Privacy, and how we use AI

Last updated 6 September 2026.

What we collect, and why

What the form in front of you asks for, and only for the reason stated on it. There are two forms on this site.

• The contact form: your name, email address, your organization if you give it, and your message — so we can read it and reply.
• The free fix-it guide: your name, email address, your company if you give it, and your consent to be emailed — so we can send you the guide, and so we can show we were allowed to.

Two things are also recorded that no field asks you for, so they are named here rather than left for you to find out. We store your browser's user-agent string, and a one-way hashed version of your IP address — the hash, never the address itself, kept so we can stop one source flooding the form. Neither can be turned back into you.

We don't buy information about anyone, and we don't run analytics or advertising trackers on this site. Our host keeps ordinary server logs for security.

We never handle your payment card. If you buy something you're handed to Stripe at the last moment and the card details go straight to them.

How we use AI

BEP is an AI-native company and you're entitled to be told that rather than work it out.

• Our outbound email is drafted by an AI agent. A human approves it before it goes.
• Replies to you may be drafted the same way, and reviewed the same way.
• An audit is an automated scan plus AI analysis, reviewed by a person before you see it.

No decision that affects you is made by AI alone. If that ever changes we'll say so here first.

What we audit, and what we don't

We audit a website only at the request of the person who owns it or is authorized to ask. We don't publish scores about anyone's website, and we don't hand out assessments of other people's sites.

What's stored on your device

This site sets no cookies. Your theme, text size and contrast choices are kept in your browser so the site doesn't forget them — they stay on your device, they never reach us, and clearing your browser data removes them.

Our typefaces are served by Google Fonts, so loading a page makes a request to Google that includes your IP address.

Where it's held, and for how long

Netlify host this site and relay what you submit; they do not keep it. Form submissions, correspondence and audit records are all held in a Supabase database. Some providers store information outside Canada, which means it can be subject to the laws of those countries.

We keep what you send us for as long as we need it for the purpose we collected it, and no longer. Unsubscribe records we keep indefinitely — that one is deliberate, because the only way to be sure we never contact you again is to remember that you asked.

Your rights

Email us and we'll act within 30 days: see what we hold about you, correct it, have it deleted unless we're legally required to keep it, withdraw your consent, or get a copy in a format you can use. No charge, and we won't treat you differently for asking.

If we get it wrong, tell us first — we'd genuinely rather fix it. You can also complain to the Office of the Privacy Commissioner of Canada, or, in Quebec, the Commission d'accès à l'information.

Who to contact

Privacy questions, requests and complaints: info@bepinc.ca.

If this page itself is hard to use, that's a bug and we want to know.