Privacy
Last updated
Who we are
Nstruct hosts Shopify merchant events in Toronto and New York, including Shop & Sip, and sends the Insider and newsletter from this website. Signal (signal.nstruct.io) is our news site. The events are also described as Shopify Meetup TO/NYC. This page covers www.nstruct.io and the Google Analytics use on Signal.
Privacy questions: privacy@nstruct.io
What we collect
- Event forms: your name, email address, and Shopify store URL.
- Insider and some event lists: your email, an optional first name, and the city list you pick (Toronto or New York).
- Newsletter fields on this site: the email address you submit.
- The “Email our team” draft on the essentials page stays in your browser. If you send it, your email app delivers it. We do not store that draft on our server.
- Your cookie choice, in a first-party cookie named nstruct_consent.
- Analytics or marketing cookies from the table below, only after you allow that category.
- Connection data our host receives with a request, such as IP address, browser type, and the page address. We use that to serve the site.
Joining a mailing list sends your email to Klaviyo even if you reject cookies. That signup is the form you submitted. It is separate from the Klaviyo onsite script, which does not load unless you allow marketing cookies.
Purposes and basis
- Remember the cookie choice you made, so we can keep analytics and marketing off until you allow them.
- Register you for an event, or send email you asked for. The basis is that you gave us the details for that purpose.
- See how pages are used, with Google Analytics and Microsoft Clarity, only if you allow analytics.
- Link a visit on this site to an email you signed up with, with Klaviyo onsite tracking, only if you allow marketing.
- Deliver the site and its images. Vercel hosts the site. Some images load from Shopify’s CDN.
We do not sell personal information. Advertising storage stays off: we do not turn on Google ad cookies.
Cookies
Necessary cookies are set when you make a choice. Analytics and marketing cookies are set only after you allow that category. Signal uses the same nstruct_consent cookie and, when analytics is allowed, Google Analytics only. Signal does not use Clarity or Klaviyo onsite tracking.
| Name | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
| nstruct_consent | Nstruct | Stores your cookie choice so www and Signal can share it. | 1 year | Necessary |
| _ga | Distinguishes browsers for Analytics on nstruct.io and Signal. | 2 years | Analytics | |
| _ga_* | Keeps Analytics session state for one measurement id. | 2 years | Analytics | |
| _clck | Microsoft Clarity | Persists a Clarity user id on nstruct.io. Not used on Signal. | 1 year | Analytics |
| _clsk | Microsoft Clarity | Connects page views in one Clarity session. Not used on Signal. | 1 day | Analytics |
| __kla_id | Klaviyo | Links an onsite visit to a profile after you allow marketing. Not used on Signal. | 2 years | Marketing |
Durations are the lifetimes those providers publish. A cookie can disappear sooner if you withdraw consent or delete it in the browser. We can delete these first-party cookies from the page. We cannot delete a cookie another domain marked as HTTP-only.
Processors and transfers
These companies process information for us. They operate in the United States and in other countries where they run their services. If a European data-protection law applies, that is a transfer outside your country. We rely on our contracts with them. We do not claim a separate transfer tool beyond those contracts.
- Google. Analytics, and only after you allow analytics. The measurement id on this site is G-8DJ0XZSK7Q.
- Microsoft. Clarity, which is a Microsoft product and can use Bing infrastructure. Loaded only after you allow analytics. Not used on Signal.
- Klaviyo. Mailing-list signups when you submit a form. The onsite script loads only after you allow marketing.
- Formspree. Event and newsletter form submissions on this site.
- Vercel. Hosts the website and receives connection data needed to deliver it.
- Shopify CDN. Serves some images and files. A request there includes the usual connection data, such as an IP address. Form contents are not sent to Shopify.
Retention
The consent cookie lasts one year, then we ask again. Analytics and marketing cookies last for the periods in the table, or until you withdraw and we can delete them. We keep event and mailing-list details for as long as we need them to run the event or send the email you asked for. You can ask us to delete them. Klaviyo and Formspree also keep the copies they receive, under their own terms. We do not keep a separate copy of Analytics or Clarity recordings on our own servers.
Your rights
Write to privacy@nstruct.io to use these rights. We may need to confirm it is you. We do not charge a fee for a routine request.
Canada (PIPEDA)
You can ask what personal information we hold, ask for a correction, and withdraw consent. Withdrawing consent does not undo an email we have already sent. You can complain to the Office of the Privacy Commissioner of Canada.
Quebec Law 25
If Quebec’s private-sector privacy law applies, you can ask for access, rectification, and withdrawal of consent. privacy@nstruct.io reaches the person responsible for privacy. You can complain to the Commission d’accès à l’information du Québec. This page is not a claim that a privacy impact assessment has been filed.
GDPR and UK GDPR
If those laws apply, you can ask for access, rectification, erasure, restriction, and a copy of information you provided, and you can object to processing that is not based on consent. You can withdraw consent at any time. You can complain to a supervisory authority. We have not appointed an EU or UK representative.
CCPA
If the California Consumer Privacy Act applies, you can ask us to know, delete, or correct personal information we have about you. We do not sell personal information. We do not share it for cross-context advertising unless you turn marketing cookies on. We do not discriminate against you for using these rights.
Global Privacy Control
If your browser sends the Global Privacy Control signal, we keep marketing cookies off, including when you press Accept all. Analytics is still a separate choice. The preferences panel says so when the signal is present. We treat that signal as an opt-out of the marketing category.
How to change your choice
Use Cookie settings in the footer, or Reject all, Accept all, or Save choices on the banner. The banner is not a wall: you can keep using the site if you reject. If you turn analytics or marketing off after it was on, we delete the _ga, _clck, _clsk, and __kla_id cookies we can see, tell Clarity to stop, and reload the page. The choice lasts 365 days. If the choice format changes, we ask again.