Privacy Policy

Effective Date: July 27, 2026 | PIPEDA (Canada & Ontario) Compliant

Bright Trust Janitorial Inc. ("Company", "we", "us", or "our") operates in Ontario, Canada and is committed to protecting the privacy and confidentiality of personal information collected from our commercial and residential cleaning clients ("you" or "Customer"). This Privacy Policy complies with the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario privacy standards.

1. Personal Information We Collect

We collect personal information necessary to deliver high-quality janitorial and residential cleaning services, process payments, and fulfill tax requirements:

• Contact Identification: Customer full name, email address, telephone contact number, and physical service address.
• Property Specifications: Approximate property square footage, service type (Residential, Commercial, Hospitality, Post-Construction), and special cleaning instructions.
• Property Photos: Photos uploaded by you or our cleaning staff to assess property conditions and verify completion.
• Financial & Transaction Data: Payment transaction status, 25% downpayment amounts, balance payments, and official CRA invoice records. Note: Credit card payments are processed securely by Square Canada; we do not store full credit card numbers on our servers.
• Technical Metrics: Cryptographic IP address hashes collected anonymously to monitor website performance.

2. Purpose of Collection and Use

Your personal information is collected strictly for the following purposes:

• Providing estimates, scheduling cleaning slots, and dispatching cleaning teams.
• Processing 25% downpayments and final balance invoices via Square Canada.
• Sending appointment reminders, final invoices, and official CRA tax receipts.
• Verifying service quality and maintaining operational records.
• Complying with Canada Revenue Agency (CRA) financial recordkeeping regulations.

3. Third-Party Service Providers & Data Transfers

We do NOT sell, rent, or trade customer personal information to third parties. We share information only with essential service providers necessary for business operations:

• Square Canada: PCI-DSS Level 1 compliant payment processing.
• Resend API: Transactional email dispatch for quotes, invoices, and receipts.
• ImageKit.io: Encrypted cloud storage for property and service photos.
• Render Cloud Hosting: Secure cloud application infrastructure.

4. Data Retention & Security Measures

We employ industry-standard security measures including SSL/TLS 256-bit encryption in transit, strict database access controls, and hashed authentication tokens. Financial invoices are retained for six (6) years in accordance with CRA requirements, after which records are securely archived or deleted.

5. Your Privacy Rights Under PIPEDA

Under Canadian privacy legislation, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Withdraw your consent to non-essential data processing at any time.