Privacy Policy

1. Information We Collect

By contacting us or using an approved website account, you consent that we may collect or process the following information:

• Your name, email address, selected inquiry subject, and message content when you submit the Contact form;
• A short-lived pseudonymous rate-limit fingerprint derived from the connection address and a server-side secret; the Contact record does not store the original address;
• Account identity data needed for sign-in, including the unique Firebase Authentication user identifier (UID) associated with your account; and
• Project names, Tag names, product SKUs, and quantities that you choose to save in Account Projects.

Contact submissions are validated by Cloud Functions and stored in a server-only Cloud Firestore collection. Website clients cannot directly read or write Contact submissions or rate-limit records.

Account Project data is stored in Cloud Firestore under your Firebase UID. Project drafts do not store catalog descriptions, product images, prices, discounts, product variation IDs, or a price snapshot; current website catalog details are resolved when you view or print the Project.

We do not currently use analytics, advertising pixels, or tracking scripts on this website. We do not collect payment card information or sensitive financial data through this website.

2. How We Use Your Information

Information we collect or process is used to:

• Respond to your inquiries;
• Authenticate approved account users and keep each user's Projects separate;
• Save, display, edit, print, and delete the Project drafts you request; and
• Protect account and service integrity, investigate errors, and comply with legal obligations.

Google Firebase provides Authentication, Cloud Functions, and Cloud Firestore services used for Contact submissions, approved accounts, and Account Projects. Service providers process information on our behalf to operate these functions. We do not sell, trade, or rent your personal information.

3. PIPEDA Compliance

We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). You have the right to access the personal information we hold about you and to request corrections. To make such a request, please contact our Privacy Officer.

4. Data Retention

We retain personal information only as long as necessary to fulfill the purposes for which it was collected, to protect the service, or as required by applicable law. Contact form submissions are scheduled for deletion after 24 months. Pseudonymous Contact rate-limit records are scheduled for deletion after 24 hours.

Account Project data is retained while the related Project and account remain active. Deleting a Project removes that Project from the active workspace. When an administrator completes an account deletion, the deletion process removes the user's active Account Project workspace and then deletes the Firebase Authentication account.

Limited deletion-coordination metadata may be retained temporarily to prevent a recently deleted account from recreating Project data. Service-provider backups, security logs, or records required by law may remain for a limited period under their applicable retention cycles; they are not used as an active Project workspace. You may request account access, correction, or deletion by contacting us.

5. Cookies and Local Storage

We do not currently use cookies for advertising, analytics, or cross-site tracking. The website may use browser local storage or session storage to remember local interface preferences, reduce account-state flicker, and preserve product browsing return context. These browser storage entries are stored on your device and are not advertising or analytics cookies.

6. Contact

If you have questions about this Privacy Policy or wish to exercise your rights under PIPEDA, please contact us:

Aqualem Bathroom Canada Inc.
Email: info@aqualem.ca