Privacy Policy

Who we are

Craft Mill Works provides custom cabinetry and architectural millwork design and project coordination services in North York, Ontario, serving the Greater Toronto Area. This policy explains what personal information we collect through this website, why we collect it, and what we do with it.

This policy is written with reference to Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), which applies to commercial activities in Ontario. [Confirm with your legal advisor whether any additional provincial or sector-specific requirements apply to your business.]

What we collect

We collect personal information only when you choose to give it to us.

Information you provide directly

• Your name, email address and phone number
• The city and, on the estimate form, the project address or nearest intersection
• Details about your project, including anything you write in a description field
• Photographs and documents you choose to upload
• Your preferred contact method and consultation type
• For trade enquiries: your company name, role, website and estimated project volume

Information collected automatically

• Marketing attribution.When you arrive from an advertisement or a search result, the URL may contain campaign parameters (UTM tags, a Google click identifier). We store these in your browser’s session storage for the duration of your visit and include them with any enquiry you submit, so that we can understand which marketing brought you here. This information is deleted when you close the tab.
• Analytics. If you consent, we use analytics services to understand how the site is used. See the section below.
• Server logs and abuse prevention. Our hosting provider and our spam-protection service process your IP address to deliver the site and to prevent automated abuse of our forms. We store a one-way hash of your IP address for the duration of a rate-limiting window and do not retain the address itself.

Why we collect it

We use the personal information you provide for a single purpose: to respond to your enquiry and, if you become a client, to deliver your project. Specifically:

• To reply to you and answer your questions
• To prepare drawings, a written scope and a quotation
• To coordinate your project with our manufacturing and installation partners, who receive only what they need to do their part of the work
• To keep records of work performed, as any business must

We do not sell your personal information, we do not share it with advertisers, and we do not add you to a mailing list. There is no newsletter to unsubscribe from.

Analytics and cookies

This site uses no non-essential cookies or tracking scripts unless you consent to them. If you decline, or if you have not answered, no analytics scripts are loaded at all — they are not loaded and disabled, they are never requested.

[List here the analytics services you have actually enabled. Depending on configuration, this site supports Google Analytics 4, Google Ads conversion tracking, Meta Pixel and Microsoft Clarity. Delete the ones you do not use.]

You can change your decision at any time using the cookie preferences link, which is also in the footer of every page.

We also use Cloudflare Turnstile to protect our forms from automated abuse. Turnstile is designed to work without tracking individuals across sites, and it is loaded only on pages with a form.

Photographs and uploaded files

If you upload photographs with an estimate request, they are used to understand your project and for no other purpose. We do not publish customer photographs, use them in marketing, or share them beyond the people working on your enquiry — unless you expressly agree in writing, separately from this policy.

[Describe where uploaded files are stored and for how long, based on your configured upload provider. If files are attached to email, say so. If they are stored with a cloud provider, name the provider and the region.]

How long we keep it

[Set your actual retention periods here and make sure they match what you do in practice. A common approach: enquiries that do not become projects are deleted after 12 to 24 months; project records are kept for the period required for business, warranty and tax purposes.]

Who we share it with

We share personal information only where it is necessary to respond to you or deliver your project:

• Our manufacturing and installation partners, who receive the project details and site address needed to do their work
• Service providers who operate this website — our hosting provider, our email delivery provider, and our spam-protection provider
• Analytics providers, but only if you have consented
• Where we are required to by law, or to establish or defend a legal claim

[Name your actual providers here. Some of them process data outside Canada, which you are required to disclose under PIPEDA. Confirm with your legal advisor.]

How we protect it

This site is served over HTTPS. Form submissions are validated and sanitised on our server, protected by rate limiting and automated-abuse detection, and our server logs deliberately exclude the contents of any form — we log that a submission occurred and whether it succeeded, not what it said.

No system is perfectly secure, and we do not claim otherwise. If a breach affecting your personal information occurs, we will notify you and the Office of the Privacy Commissioner of Canada as required.

Your rights

Under PIPEDA you have the right to:

• Ask what personal information we hold about you
• Ask us to correct anything that is inaccurate
• Withdraw your consent, subject to legal and contractual restrictions
• Ask us to delete information we no longer need
• Complain to the Office of the Privacy Commissioner of Canada

To make any of these requests, contact us using the details below. We will respond within 30 days.

Children

This website is intended for adults arranging work on a property. We do not knowingly collect personal information from children.

Changes to this policy

If we change how we handle personal information, we will update this page and change the date at the top. We update the date only when the content actually changes.

Contact us

For any question about this policy or about personal information we hold:

• Craft Mill Works, North York, Ontario, Canada

[Name a specific privacy contact or role here. PIPEDA requires an accountable individual.]