This privacy policy describes how Clean Cutting Board (“we,” “us,” “our”) collects, uses, discloses, and protects your personal information in connection with your use of cleancuttingboard.ca (the “Site”) and any services or purchases made through the Site (the “Services”).

By accessing or using the Site or Services, you consent to the practices described in this policy. If you do not agree, please do not use the Site or submit personal information.

This policy applies to:

• Visitors to the Site (browsers)

• Customers who register accounts or make purchases

• Prospective customers who request quotes, contact forms, or service scheduling

2. What Information We Collect

We collect different types of information depending on your interaction with us:

a. Information You Provide Voluntarily

• Account registration / profile data: name, email address, phone number, postal address, password (hashed), company name (if business).

• Order / transaction data: billing address, shipping address, payment method (credit card, etc.), purchase items, order history.

• Contact and support communications: messages, inquiries, feedback, service requests, email correspondence or phone calls.

• Service / job site data: for board resurfacing/shaving/installation, possibly location, facility name, contact onsite.

• Marketing preferences & newsletter: whether you wish to receive promotional emails, newsletter subscription.

b. Automatically Collected Data

• Device & usage data: IP address, browser type, operating system, device identifiers, pages visited, time stamps, referring/exit pages, clickstream data, site interactions.

• Cookies & tracking technologies: analytics cookies (e.g. Google Analytics), marketing/advertising cookies, session cookies, persistent cookies.

• Log files & server data: server logs capture requests, errors, timestamps, etc.

c. Third-Party / External Sources

• We may receive data from payment processors, shipping carriers, or third-party tools or integrations (e.g. email marketing platforms, CRM systems).

• If consenting, we may get demographic or interest data from marketing partners or social login services.

3. How We Use Your Information

We use your personal information for purposes including, but not limited to:

• Processing orders, payments, shipping, and returns

• Managing your account, verifying identity, and customer service

• Communicating with you about orders, updates, promotions, and service notices

• Sending marketing or promotional emails (if you opt in)

• Improving and optimizing our Site, user experience, and Services

• Analytics, usage statistics, and internal reporting

• Preventing fraud, abuse, or illegal activity; enforcing our Terms of Service

• Complying with legal obligations, audits, or governmental requests

• If applicable: customizing content, recommendations, or offers

We will only use personal data for the purpose(s) for which it was collected, unless we reasonably consider that we need to use it for another purpose and the new purpose is compatible with the original purpose (or we obtain your consent).

4. Sharing / Disclosure of Information

We may share or disclose your personal information in the following ways:

• Service providers / contractors: third parties who help with payments, shipping, fulfillment, marketing, email delivery, analytics, or other operations (under confidentiality obligations).

• Payment processors & financial institutions: to authorize and complete payment transactions.

• Shipping carriers: to deliver orders.

• Legal obligations: if compelled by subpoena, court order, or government request; to investigate or prevent fraud or illegal activity; to protect rights or safety.

• Business transfers: in the event of a merger, acquisition, sale of assets, or reorganization, your personal data may be transferred (under appropriate confidentiality).

• Aggregated / anonymized data: we may share de-identified, non-personal aggregated stats that do not identify individuals.

We do not sell your personal information to third parties for their marketing unless you explicitly consent.

5. International / Cross-Border Transfers

Because we may use cloud services, payment gateways, shipping services, or analytics platforms located outside Canada (e.g. in the U.S.), your personal data may be transferred to, stored in, or processed in other jurisdictions.

We will take steps to ensure that such transfers are lawful and provide adequate protection (e.g. standard contractual clauses, encryption, or relying on jurisdictions with adequate protections).

6. Cookies, Tracking & Advertising

We and our third-party partners use cookies, pixel tags, web beacons, local storage, and other tracking technologies to collect information about your usage of the Site, preferences, and behavior.

You can control or disable cookies via your browser settings, although some features of the Site may not function properly if cookies are blocked.

We may allow third-party advertising networks or remarketing partners to show you targeted ads based on your past visits or interests. These third parties may use cookies or device identifiers to deliver relevant ads.

If you use “Do Not Track” or similar settings, our systems may still collect data, since many online services do not yet respect those signals.

7. Data Retention

We retain your personal data only as long as necessary for the purposes for which it was collected, or as required to comply with legal, accounting, or audit obligations.

Once data is no longer needed, or upon your request where applicable, we will securely delete or anonymize it.

8. Security Measures

We take reasonable technical, administrative, and physical safeguards to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Examples include:

• Encryption (in transit via TLS / SSL, and at rest where applicable)

• Access controls, role-based permissions, strong passwords

• Secure storage and backups

• Regularly reviewing security practices, patching vulnerabilities

• Employee training and confidentiality obligations

However, no system is perfect. If a data breach occurs, we will notify affected individuals and relevant authorities as required by law.

9. Your Rights & Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you

• Correction: Ask to correct or update inaccurate or incomplete data

• Deletion / Erasure: Request we delete your personal data (subject to legal or business constraints)

• Restriction / Objection: Object to or restrict certain processing (e.g. direct marketing)

• Portability: Request your data in a structured, machine-readable form

• Withdraw consent: If processing is based on consent, you may withdraw it (without affecting lawfulness of prior processing)

• Opt out of marketing communications

• Lodge a complaint with a privacy authority (e.g. the Office of the Privacy Commissioner of Canada)

To exercise these rights, you may contact us at:

Email: [insert your privacy / support email]

Address: [your business address]

We will respond within a reasonable timeframe, in compliance with applicable law.

10. Children’s Privacy

Our Site and Services are not intended for children under 13 (or applicable age in your jurisdiction). We do not knowingly collect personal data from minors without parental consent. If we learn that we have collected data from a child without proper consent, we will delete it.

11. Changes to This Privacy Policy

We may update this policy from time to time (e.g. to reflect changes in our practices, legal requirements, or service features). We will post the revised version here with an updated “Last updated” date. If changes are material, we may notify you (e.g. via email or site banner).

Please review this policy periodically.

12. Contact Us