1.Accountability
The Company is responsible for all personal information under its control, including information disclosed to third-party service providers for processing on our behalf. We have designated a Privacy Officer who is accountable for compliance with this Policy. Inquiries regarding privacy may be directed to our Privacy Officer at the contact information set out in Section 12 of this Policy.
2.Identifying Purposes
We collect personal information for the following purposes, which are identified prior to or at the time of collection:
- To process and confirm service bookings and appointments;
- To communicate with you regarding your booking, including sending invoices, payment receipts, service confirmations, and appointment reminders;
- To process payments and prevent fraud through our third-party payment processor;
- To provide, deliver, and improve our cleaning services;
- To assess and respond to claims of property damage or service complaints;
- To send promotional communications, service updates, and marketing materials, where you have consented or where we are permitted to do so under applicable anti-spam legislation;
- To comply with legal obligations, including tax reporting obligations under the Excise Tax Act (Canada) and the Income Tax Act (Canada);
- To analyze usage of our website and improve our online services; and
- To manage our business operations, including employment and contractor relationships.
Where we intend to use personal information for a purpose not identified at the time of collection, we will seek your consent before such use, unless required or authorized by law.
3.Consent
3.1 The Company will obtain your knowledge and consent before or at the time we collect, use, or disclose personal information, except where required or permitted by law to do so without consent.
3.2 Consent may be express (e.g., a written or verbal confirmation) or implied (e.g., by voluntarily providing personal information for an obvious purpose, such as completing a service booking form). The form of consent sought will be appropriate to the sensitivity of the information.
3.3 You may withdraw your consent to the collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawal of consent may affect our ability to provide you with certain Services. To withdraw consent, please contact our Privacy Officer as set out in Section 12.
3.4 By submitting a booking request or contacting us, you acknowledge that you have read this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.
4.Personal Information We Collect
We collect only the personal information that is necessary for the purposes identified in Section 2. This may include, but is not limited to, the following categories:
Identifying Information
Legal name, email address, telephone number, and billing address.
Service Address Information
Physical address of the Premises where Services are to be rendered, unit number, access codes, and property-specific instructions provided voluntarily by you.
Payment Information
Payment card type and last four digits, billing postal code, and transaction records. Full payment card details are collected and processed exclusively by Stripe, Inc. and are never stored on Company servers.
Booking and Service Records
Records of services requested, dates and times of appointments, service preferences, property details (e.g., square footage, number of rooms), and any special instructions provided.
Communications
Records of communications between you and the Company, including email correspondence, notes from telephone calls, and any written feedback or complaints submitted.
Technical Information
Internet Protocol (IP) addresses, browser type and version, operating system, referring URLs, pages visited on our website, time and date of access, and cookie identifiers, collected through standard web analytics tools.
Photographs
Images of the Premises uploaded voluntarily by you through the booking process, used solely for the purpose of assessing and performing the Services requested.
We do not knowingly collect personal information from individuals under the age of majority in Ontario (18 years). If you believe we have inadvertently collected such information, please contact us immediately.
5.Limiting Collection
The Company collects personal information only by fair and lawful means and limits collection to that which is necessary for the purposes identified in this Policy. We do not collect personal information indiscriminately.
6.Use, Disclosure, and Retention
6.1 Use. We use personal information solely for the purposes identified at the time of collection, or for purposes that a reasonable person would consider appropriate in the circumstances, or as required or permitted by law.
6.2 Disclosure to Third Parties. We do not sell, rent, or trade your personal information. We may disclose personal information to the following categories of third parties solely to the extent necessary to fulfill the identified purposes:
- Stripe, Inc. — for secure payment processing. Stripe's privacy practices are governed by its own privacy policy available at stripe.com/privacy;
- Supabase, Inc. — for secure cloud database hosting and authentication services;
- Resend, Inc. — for transactional email delivery;
- Vercel, Inc. — for web hosting and content delivery;
- Government authorities — where required by law, court order, or valid legal process; and
- Professional advisors — including legal counsel and accountants, subject to professional obligations of confidentiality.
All third-party service providers are required, by contract, to handle personal information in a manner consistent with this Policy and applicable Canadian privacy legislation.
6.3 Retention. We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law, including record-keeping obligations under the Income Tax Act and Excise Tax Act. Booking records are retained for a minimum of seven (7) years for tax and accounting purposes. When personal information is no longer required, it is securely destroyed or anonymized.
7.Accuracy
We take reasonable steps to ensure that personal information is accurate, complete, and up-to-date as necessary for the purposes for which it is to be used. Clients are encouraged to notify us of any changes to their personal information to ensure our records remain current. Requests to correct inaccurate information may be submitted to our Privacy Officer.
8.Safeguards
8.1 The Company employs physical, organizational, and technological security measures appropriate to the sensitivity of the personal information in our custody or control. These measures are designed to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification.
8.2 Technical safeguards include, but are not limited to, encrypted data transmission using Transport Layer Security (TLS), database-level row security policies, access controls, and authentication requirements for administrative systems.
8.3 All employees and contractors who handle personal information are required to respect the confidentiality of that information as a condition of their engagement with the Company.
8.4 In the event of a privacy breach that poses a real risk of significant harm to an individual, we will notify the affected individual(s) and the Office of the Privacy Commissioner of Canada in accordance with our obligations under PIPEDA.
9.Openness
The Company makes this Privacy Policy, and information about our privacy practices and procedures, readily available to individuals upon request. This Policy is available on our website at cleanpapi.ca/privacy.
10.Individual Access Rights
10.1 Upon written request to our Privacy Officer, you have the right to be informed of the existence, use, and disclosure of your personal information, and to be given access to that information, subject to limited exceptions permitted under PIPEDA.
10.2 We will respond to access requests within thirty (30) days of receipt. If an extension is required, we will notify you of the reason and the expected response date.
10.3 You have the right to challenge the accuracy and completeness of your personal information and to have it amended as appropriate. Where we are unable to make the requested amendment, we will note the request in your file.
10.4 We may decline access to personal information in limited circumstances as permitted by PIPEDA, including where access would reveal personal information about a third party, or where the information is subject to legal privilege.
11.Cookies and Website Analytics
11.1 Our website uses cookies, pixel tags, and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver relevant content. Cookies are small data files stored on your device. You may disable cookies through your browser settings; however, doing so may affect the functionality of certain features of our website.
11.2 We may use third-party analytics services, including Google Analytics, to collect aggregated and anonymized information about website usage. These services may collect information about your interactions with our website in accordance with their own privacy policies.
11.3 We do not use cookies to collect personally identifiable information without your consent.
12.Challenging Compliance and Contacting the Privacy Officer
If you have a question, concern, or complaint about our privacy practices, or wish to exercise any of the rights described in this Policy, please contact our Privacy Officer:
Clean Papi — Privacy Officer
Toronto, Ontario, Canada
Email: nathan@cleanpapi.ca
Telephone: +1 (416) 454-5930
We will investigate all complaints received in writing. If a complaint is found to be justified, we will take appropriate measures to resolve it, including amending our policies and procedures where necessary.
If you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca or by calling 1-800-282-1376.
13.Amendments to This Policy
The Company reserves the right to amend this Privacy Policy at any time. Any material changes will be reflected by updating the Effective Date at the top of this page. We encourage you to review this Policy periodically. Continued use of our Services following the posting of any amendment constitutes your acceptance of the revised Policy.
This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern the use of our Services.