca or 519-803-6405.

This page explains what we collect from people who visit this website. If you are a client using the Midway Management service to follow up on your own leads, a separate Data Processing Agreement covers what we do with the data you and your end-users generate inside the service.

We try to collect as little as possible. Concretely:

• Contact form submissions. If you fill out our contact form, we receive the name, business name, phone number, email address, and message you provide.
• IP address (briefly). We hold your IP address in server memory for up to one hour solely to rate-limit the contact form against spam. It is never written to disk and cannot be linked back to your form submission.
• Standard request metadata. Our hosting provider (Vercel) logs the standard HTTP request information (URL, user-agent, response code, timestamp) for operational purposes such as debugging and abuse detection.

We do not use analytics, advertising pixels, or third-party tracking cookies on this site. We set no cookies of our own. If that ever changes we will update this policy and add a consent banner.

• To reply to you. When you submit the contact form we use the information to respond to your inquiry, set up an introductory call, or send you the materials you asked for.
• To prevent abuse. The temporary IP-rate-limit record protects the form from spam and brute-force submissions.
• To meet our legal obligations. We may retain records longer than below if required to respond to a legal demand or to defend a claim.

We do not sell, rent, or trade contact-form data, and we do not use it to train any AI model.

We share information only with a small number of service providers strictly necessary to operate the site and respond to your inquiry:

• Vercel (USA / global CDN) — website hosting and server-function execution.
• Resend (USA) — delivers your contact-form submission as an email to our inbox. Resend receives the fields you submitted only for the purpose of routing that one email.
• Porkbun (USA) — handles the email forwarding that routes mail sent to @midwaymanagement.ca into our inbox.

Each provider is bound by its own privacy terms and is permitted to process your data only on our instructions.

• Contact form submissions: kept for up to 24 months after our last meaningful exchange with you, then deleted.
• Rate-limit IP records: evicted from memory automatically within 1 hour.
• Hosting access logs: retained for up to 30 days per our hosting provider's default policy.

Depending on where you live (PIPEDA in Canada, GDPR in the EU/UK, CPRA in California, and similar laws elsewhere), you may have the right to:

• Access the personal information we hold about you
• Correct it if it is wrong
• Ask us to delete it
• Object to or restrict certain uses of it
• Withdraw consent at any time (with effect going forward)
• Lodge a complaint with your local privacy regulator

To exercise any of these, email david@midwaymanagement.ca from the address you used to contact us. We will respond within 30 days.

Form submissions travel over HTTPS. Our backend systems use encrypted secrets storage, hashed authentication credentials, and encryption at rest for our database. No system is perfect — if a breach affects you, we will notify you and the appropriate regulators as required by law.

We are based in Ontario, Canada. Our hosting and email providers process data in Canada, the United States, and other jurisdictions where they operate. By contacting us you consent to your information being transferred to and stored in these locations.

This site is not directed to people under 16. We do not knowingly collect information from children. If you believe a child has submitted information to us, email us and we will delete it.

We will update the date at the top whenever this policy materially changes. The current version is always the one displayed on this page.