1. What we collect
Account data: name, email, phone, password (stored only as a salted scrypt hash), referral code.
Booking data: service addresses, entry instructions, parking notes, pet/notes you write, booking history, payments (card details are processed by our payment processor; we store only brand, last four digits and a processor reference — never full card numbers).
Communications: messages you send in booking threads, contact-form messages, support calls.
Bee Pro applicants: legal name, contact, work eligibility and vulnerable-sector-check confirmations, references, availability (used for vetting and scheduling).
Technical data: server logs (IP, timestamps) kept briefly for security.
2. Why we collect it
To provide the service: schedule, assign and complete bookings; message you about them; process payments and refunds; apply promos, credits and the referral program.
To send service reminders and receipts (transactional — these are part of the service you asked for).
To send marketing emails only with your express consent (CASL), which you can withdraw any time via unsubscribe links or your account settings.
To vet Bee Pros and keep customers safe; to meet legal, tax (HST records) and insurance obligations.
3. Who we share it with
Your assigned Bee Pro receives the booking address, entry instructions, notes and your first name — the minimum needed to perform the clean.
Service providers under contract: payment processing, hosting, email delivery. They process data only on our instructions and are bound by confidentiality.
Authorities, where required by law; insurers in connection with a claim; a buyer, if the business is ever sold (with notice).
We do not sell personal information. Ever.
4. Retention
Booking and payment records are kept 7 years for tax purposes. Message threads are kept 24 months. Marketing consent records are kept while active and 3 years after withdrawal (to prove consent history). Inactive accounts are anonymized after 5 years.
5. Your rights
You can access, correct, or ask us to delete your personal information; withdraw marketing consent; and complain to the Office of the Privacy Commissioner of Canada. Email privacy@busybeecleaners.ca and we respond within 30 days.
Cookies: we use only strictly necessary cookies (your session) plus optional analytics if enabled — see the Cookie Notice.
6. Security
Passwords are hashed with scrypt; sessions use HttpOnly cookies; data is stored with access controls. We notify affected individuals and the OPC of any breach of security safeguards as required by PIPEDA.