PRIVACY POLICY

Privacy Policy — Whitewater Plumbing Inc.

Last updated: August 18, 2025

  1. Who we are

  • Whitewater Plumbing Inc. (“Whitewater Plumbing,” “we,” “us,” or “our”) provides residential and commercial plumbing services in Ontario, Canada.

  • Contact information:

  • Privacy Officer: Operations Manager, reachable at whitewaterplumb@gmail.com'

    2. Scope

  • This Privacy Policy explains how we collect, use, disclose, and protect personal information in connection with our services, our website, and our business operations.

  • This Policy applies to customers, prospective customers, and website visitors located in Canada.


    3. What personal information we collect

  • Identification and contact details: name, service address, billing address, phone number(s), and email address(es).

  • Service information: description of the plumbing issue, appointment details, work orders, service history, and, where applicable, photos taken at the job site.

  • Billing and payment information: invoice amounts, payment status, and method of payment (e-transfer, cheque, cash, or card via Square Payments). We do not store full credit card numbers, CVV codes, or expiry dates on our systems.

  • Website/forms and communications: information you provide through our website forms (hosted on Squarespace and delivered to our Google Workspace email), email, phone, or text.


    4. How we collect personal information

  • Directly from you (phone, email, text, website forms, in person).

  • From our work at your property (e.g., job notes and photos).

  • From our service providers that support our operations (e.g., accounting, payment processing, email).

    5. How we use personal information

  • To provide, schedule, and complete plumbing services and maintain service records.

  • To prepare estimates, issue invoices, and process payments.

  • To communicate with you about services, scheduling, and customer support.

  • To operate our business, maintain our accounting records, and meet legal and regulatory requirements.


    6. Photos and marketing use

  • Technicians may take photos or short videos at job sites for documentation. We use images for marketing only with your prior consent. You can withdraw consent at any time by contacting us; withdrawal does not affect prior lawful use.


    7. Payment processing and credit card information

  • We accept payments by Square Payments (credit/debit card), e-transfer, cheque, and cash.

  • Card payments are processed by Square. We do not collect or store full card details. Square processes card data according to its security standards (e.g., PCI DSS). For more information, please consult Square’s privacy and security notices.

    8. Legal basis and principles (PIPEDA)

  • We collect, use, and disclose personal information with your knowledge and consent, except where otherwise permitted or required by law.

  • We limit collection to what is necessary for the identified purposes, use it only for those purposes (or compatible purposes), and retain it only as long as necessary to fulfill those purposes and meet legal requirements.

    9. Sharing and disclosure - We may disclose personal information:

  • To our service providers who assist us in operating our business, such as:

    • Accounting: Intuit QuickBooks (accounting records only)

    • Payments: Square Payments

    • Email and productivity: Google Workspace

    • Website/forms: Squarespace

  • To our employees and subcontractors who require the information to perform services and who are subject to confidentiality obligations.

  • When required or permitted by law (e.g., to comply with legal process, collect a debt, or protect our rights or the safety of others).

  • In connection with a business transaction (e.g., merger or sale), as allowed by law.


    10. Cross-border transfers

  • Some service providers (e.g., Intuit, Google, Squarespace, Square) may store or process personal information outside Canada. As a result, your information may be subject to the laws of those jurisdictions and accessible to law enforcement and national security authorities there.


    11. Retention

  • We retain accounting and service records for 7 years after job completion (and longer if required by law or to resolve disputes).

  • After the retention period, we securely delete or anonymize personal information.


    12. Security

  • We use reasonable physical, organizational, and technical safeguards appropriate to the sensitivity of the information, including access controls, employee confidentiality commitments, and secure service providers.

  • No method of transmission or storage is completely secure. If we become aware of a privacy breach that poses a real risk of significant harm, we will take appropriate steps, including notifying affected individuals and regulators as required by law.


    13. Your rights and choices

  • Access and correction: You may request access to, or correction of, your personal information in our custody or control.

  • Withdrawal of consent: You may withdraw your consent to our use or disclosure of your personal information (subject to legal or contractual restrictions and reasonable notice). This may affect our ability to provide services.

  • To make a request, contact our Privacy Officer using the details above. We may need to verify your identity.


    14. Cookies and analytics

  • We do not use analytics or advertising cookies on our website. If this changes, we will update this Policy and, where required, request your consent.


    15. Children’s information

  • Our services are intended for adults. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us so we can delete it.

    16. Updates to this Policy

  • We may update this Policy from time to time. The “Last updated” date indicates when it was revised. Material changes will be posted on our website or otherwise communicated to you.

    17. Questions, complaints, and contacts

  • If you have questions, requests, or complaints about our privacy practices, contact our Privacy Officer at whitewaterplumb@gmail.com or 1422 Highway 2 West, Brockville, ON K6V 5T3, 613-325-1923.

  • If your concerns are not resolved, you may contact:

    • Office of the Privacy Commissioner of Canada (OPC)

      • Website: www.priv.gc.ca

      • Phone (toll‑free): 1‑800‑282‑1376

      • Mail: 30 Victoria Street, Gatineau, Quebec K1A 1H3

    • Information and Privacy Commissioner of Ontario

      • Website: www.ipc.on.ca

      • Phone: 416‑326‑3333 or 1‑800‑387‑0073

      • Mail: 2 Bloor Street East, Suite 1400, Toronto, Ontario M4W 1A8