Privacy Policy

Who we are

Hey Freddy (heyfreddy.ca) is an independent guide to Fredericton, New Brunswick, built and operated by Brand Butter. It is not affiliated with the City of Fredericton. For any privacy question, contact us at [email protected].

What we collect, and why

We keep collection to the minimum needed to run the site:

• Newsletter email. If you subscribe, we collect your email address. We use double opt-in: you confirm the subscription by clicking a link, in line with Canada's Anti-Spam Legislation (CASL). We use your address only to send the weekly Fredericton email, and every email carries a one-click unsubscribe link. Delivery is handled by Resend; the list is stored on Cloudflare. If you arrive from one of our ads, we also note which ad and campaign brought you (the tracking tags in the link) alongside your subscription, so we can tell which ads work.
• Event submissions. If you submit an event, we collect the event details you enter and your email address, so a person can review the submission and let you know whether it was approved. Approved event details are published on the public events calendar.
• Ask Freddy chat. When you use the Ask Freddy assistant, the questions you type are sent to Anthropic (the provider of the Claude AI model) to generate an answer. Please do not enter personal, financial, or sensitive information into the chat.
• Shop purchases. When you buy from the Hey Freddy shop, checkout and payment are handled by Stripe — your card number never touches our systems. Stripe shares with us what we need to fulfil the order: your name, email, shipping address, and what you bought. We use it to fulfil and ship your order, send your confirmation and any follow-up about it, and keep the records the law requires. Order confirmations are sent through Resend.
• Technical logs. Like all websites, our host (Cloudflare) records standard request data such as IP address, browser type, and timestamps. We use this only for security, to prevent abuse, and to keep the site running. We also use Cloudflare Turnstile on forms to block bots, and we apply short-lived, IP-based rate limits to the chat and forms.

Analytics and advertising measurement

To understand how the site is used and to measure the shop, we run Google Analytics 4 and the Meta (Facebook) Pixel with its Conversions API, both loaded through Cloudflare Zaraz rather than as scripts on the page. These tools receive standard usage data (pages viewed, shop actions such as viewing a product or completing a purchase, and technical details like browser type). When you sign up for the newsletter and when you confirm it, we tell Meta that a sign-up happened so we can measure our ads; on confirmation this includes your email address in hashed form (scrambled one-way, so it can’t be read), which Meta uses only to match the sign-up to an ad you saw. We never send your email in readable form. We have configured Zaraz to hide your originating IP address from Google Analytics. If you use an ad blocker or your browser blocks trackers, the site and shop work exactly the same.

What we still do not do: we do not sell, rent, or trade your personal information, and we do not buy or combine outside data about you.

Cookies and local storage

Functional cookies come from Cloudflare Turnstile (telling humans from bots on forms) and from Stripe during checkout. The analytics tools above may set identifiers of their own to recognize repeat visits. The shop also uses your browser's local storage to remember your bag between visits — that stays on your device and is never sent to us.

Service providers and where data is processed

We rely on a small set of reputable providers to operate the site. Some of them process data on servers outside Canada, including the United States:

• Cloudflare, hosting, content delivery, security and bot protection (privacy policy).
• Resend, newsletter and notification email delivery (privacy policy).
• Anthropic, the AI model behind the Ask Freddy chat (privacy policy).
• Stripe, shop checkout and payment processing (privacy policy).
• Google, analytics via Google Analytics 4 (privacy policy).
• Meta, shop and newsletter sign-up measurement via the Meta Pixel and Conversions API (privacy policy).
• Google Fonts and Fontshare, which serve the site's typefaces; loading a font makes your IP address visible to those services.

How long we keep it

We keep your newsletter email until you unsubscribe (after which it is removed from the active list). Pending, unconfirmed subscriptions expire automatically within about a week. Event submissions are retained as long as needed to review and, if approved, publish the event. Order records (what was bought, and the name, email and address it shipped to) are kept as long as needed for accounting, tax, and warranty purposes. Technical logs are short-lived and rotated by our host.

Your rights

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you can ask us to access, correct, or delete the personal information we hold about you, and you can withdraw consent at any time. The fastest route for the newsletter is the unsubscribe link in any email; for anything else, email [email protected] and we will respond within a reasonable time.

Children

Hey Freddy is a general-audience city guide and is not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will remove it.

Changes to this policy

We may update this policy as the site evolves. When we do, we will change the "last updated" date above. Continued use of the site after an update means you accept the revised policy.

Questions? Reach us any time at [email protected], or through our about page. See also our Terms of Service.