Privacy Policy
Version: October 14, 2026 · Draft for final business-identity review
Information collected
Typical records may include name, business contact details, booking location, unit/access details, proposed subjects, appointment date, customer communications, itemized price, payment status, Stripe reference IDs, permission and complaint records, and photographs supplied or captured. We do not ask clients to enter full card numbers on our site; Stripe processes card details.
Booking requests may include name, email, phone, business name, service address, selected package, preferred appointment, scope notes, payment references and correspondence. Images may capture the premises and, if not managed carefully, identifiable people, signage or other information. We request only information reasonably necessary to provide services.
How information is used
We use it for quoting, contacting customers, scheduling, access logistics, capturing/editing work, obtaining publication permissions, processing payments and refunds, accounting records, quality concerns, fraud prevention and legal compliance. Marketing emails or SMS require appropriate permission, and unsubscribe requests are respected.
Website forms and location
The current static website form passes business/address/phone information to Calendly in your browser; we do not intentionally maintain a separate website-form database. Address suggestions use the third-party Photon/Komoot geocoding service, which receives typed location queries. Optional browser geolocation is accessed only following permission; users can type an address instead. If added later, analytics and advertising tools will be disclosed and consent managed when required.
Third-party service providers
Calendly provides scheduling; Stripe processes payment card information; Cloudflare hosts the site; Google may process approved published tour imagery; other editing and delivery providers may be used only as disclosed and appropriate. Providers may process information outside the customer's province or Canada. Their published privacy policies apply to their own processing. The site operator does not receive full payment card numbers from Stripe.
Booking system records and automatic payment permissions
Where an authenticated MapsVisitor backend is activated, appointment and payment references, receipt IDs, applicable consent versions, Stripe customer/payment method reference IDs, staff completion evidence, payment notice timestamps, dispute holds and invoice statuses may be stored in restricted Cloudflare D1 records for service administration and audit. Only Stripe stores full card numbers and security codes. Future card authorization is optional and separate from booking. Access to operational records is limited to authorized staff. Logs should avoid complete payment or ID data.
Booking system records and automatic payment permissions
Where an authenticated MapsVisitor backend is activated, appointment and payment references, receipt IDs, applicable consent versions, Stripe customer/payment method reference IDs, staff completion evidence, payment notice timestamps, dispute holds and invoice statuses may be stored in restricted Cloudflare D1 records for service administration and audit. Only Stripe stores full card numbers and security codes. Future card authorization is optional and separate from booking. Access to operational records is limited to authorized staff. Logs should avoid complete payment or ID data.
Retention and security
Contact and service information is kept only as long as reasonably required for business, service and legal-record purposes, then deleted or de-identified according to an adopted retention schedule. Payment records may have mandatory statutory retention periods. We apply reasonable access controls, MFA where supported and appropriate confidentiality and technical measures. No online platform guarantees absolute security.
Sharing, publication and images
We do not sell client contact information. We share minimum necessary data with service providers and competent authorities where required. Client photography is published publicly to Google Maps or other channels only when covered by the agreed authorization, and such public content can be copied by third parties. Restricted/private areas and identifiable individuals are handled through access controls, consent, framing or blurring where applicable.
Your privacy choices
Privacy contact: Until a named privacy officer is publicly designated, send requests to zachsupwork@gmail.com, with the subject “MapsVisitor Privacy.” We will verify the requester's identity before disclosing personal information, respond under applicable law and document required corrections or deletion where law permits. A privacy officer and cross-border assessment remain launch tasks.
To request access, correction, withdrawal of consent where legally possible, deletion or explanation of processing, email zachsupwork@gmail.com. Withdrawing consent may limit our ability to deliver a requested service and does not erase records retained under law. We will respond under applicable privacy law. We will provide French-language privacy communications where required.
Cookies and updates
Marketing: Booking updates and invoice notices are operational communications. Promotional email/SMS will be separate and only sent with consent or another lawful basis. SMS is not yet configured, and selecting an optional maintenance plan does not authorize unsolicited marketing. We do not currently represent the site as cookie-banner-free if third-party widgets later add nonessential tracking; any new trackers will be reviewed.
Cloudflare, Calendly, Stripe and other embedded services may set technically necessary cookies under their own policies. This site presently does not intentionally use advertising pixels. Before adding advertising or nonessential analytics tracking, we will update disclosures and consent controls as required. Material changes will be dated here.