Privacy policy

Last updated September 29, 2026

Who I am

This website and the client portal are run by me, Megan Nakazawa, through Megan Nakazawa Consulting, a sole proprietorship in Summerland, British Columbia, Canada. When this policy says “I” or “me”, that’s who it means. It covers megzynak.ca and the client portal at clients.megzynak.ca.

Questions about your information go to me directly: hello@megzynak.ca.

What I collect

• What you type into forms. When you send an enquiry, an application, a quote request or a checkout questionnaire on the services pages, I get what you enter — usually your name, email, business details and your answers.
• Your portal account. If you’re a client, your portal account is your email address. You sign in with a one-time link I email you, so there’s no portal password to store.
• Your project. Project details, the files and links you upload, and the messages, feedback and replies you send me through the portal.
• Logins you choose to save. If you save a login for a platform I need to work in, it’s encrypted (AES-256-GCM) before it’s stored. Only I can open it, every time it’s opened is logged, and it’s deleted automatically when your project is marked complete.
• Payments. Card payments are handled by Stripe. Your card number goes to Stripe, never to me or the portal. I keep your invoices and payment records, and any e-transfer notices you send.

How I use it

To reply to you, do the work you’ve hired me for, run the client portal, invoice you and keep proper business records, and meet my legal obligations (like tax). That’s it.

I never sell your information. I don’t send you marketing email unless you’ve asked for it. The portal does send project emails — for example, a daily summary of anything waiting on you. If you’d rather not get those, tell me and I’ll turn them off.

Who helps me handle it

I use a few service providers to run my business. Each one only gets what it needs to do its job:

• Vercel hosts the website and portal.
• Supabase holds the portal’s database and uploaded files, and handles sign-in.
• Stripe processes card payments and sends invoices.
• Zoho Books is my bookkeeping — paid invoices are recorded there. Zoho Mail is my email.
• Resend sends the portal’s emails.
• ClickUp is where I manage projects — your project tasks, requests and replies live there too.
• Calendly handles booking if you book a call with me.

Some of these providers store data outside Canada, including in the United States, where it may be subject to local law. They handle it under their own privacy terms.

Cookies

The only cookies I use are the ones that keep you signed in to the client portal. There’s no advertising or analytics tracking on this site or the portal.

How long I keep it

• Files you upload to a project are deleted 30 days after the project is marked complete, unless we’ve agreed otherwise.
• Saved logins are deleted when the project is marked complete.
• Financial records (invoices, payments) are kept as long as tax law requires — in Canada, generally six years.
• Everything else is kept only as long as I need it for the reasons above.

Your rights

Under Canadian privacy law — the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia’s Personal Information Protection Act (PIPA) — you can:

• ask what personal information I have about you, and get a copy;
• ask me to correct anything that’s wrong;
• withdraw your consent to me using it. If I need that information to do your project or bill you, withdrawing it may mean I can’t keep working together, and I’ll still keep what the law requires me to.

To ask, email hello@megzynak.ca. I may need to confirm it’s really you before I share anything.

If you’re not happy with how I’ve handled your information, tell me first and I’ll try to sort it out. You can also complain to the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for British Columbia.

Keeping it safe

Your portal is only reachable by you and me, access to the database is locked down by account, saved logins are encrypted, and I use reputable providers. No system is perfectly secure, but I take reasonable care, and if something ever goes wrong that affects your information, I’ll tell you.

Children

This site and the portal are for businesses. They aren’t meant for children under 16, and I don’t knowingly collect their information.

Changes

If I change how I handle your information, I’ll update this page and the date at the top. For bigger changes that affect current clients, I’ll let you know.

Contact

Megan Nakazawa Consulting, Summerland, British Columbia, Canada · hello@megzynak.ca