Privacy Policy

Effective Date: October 11, 2026
Last Updated: October 11, 2026

Welcome to gregj.ca (the "Website", "Service", "we", "us", or "our"), owned and operated by Greg Johns. This Privacy Policy describes how we collect, use, process, and disclose information when you visit our website, interact with our content and portfolio, or use features integrated with third-party platforms, including the Pinterest API.

We value your privacy and are committed to protecting your personal information in compliance with applicable data protection laws, including the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA), the European Union and UK General Data Protection Regulation (GDPR), and the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA).

1. Information We Collect

A. Information You Provide Directly

Communications: If you reach out via email, contact forms, or direct inquiries, we collect your name, email address, and the contents of your message.
Newsletter / Subscriptions: If you choose to subscribe to our newsletter or updates via Ghost, we collect your email address.

B. Automatically Collected Information

When you access the Website, standard server logs and analytical services may automatically record:

Device & Browser Data: Your IP address, browser type and version, operating system, language preferences, and device specifications.
Usage & Log Data: Pages visited, referring URL, time spent on pages, click data, and date/time stamps.
Cookies and Similar Technologies: Small data files stored on your browser to support site functionality, theme preferences, and traffic analysis. You can adjust your browser settings to refuse cookies, though some features may function with degraded performance.

C. Information Received from Third-Party APIs (Including Pinterest)

If our Website or related applications integrate with the Pinterest API (e.g., to display curated boards, enable Pin creation, or sync portfolio photography and digital media):

Pinterest User Information: If you authenticate or grant permission to our application via Pinterest OAuth, we may receive authorized information from your Pinterest public profile (such as your username, user ID, and profile image) and authorized access scopes.
Content & Board Data: Depending on the explicit scopes you approve, the application may access, read, or publish Pins and boards on your behalf.
API Tokens: We may securely store access tokens required to perform authorized actions. We never have access to or store your Pinterest account password.

2. How We Use Your Information

We process personal and API data for legitimate business purposes, including:

Operating the Website: Displaying our photography portfolio, motion design work, and interactive showcases.
Providing API Integrations: Permitting you to interact with, share, or publish content to external platforms like Pinterest in accordance with your explicit permissions.
Communications: Responding to questions, collaboration inquiries, or support requests.
Site Security & Integrity: Detecting, investigating, and preventing fraudulent activity, malicious requests, and unauthorized access.
Legal Compliance: Fulfilling our legal, statutory, and contractual obligations.

3. Pinterest API & Third-Party Platform Compliance

In accordance with the Pinterest Developer Terms of Service and Pinterest Privacy Policy:

Minimal Scope Access: We only request Pinterest API permissions and scopes strictly necessary to deliver the stated functionality.
No Selling or Renting of Data: We do not sell, rent, license, or monetize Pinterest user data, profile information, or Pin content to any third parties or data brokers under any circumstances.
No Unapproved Profiling or Advertising: We do not use Pinterest data for third-party ad targeting, profiling, or cross-site tracking.
Revoking Access: You may revoke this application's access to your Pinterest account at any time by visiting your Pinterest App Settings and removing permissions for our application.
Data Deletion: Upon revoking access or upon your written request, any cached user tokens or Pinterest-associated user identifiers will be permanently deleted from our systems.

For more details on Pinterest's data practices, please consult the Pinterest Privacy Policy.

We do not sell your personal data. We only share information under the following limited circumstances:

Service Providers & Infrastructure: Trusted third-party hosting, database, and infrastructure providers (e.g., our server hosting providers, Cloudflare/Nginx, and Ghost CMS) that process data strictly on our instructions and under confidentiality obligations.
Third-Party APIs: When you explicitly trigger actions that interact with third-party services (such as Pinterest, Instagram, or YouTube).
Legal Requirements: If required by law, subpoena, court order, or governmental regulation, or when we believe disclosure is necessary to protect our legal rights, property, or safety.

5. Cookies and Web Storage

Our Website uses cookies and local browser storage to:

Ensure core website functionality and fast page loading.
Maintain session state and theme preferences.

You can instruct your browser to refuse all cookies or notify you when a cookie is sent. However, disabling cookies may impact your ability to use certain dynamic features of the site.

6. Data Security and Retention

Security: We implement industry-standard technical, physical, and administrative safeguards (including HTTPS/SSL encryption, secure server firewalls, and least-privilege token access) to protect your information against unauthorized access, loss, or alteration.
Retention: We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. API access tokens and temporary cache entries are retained only while permissions remain active and valid.

7. Your Privacy Rights

Depending on your jurisdiction, you have specific rights regarding your personal information:

A. Canadian Residents (PIPEDA)

You have the right to request access to the personal information we hold about you and to challenge its accuracy and completeness.

Under the General Data Protection Regulation, you have the right to:

Access, rectify, or request the erasure of your personal data.
Restrict or object to the processing of your personal data.
Request data portability.
Withdraw consent at any time without affecting the lawfulness of processing based on consent prior to withdrawal.

C. California and US Residents (CCPA / CPRA)

If you reside in California or states with comparable consumer privacy laws:

Right to Know: You may request details about the categories and specific pieces of personal information we have collected.
Right to Delete: You may request the deletion of your personal information, subject to statutory exceptions.
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
No Sale or Sharing: We do not sell or share personal information (including personal data of minors) for cross-context behavioral advertising.

To exercise any of these rights, please contact us using the contact details provided below.

8. Children's Privacy

Our Website is not directed to individuals under the age of 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately, and we will take prompt steps to delete the information.

9. Links to Third-Party Websites

Our Website contains links to external websites, social profiles, and third-party media (such as Pinterest, Instagram, YouTube, and LinkedIn). We are not responsible for the privacy practices, content, or policies of external sites. We encourage you to review the privacy policies of any third-party sites you visit.

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our legal obligations, technical integrations (including API updates), or website features. When changes are made, we will update the "Last Updated" date at the top of this page. Your continued use of the Website after updates are posted constitutes acceptance of the revised policy.

11. Contact Us

If you have any questions, comments, or requests regarding this Privacy Policy or our data handling practices, please contact:

Name / Operator: Greg Johns
Website: https://gregj.ca
Email: [email protected]
Location: Ontario, Canada