Privacy Policy
The Privacy Policy of Oshawa Hood Cleaning is the plain-language account of what this website collects, where that information travels, how long it is kept, and how to ask for it back. It is written under the Personal Information Protection and Electronic Documents Act (PIPEDA), the federal law that governs how a Canadian business handles personal information in the course of commercial activity. The site collects one thing on purpose: the details a kitchen types into the quote form. Effective date: September 2026.
What the quote form collects
Fields you type. Your name, a phone number, an email address, the name of the business or kitchen, and a short message describing what you need. Every field is required so the request can be answered. The same form appears on the homepage and on the contact page.
Fields added by the page. When you press send, the page also attaches the address of the page you were on, the title of that page, a form identifier that says whether the homepage or the contact form was used, and a timing token. The timing token records when the page loaded so that a submission fired faster than a person could read the form can be discarded as spam. The server then adds a submission time and a short submission id so a double-tap or a retry shows up as a duplicate rather than a second lead.
A hidden trap field. The form contains a field that people never see and never fill. If it arrives filled, the submission is treated as a bot and dropped. Nothing about a real visitor is recorded by it.
Never requested. Payment card numbers, banking details, government identification and health information have no place on this site. No page here asks for any of them.
Where a submission goes
Step one: a Netlify serverless function. The browser posts the form to a small program hosted by Netlify under this domain. That program checks the trap field and the timing token, confirms the required fields are present, checks the phone number has ten digits, and rejects anything posted from a website other than this one.
Step two: the GoHighLevel CRM. A submission that passes those checks is forwarded to the customer relationship system used by Oshawa Hood Cleaning and its operating crew. There it becomes a contact record and triggers a notification. A member of the crew may then call, text or email you about the request. That is the only purpose of the record.
Not done with it. The record is not sold, rented, added to a marketing list, or handed to an advertising network. No lead-selling arrangement exists. The only messages sent from it are the ones that answer your request or arrange a visit you booked.
Out-of-country storage. Netlify and GoHighLevel store data on servers that may sit outside Canada. PIPEDA permits this provided the information is protected by contract, and both providers publish their own privacy and security terms.
Retention, access, correction and deletion
How long a record is kept. An enquiry that never becomes a job is kept only as long as it takes to answer it and to notice if the same kitchen calls again. A completed job is different: the certificate and its photographs are safety records a kitchen may need to produce years later for Oshawa Fire Services, Clarington Emergency and Fire Services, an insurer or a buyer of the business, so those are retained with the contact details needed to reissue them.
Seeing what is held. Under PIPEDA you have a right of access to the personal information an organisation holds about you. Call 289-274-5331 or send a note through the contact form and ask. A copy of the record is provided.
Fixing it. A wrong number, an old email or a misspelled business name gets corrected on request.
Removing it. Contact details are deleted on request. The one exception is a certificate for work already performed, which is a business and safety record and is kept, with an explanation of why, rather than deleted.
If you are not satisfied. Raise it on the phone first. Anyone in Canada who believes an organisation has mishandled personal information can also complain to the Office of the Privacy Commissioner of Canada.
Cookies, chat, server logs and links
Cookies and local storage. This website sets none of its own. There is no Google Analytics on this site, no advertising pixel, and no cross-site tracking script.
The live chat widget. An optional chat widget supplied by GoHighLevel (LeadConnector) may load on the page. When it loads, it sets its own cookies or local storage to keep a conversation open between page views, and anything typed into it goes to the same CRM as the form. Treat the chat the way you would treat an email: do not type anything into it you would not send by email.
Server logs. The site is hosted by Netlify and mirrored on the Bunny CDN. Both keep standard server logs (IP address, browser type, pages requested, time of request) for security and reliability. Those logs are created by the hosting providers, not compiled by Oshawa Hood Cleaning, and are not used to profile individual visitors.
Links to other sites. Pages here link to the services page, the NFPA 96 guide and other pages on this domain, and occasionally to outside organisations such as a fire service or a public health department. Once you leave this domain, the privacy practices of that site apply.
Changes to this policy. If the way information is handled changes, this page changes with it and the effective date at the top is updated. The current version is always the one published here. The conditions a job runs under are a separate document, the terms of service, and the about page explains who the operating crew is.
Privacy: frequently asked questions
Why does the form record which page I was on?
So the business can tell which page produced the enquiry. The homepage and the contact page carry the same form, and knowing which one a kitchen used is the only page-level attribution the site has. It is stored on the contact record and used for nothing else.
What is the timing token and does it identify me?
The timing token is a number derived from the moment the page loaded. It lets the server reject a submission that arrived faster than a person could read the form, or one from a page loaded many hours earlier, both of which are patterns of automated spam. It contains no personal information and is not stored on the contact record.
Will a crew member text me after I send the form?
Possibly. The record in the CRM allows the operating crew to call, text or email about the request, and text is often the fastest way to confirm an overnight window. Reply with the word stop to any text, or say so on the phone, and messages end. No marketing sequence runs from this site.
Does the chat widget track me across other websites?
No. The GoHighLevel chat widget sets storage on this domain only, for the purpose of holding a conversation together as you move between pages here. Its provider publishes its own privacy terms, and the widget can be ignored entirely; the phone and the form do everything it does.
Who do I contact to have my details removed?
Call 289-274-5331 or use the contact form and ask for deletion. Contact details are removed. If work was performed, the certificate for that visit is kept as a safety record, and that exception is explained at the time rather than used as a reason to refuse the whole request.