Legal
Privacy Policy
Effective
ECAN Enterprises is a family-run sole proprietorship registered in Ontario (Business Identification Number 1001733988) that sells, builds, and repairs computers and builds software and websites in London, Ontario. This policy explains what personal information we collect, why, who we share it with, how long we keep it, and how you can access or correct it. We follow the federal Personal Information Protection and Electronic Documents Act (PIPEDA).
The short version: this website sets no cookies, runs no analytics, and has no accounts. We collect only what you send us or what a job needs. We do not sell personal information. We do not look through files on devices you bring us for repair.
1. Privacy contact
Our Privacy Officer is accountable for how we handle personal information and answers all privacy questions, access requests, and complaints.
- Privacy Officer, ECAN Enterprises
- Email: contact@ecanenterprises.ca (put "Privacy request" in the subject line)
- A mailing address for written requests is available by email on request.
2. This website
ecanenterprises.ca is a static website. It has no login, no shopping cart, and no comment forms, and it does not store anything in your browser.
- No cookies, analytics, or advertising trackers. We do not use Google Analytics, social media pixels, or similar tools. Fonts, images, and scripts are all served from our own domain.
- Hosting logs. The site is hosted by Cloudflare, Inc. Like any web host, Cloudflare automatically receives your IP address, browser type, the page requested, and the time of the request so it can deliver the page and block attacks. Cloudflare may also ask your browser to report network connection errors. We do not use this data to identify visitors.
- The quote form does not send anything to us. When you press "Send Inquiry", the site opens a pre-filled draft in your own email app. Nothing is sent or stored until you press Send in that app. Your email provider handles the message under its own privacy policy.
3. What we collect and why
We collect personal information directly from you, from the marketplaces where you buy from us, or from the business that hired us. We use it only for the purposes below, or for other purposes you agree to or the law requires.
| When | What we collect | Why |
|---|---|---|
| You ask for a quote or email us | Name, email address, phone number if you give it, and what you tell us about the job | To reply, prepare a quote, and schedule work |
| You book a repair, build, or on-site visit | Contact details, service or pickup address, device make, model, and serial number, the problem description, and any password or PIN you choose to give us | To do the work, contact you about it, return the device, and handle warranty claims |
| You buy from us | Name, contact details, shipping address, what you bought, and payment confirmation | To complete the sale, ship or hand over the item, and honour returns and warranties |
| You buy through Amazon.ca, eBay, Facebook Marketplace, or Kijiji | The order and shipping details the marketplace gives us | To fill the order. The marketplace's own privacy policy also applies. |
| You sell us a used device | Name, contact details, the device, and the price paid. We may also ask to see ID to confirm the device is yours to sell. | To record the purchase and reduce the risk of buying stolen property |
| You hire us for software or web development | Business contact details, project information, and account access you give us | To scope, build, deliver, and support the project |
We also keep invoices and payment records because tax law requires it.
4. Data on devices we repair
Computers and phones hold some of the most private information people have. When you leave a device with us:
- We access the device only as far as the job needs, for example to run diagnostics, install an operating system, or remove malware. We do not open, browse, or copy your personal files, photos, messages, or accounts.
- We copy or recover your data only when the job requires it and you ask for it, for example a data transfer, backup, or recovery. Any temporary copy is deleted within 30 days after you collect the device, unless you ask us to keep it longer.
- If you give us a password or PIN, we use it only for your job and delete our record of it when the job is finished. We recommend changing it afterwards.
- Before drop-off, please back up your data and remove or lock anything you would rather we not have access to.
- If we come across content that we are legally required to report, we will report it.
5. Devices we buy or resell
Every used or refurbished computer, drive, or phone we buy is erased before resale using methods based on the NIST SP 800-88 media sanitization guidelines. Drives that cannot be reliably erased are physically destroyed. We do not look at, keep, or use personal information left on devices we buy.
6. Who we share it with
We do not sell, rent, or trade personal information. We share it only with service providers that help us run the business, and only what they need:
- Cloudflare, Inc. (United States): website hosting, domain name service, and forwarding of email sent to our addresses.
- Google LLC (United States): Gmail, where we receive and store business email.
- Resend (United States): delivery of email we send from our ecanenterprises.ca addresses.
- Payment providers: Stripe, Square, or PayPal when you pay by card or PayPal, and your bank for Interac e-Transfer. These providers process your card or account details under their own policies. We never see or store full card numbers.
- Couriers and Canada Post: your name, address, and phone number when we ship to you.
- Marketplaces: Amazon.ca, eBay, Facebook Marketplace, and Kijiji, for sales made through them.
- Manufacturers and distributors: your name, contact details, and proof of purchase when we handle a warranty claim for you.
- Professional advisers such as our accountant, and government or law enforcement when the law requires or allows it.
7. Storage outside Canada
Several of our service providers store or process information in the United States and other countries. While it is there, it is subject to the laws of those countries and may be accessed by their courts, law enforcement, and national security authorities. We choose providers that commit to protecting the information.
8. How long we keep it
| Information | Kept for |
|---|---|
| Quote requests and emails that do not lead to a job | 12 months |
| Work orders, invoices, receipts, and payment records | 6 years after the end of the tax year they relate to, as required by tax law |
| Temporary copies of customer data made for a repair or transfer | Deleted within 30 days after you collect the device |
| Passwords and PINs you give us | Deleted when the job is finished |
| Records of devices bought from the public and erasure logs | 2 years, or longer if the law requires |
| Development project files | As set out in the project agreement |
When we no longer need information, we securely delete or destroy it.
9. How we protect it
- Business accounts use strong, unique passwords and two-step verification.
- Customer devices and storage media are kept in a secure area and handled only by the people working on them.
- Paper records are stored securely and shredded when no longer needed.
- Our website is served over HTTPS only.
No method of storage or transmission is completely secure. If a breach of our safeguards creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as soon as feasible, as PIPEDA requires. To report a security problem with this website, email contact@ecanenterprises.ca.
10. Your choices and rights
- Access and correction. You can ask what personal information we hold about you and ask us to correct it. We respond within 30 days.
- Withdrawing consent. You can withdraw consent at any time, subject to legal or contract limits. We will explain what that means, for example that we may not be able to finish a job.
- Complaints. Contact our Privacy Officer first. If you are not satisfied, you can complain to the Office of the Privacy Commissioner of Canada. Quebec residents may also contact the Commission d'accès à l'information du Québec.
We may need to confirm your identity before we act on a request.
11. Emails from us
We email you about your quote, order, repair, or project. We do not send newsletters or promotions. If we start, we will send them only to people who have agreed or where Canada's anti-spam law (CASL) otherwise permits it. Every such email will identify us and include a working unsubscribe link, and we will act on unsubscribe requests within 10 business days.
12. Client development work
When we build or maintain software or websites for a business, we may handle that business's customer data. In that role we act only on the client's instructions, and the client's own privacy policy applies to its customers. If you are a customer of one of our clients, please contact that business directly.
13. Children
Our website and services are not directed to children. We do not knowingly collect personal information from children under 13. A parent or guardian should arrange repairs of a child's device.
14. Changes to this policy
We will update this policy when our practices change, and we will change the effective date at the top of this page. If a change significantly affects how we use information we already hold, we will ask for your consent where required.