A&B HomeFix – Privacy Policy (Toronto, Ontario)

​

A&B HomeFix respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you interact with us, including when you visit our website, request a quote, schedule service, receive maintenance or renovation work at your property, or partner with us as a general contractor, subcontractor, or supplier.

Important: This policy is designed for a private‑sector business operating in Toronto, Ontario. It is intended to align with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada’s Anti‑Spam Legislation (CASL). Where municipal or provincial rules affect our operations (e.g., permits, site access records), we follow those requirements as applicable.

​

1) Who we are & how to contact us

 

A&B HomeFix
Mailing address: Toronto, Ontario, Canada 
Phone: +1 (416) 880‑3068
Email (privacy): abhomefixtoronto@gmail.com
Privacy Officer: The individual responsible for our compliance with this Policy.

Contact via the privacy email above.

​

2) What this policy covers (scope)

 

This policy applies to personal information we handle about:

• Residential and commercial customers (e.g., homeowners, tenants, landlords, property managers), and their household contacts.

• Leads and prospects who interact with our website, social media, or ads.

• General contractors (GCs), subcontractors, and suppliers when acting as individuals or sole proprietors, and business contacts at companies.

• Job applicants and employees (limited employee privacy details are included; additional internal HR notices may apply).

• Website visitors and individuals recorded in our communications, appointment systems, before/after work photos, and, if used, telematics or CCTV.

This policy does not apply to information handled by public institutions (e.g., the City of Toronto) under their own statutes.

​

3) Key definitions

​​

• Personal information means information about an identifiable individual (e.g., name, contact details, service address, billing information, photos of a person, voice in a call recording).

• Business contact information means an individual’s name, title or position, business phone, business address, business email, and similar details used solely to communicate about their employment, business, or profession.

• Commercial electronic message (CEM) means an email, text/SMS, or similar message that encourages participation in a commercial activity (e.g., promotions, service reminders).

 

4) What we collect & why

We collect the minimum personal information necessary for the purposes below. Examples include:

​

A) Customers & household contacts

• Identity & contact: name, phone, email, service and billing addresses.

• Service details: work orders, photos/videos of job sites (e.g., before/after), asset lists (fixtures, appliances), and notes about the property (e.g., shut‑off locations).

• Financials: invoices, payment method tokens (if using a processor), financing information if you request it.

• Communications: calls, emails, texts, and chat transcripts.

Purposes: quoting, scheduling, performing, and billing for services; warranty and safety records; dispute resolution; portfolio photos (with appropriate consent); and legal compliance (e.g., tax).

​

B) General contractors, subcontractors, and suppliers

• Business contact information: names, titles, business emails/phones.

• Qualification & compliance: trade licenses, WSIB and insurance certificates, safety training, references.

• Contract & payment: agreements, purchase orders, T4A/T5 details for sole proprietors, banking info for EFT via secure processors.

• Site records: site logs, access records, incident reports; limited background checks where required by the client or site rules (with notice/consent).

• Operational telemetry (if used): GPS/telematics on company vehicles/devices for dispatch, safety, and theft prevention.

Purposes: vendor onboarding, due diligence, scheduling and coordination, quality and safety oversight, and paying for services.

​

C) Applicants & employees

• Recruitment: resumes, interview notes, references, qualifications.

• Employment: onboarding documents, emergency contacts, training, performance and safety records.

Purposes: evaluate candidates and administer employment per applicable HR policies and laws.

​

D) Website & marketing

• Device & usage data: IP address, browser type, pages viewed, and basic analytics via cookies or similar technologies.

• Marketing: preferences, opt‑ins to newsletters, service reminders, and promotions.

Purposes: improve our website, measure marketing effectiveness, and send permitted CEMs.

​

5) Consent and limited exceptions

 

We obtain meaningful consent for collection, use, and disclosure unless an exception applies (e.g., emergencies, fraud prevention, law enforcement requests, legal claims). We rely on express consent for optional marketing. You can withdraw consent at any time; this may affect our ability to provide certain services.

Business contact information used solely to communicate with a person about their employment, business, or profession may be handled without consent for that purpose. We otherwise treat such data respectfully and offer reasonable opt‑outs from marketing.

 

6) Commercial electronic messages (CASL)

 

We send CEMs only with express or implied consent and include our identification and an easy‑to‑use unsubscribe in each message. Express consent does not expire until withdrawn. Implied consent has time limits (e.g., after a purchase or inquiry). You can unsubscribe anytime using the link in our emails or by contacting us.

 

7) Cookies & online tracking

 

We use essential cookies to operate our website (e.g., security, session management). With your consent, we may use analytics cookies to understand website traffic and advertising cookies to show relevant ads. You can manage cookies through your browser settings and our cookie banner (where present). Our site is not designed to respond to “Do Not Track” signals.

 

8) Disclosing personal information

 

We disclose personal information only as needed for the purposes above, including to:

• Service providers (e.g., dispatching, scheduling, CRM, payments, cloud storage, email/SMS, analytics, call recording, photo capture, telematics).

