Privacy policy

1. Who we are

This website is operated by Build and Fix Ltd., trading as Door N Window ("we", "us", "our"). We provide door, window and glass repair, replacement and installation services in Ontario, Canada. You can reach us by phone on (647) 643-5837 or by email at office@buildnfix.ca.

2. What we collect

Information you give us. When you submit a quote request, contact form or booking enquiry we collect your name, phone number, and optionally your email address, the city or postal code of the property, the type of property, the service you need, anything you write in the message field and any job photos you choose to attach. Job photos are stored in a private storage bucket and are not published on the website.

Form troubleshooting. If a submission is rejected or flagged by our anti-spam checks, server logs record the reason and relevant submitted fields so we can investigate errors and avoid losing genuine enquiries. These logs may contain contact details and are not sent as analytics events.

Information collected automatically. Our server briefly processes your IP address for abuse prevention but does not store it with your enquiry. We store browser type, the page where you submitted the form and, when available, the referring page. If you arrive through an advertising campaign, parameters such as GCLID, GBRAID, WBRAID and UTM values are held in session storage and submitted with a quote request so we can identify which campaign produced the enquiry. Session storage is cleared when the browser session ends. Google tags may send limited cookieless signals before a choice or after you decline, as explained in section 7. If you allow analytics, usage may also be linked to a pseudonymous identifier.

3. Why we use it

• To respond to your enquiry, quote the work and schedule a technician.
• To contact you about a job in progress, including confirming appointments.
• To produce invoices and, where you ask us to, documentation for an insurance claim.
• To keep records required for warranty and accounting purposes.
• To measure how the website performs and improve it.
• To measure which advertising campaigns lead to enquiries and completed work.

We do not sell your personal information, and we do not rent or trade it for marketing purposes.

4. Who we share it with

We share personal information only with service providers who help us operate, and only to the extent they need it: our email delivery provider, our SMS provider, our job management and scheduling system, our hosting provider, and our accountant. Where a repair is being claimed on your insurance and you have asked us to assist, we will share the job documentation with your insurer or their adjuster at your direction.

We may disclose information where we are required to by law.

Website providers. Vercel hosts this website and stores new enquiries and optional job photos in private Vercel Blob storage in Canada. Earlier records may remain in our private Supabase storage during the transition. Google provides tag-management and measurement services. Microsoft Clarity provides optional session recordings and heatmaps, as described in section 7. We do not include the name, phone number, email, message or photos you enter in our forms in website analytics events.

Private backups. We also use Google Drive and Google Apps Script to keep a separate, access-restricted backup of enquiry records, submitted job photos and notification-delivery records for recovery if data is lost. These copies are not public and are not used for advertising or session recordings. The Google backup is not restricted to storage in Canada.

Service area map. When the interactive map comes into view, your browser requests map images from OpenStreetMap. This shares your IP address, browser information and the referring website with that provider. We do not request your device's location or send your enquiry details to the map provider. See the OpenStreetMap Foundation privacy policy.

5. Where it is stored

Some of the services we use process and store data on servers outside Canada, including in the United States and the European Union. Where that is the case, the information is subject to the laws of those jurisdictions.

6. How long we keep it

Enquiries that do not become jobs are kept for up to two years. Records relating to completed work, including invoices and warranty records, are kept for as long as required for tax, accounting and warranty purposes, and generally for seven years.

These retention periods also apply to our private backups. Retention and deletion requests are handled manually across the primary records, backup copies and any recovery copies; they are not automatically applied by the backup service.

7. Cookies and tracking

We use browser storage to remember your privacy choice and retain first-touch campaign information for the current session.

Click fraud protection. ClickCease loads on all pages to help detect fraudulent advertising clicks, independently of the optional analytics choice. Requests to ClickCease expose your IP address and browser request information to that provider. A tracking image is also included for browsers with JavaScript disabled.

Google Consent Mode. Google Tag Manager and configured Google measurement tags load with analytics cookies, advertising cookies, advertising user data and personalised advertising set to denied by default. Before you choose, and if you decline, Google may receive limited cookieless measurement signals. These can include your consent state, page information, browser information and timestamps. Network requests also expose your IP address to the receiving provider. Declining does not block these Google requests. See Google's explanation of consent mode and Google's privacy policy.

Your choice. "Allow analytics" enables analytics storage, measurement of website actions such as call-button clicks and completed enquiries, and Microsoft Clarity session analytics when configured. It does not grant permission for advertising storage, advertising user data or personalised advertising. Meta Pixel and Microsoft Ads UET are not enabled by this analytics permission.

Microsoft Clarity. After you allow analytics, Clarity can collect page views, clicks, scrolling, interactions and browser/device information to reconstruct visits within our website and create heatmaps. This helps us identify confusing content and usability problems. It does not record your desktop or other apps. Clarity is not loaded before consent or after a declined choice. Our forms, including uploaded-photo previews and filenames, are marked for masking in recordings. We do not send form contact details or lead identifiers to Clarity. Microsoft processes this usage data; see the Microsoft Privacy Statement.

You can change your choice from "Privacy settings" in the footer or clear stored data through your browser settings. Withdrawing permission refreshes the page, so save any unfinished form first. Declining analytics does not stop the site or quote forms from working.

8. Your rights

Under Canadian privacy law you can ask us to confirm what personal information we hold about you, provide you with a copy, correct it if it is wrong, or delete it where we are not required to keep it. Send the request to office@buildnfix.ca and we will respond within thirty days. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada.

9. Security

We use reasonable technical and organisational measures to protect personal information from loss, misuse and unauthorised access. No transmission over the internet is completely secure, and we cannot guarantee absolute security.

10. Children

This website is not directed at children and we do not knowingly collect personal information from anyone under the age of majority.

11. Changes to this policy

We may update this policy. Changes take effect when posted here, and the date at the top of this page will change.

12. Contact

Questions about this policy, or about the information we hold, go to office@buildnfix.ca or (647) 643-5837.