Legal
Privacy policy
Structure and current practice. This needs legal review before launch.
Placeholder
This is scaffolding that reflects what the code actually does today — not a reviewed policy. It must be checked against PIPEDA and Ontario requirements, and given an effective date and a named data controller, before the site is public.
What we collect
- Business listing information submitted through the listing form — business name, contact details, address, hours and services. This is published deliberately: it is the point of a directory.
- Submitter and claimant details — name, role, email and phone. Used to verify a claim and to contact you about your submission. Not published.
- Report details — what you told us is wrong, and optionally your email. We do not publish who reported a listing.
What we do not collect
No advertising trackers and no third-party analytics are in place. Interaction counts (profile views, phone clicks, direction requests) are designed to be recorded without an IP address or a user identifier attached — the schema stores a coarse session key only.
We also keep a simple daily count of how many times each page is opened, and whether the visit came from a search engine, a social site, another website or a typed address. It is a number and nothing else: no cookie is set, and no IP address, device details or personal information is stored with it. If your browser sends a “Do Not Track” signal, the page is not counted.
Who can see it
Published listing details are public. Submitter, claimant and reporter details are visible only to administrators reviewing the queue. Administrative actions are recorded in an internal audit log.
How long we keep it
Placeholder
Retention periods are not yet set. Rejected submissions, closed reports and resolved claims all currently persist indefinitely.
Your choices
You can ask us to correct or remove a listing at any time through the report form or by contacting us. A formal access-and-deletion request process needs to be defined here.