• General contractors / property managers when needed to coordinate work, comply with site rules, or meet warranty/safety obligations.

• Authorities where required or permitted by law (e.g., tax reporting, safety investigations, valid legal requests).

• Business transactions (e.g., merger or sale) subject to appropriate protections.

We require service providers to protect personal information and use it only for our purposes.

​

9) Cross‑border processing

 

Some service providers may process personal information outside Canada (e.g., in the United States). When we transfer data internationally, we take contractual, technical, and organizational measures to provide comparable protection. However, personal information may be accessible to foreign courts, law enforcement, or national security authorities under the laws of those jurisdictions.

 

10) Retention

 

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, to meet legal, accounting, or reporting requirements, and to establish or defend legal claims. Examples (subject to change):

• Customer records & invoices: generally 7–10 years for tax/audit.

• Project files & warranties: for the warranty period plus a reasonable buffer.

• Unsuccessful applicants: typically 12–24 months unless you ask us to keep your resume on file longer.

When no longer needed, we securely delete, de‑identify, or archive information per our retention schedule.

​

11) Safeguards

 

We protect personal information with appropriate administrative, technical, and physical safeguards proportional to the sensitivity of the information, including:

• Role‑based access, staff training, confidentiality commitments.

• Secure cloud services, encryption in transit, and strong authentication.

• Secure disposal of paper/electronic records.

• Vendor due diligence and contracts with privacy/security obligations.

No method of transmission or storage is perfectly secure, but we continuously improve our controls.

 

12) Your rights: access, correction, and choices

 

You may request access to personal information we hold about you, and correction of inaccurate or incomplete information. We aim to respond within 30 days unless an extension is permitted. We may ask for identification to verify your request. Where we rely on consent for optional uses (e.g., marketing), you may withdraw consent at any time.

To make a request or complaint, contact our Privacy Officer (see Section 1). If we cannot resolve your concern, you may contact the Office of the Privacy Commissioner of Canada.

 

13) General contractors & subcontractors – privacy commitments

 

When we act as a general contractor, we:

• Collect only the minimum personal information about workers necessary for site access, safety, and quality (e.g., names, roles, certifications).

• Share site information with owners/managers strictly on a need‑to‑know basis.

• Require subcontractors to sign confidentiality and data‑protection clauses and to train their staff on privacy.

• Maintain site logs, access records, and incident reports securely and limit retention to operational and legal needs.

• Provide notice if we use telematics or digital tools that capture worker location or imagery and obtain consent where required.

When we act as a subcontractor, we:

• Treat the GC or owner’s instructions as the purpose for processing personal information and use data only to perform the subcontract.

• Enter into written terms confirming each party’s privacy and security obligations.

• Promptly notify the GC/owner of any privacy incident or breach affecting shared information.

Business contact information for GC/subcontractor staff is used to coordinate work and may be retained in project files. Individuals can opt out of promotional messages.

 

14) Photos, videos & marketing materials

 

We often capture before/after photos or short videos of work to document conditions and quality. Where such media includes individuals or identifiable addresses, we:

• Use it only for documentation unless we have express consent to publish for marketing (e.g., website, social media).

• Avoid posting precise addresses or other sensitive details; we may blur or crop images for privacy.

• Remove published media upon reasonable, authenticated request where feasible and not inconsistent with our legal obligations.

 

15) Children’s privacy

 

Our services target adult property owners, managers, and trades partners. We do not knowingly collect personal information from children under 13. If we discover such collection without appropriate consent, we will delete it.

 

16) Payment information

 

We use reputable payment processors and do not store full credit or debit card numbers on our systems. Payment details you provide are handled by the processor subject to their security programs (e.g., PCI DSS). We keep transaction records for accounting and tax compliance.

 

17) Accountability & training

 

We maintain policies, training, and logs to support privacy compliance. We review our vendors, assess privacy risks for new tools or projects, and update safeguards as needed. We record and investigate privacy incidents and notify affected individuals and regulators when required.

 

18) Changes to this policy

 

We may update this policy from time to time. If changes materially affect your rights, we will provide prominent notice (e.g., on our website or via email if appropriate). The Effective date at the top shows when the policy last changed.

 

19) How to contact us or make a complaint

 

Privacy Officer – A&B HomeFix
Email: abhomefixtoronto@gmail.com 
Phone: +1 (416) 880‑3068
Mailing address: Toronto, Ontario, Canada 

If we cannot resolve your concern, you may contact the Office of the Privacy Commissioner of Canada at https://www.priv.gc.ca/ or by phone at 1‑800‑282‑1376.

 

CASL Unsubscribe

 

To stop receiving promotional emails, click the unsubscribe link in our messages or email abhomefixtoronto@gmail.com with the subject line “Unsubscribe”.

Version control

• v1.0 – Initial Toronto, ON