Privacy Policy

1. What we collect

• Contact details: name, email, phone number.
• Service address and postal code, used to price travel and to send a crew.
• Property details: bedrooms, bathrooms, property type, and any priority areas you tell us about.
• Access information: entry method, access notes, parking instructions, and where relevant an alarm code.
• Pet information, so our crews are prepared.
• Booking history, quotes, invoices, and payment records.
• Messages you send us through the portal, contact form, or email.

We do not collect information about children, and we ask that you do not send it to us.

2. Why we collect it

• To quote, schedule, and deliver the cleaning service you booked.
• To give the assigned crew what they need to reach and enter your property.
• To take payment and meet our tax and accounting obligations.
• To respond when you contact us.
• To send service emails — confirmations, reminders, receipts. These are not marketing and you cannot opt out of them while you hold an active booking.

Marketing email is separate and opt-in only. You can withdraw that consent at any time from the footer of any marketing email or by asking us directly.

3. Access codes and keys

Access notes and alarm codes are stored against your booking and are visible only to administrators and to the specific crew assigned to that visit. They are not shared with anyone else, and they are not used for any purpose other than entering your property.

Physical keys are labelled by reference number rather than by address, held in a locked store, returned on request, and destroyed when a plan ends.

4. Who we share it with

We do not sell your personal information, and we never will.

• Our own cleaners, limited to what they need for their assigned visits.
• Stripe, which processes card payments. We never see or store your full card number.
• Supabase, which hosts our database and authentication.
• Vercel, which hosts this website.
• Resend, which delivers our transactional email.
• Our accountant and, where legally required, government authorities.

Some of these providers process data outside Canada. Where that happens, it remains subject to comparable protection and to our contracts with them.

5. How long we keep it

• Booking, invoice, and payment records: seven years, as required for tax purposes.
• Access codes and key records: deleted within 30 days of your last service or plan ending.
• Contact form submissions: two years.
• Before-and-after photographs: two years, unless you ask us to delete them sooner.
• Marketing consent records: until you withdraw consent, plus two years.

6. How it is protected

Our database enforces access control at the row level, which means the system itself prevents one client's records from being readable by another — this does not depend on our application code being correct.

Documents and uploads live in private storage and are reachable only through short-lived links issued after we verify who is asking.

Payment card details never touch our servers. Stripe handles them directly.

7. Your rights

Under Canada's PIPEDA and Alberta's Personal Information Protection Act you may ask us to:

• Tell you what personal information we hold about you.
• Give you a copy of it.
• Correct anything that is wrong.
• Delete it, where we are not required by law to keep it.
• Withdraw your consent to marketing at any time.

Email sgcleaningyyc@gmail.com and we will respond within 30 days. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada or to the Office of the Information and Privacy Commissioner of Alberta.

8. Cookies

This site uses only the cookies needed to keep you signed in and to keep your booking form working as you move between steps. We do not use advertising cookies or third-party tracking.

9. Changes

If we change this policy we will update the date at the top of this page. Material changes affecting how we use information we already hold will be emailed to active clients.