PaintStart
PaintStart

PaintStart — Privacy Policy (PIPEDA)

Last updated: October 20, 2025

This Privacy Policy describes how PaintStart collects, uses, discloses, and protects Personal Information in the course of commercial activities, in accordance with PIPEDA (Personal Information Protection and Electronic Documents Act).

Privacy Commissioner Canada
+1

1) What we collect

  • Account & profile: name, email, phone, address, passwords, role (Customer/Pro).
  • Project details: property type, surfaces, photos/videos, measurements, preferences.
  • Transaction data: quotes, invoices, payment tokens/IDs (from payment processor), tax data.
  • Technical data: device, browser, IP address, general location, diagnostics, cookies.
  • Communications: messages, reviews, support requests, call/meeting notes.

We collect only information necessary for appropriate purposes and with knowledge/consent, as required by PIPEDA.

Privacy Commissioner Canada

2) How we use information

  • Provide and improve the Platform, generate quotes, match Customers with Pros, schedule, and process payments.
  • Prevent fraud, secure accounts, and enforce Terms.
  • Provide customer support and service updates.
  • Conduct analytics and product development (using aggregated or de-identified data where possible).
  • Marketing & communications (with consent and unsubscribe options) to comply with CASL for commercial electronic messages.

ISED Canada
+1

3) Lawful basis under PIPEDA (consent & appropriate purpose)

We obtain consent (express or implied, depending on context) and limit collection, use, and disclosure for appropriate purposes. You may withdraw consent, subject to legal or contractual restrictions and reasonable notice.

Privacy Commissioner Canada

4) Disclosures & service providers

We use third-party processors (e.g., payments, cloud hosting, customer support). We require them to protect Personal Information and use it only for our instructions. Some providers may process data outside Canada; safeguards are used to protect data in transit and at rest.

5) Payments

Payments are handled by PCI-compliant processors (e.g., Stripe). PaintStart does not store full payment card numbers. Processor privacy terms and security controls apply to payment data.

6) Data retention

We retain Personal Information only as long as necessary for the purposes set out above or as required by law, then securely delete or de-identify it.

7) Security

We use administrative, technical, and physical safeguards (access controls, encryption in transit, training, and vendor due-diligence). No method is 100% secure.

8) Breach reporting & records

If a breach of security safeguards creates a real risk of significant harm, we will notify the Office of the Privacy Commissioner of Canada (OPC) and affected individuals, and keep required records, as mandated under PIPEDA breach-notification requirements.

Privacy Commissioner Canada
+1

9) Your choices & rights

You can access, correct, or request deletion of Personal Information subject to legal limits. You may withdraw consent to marketing at any time (unsubscribe) to comply with CASL.

ISED Canada

10) Cookies & tracking

We use necessary cookies (security, session) and, with consent where required, analytics or advertising cookies. You can adjust browser settings, but some features may not work.

11) Minors

The Platform is intended for adults. If we learn we collected Personal Information from a child under the age of 13 without parental consent, we will delete it.

12) Electronic records

You agree to receive privacy notices electronically. Ontario’s Electronic Commerce Act recognizes the validity of electronic records/signatures with certain exceptions.

Ontario

13) Changes

We may update this Policy; we’ll post changes with a new “Last updated” date.

14) Contact (Privacy)

Email: privacy@u-paint.ca (example)
Mailing address: (insert Ontario address)
OPC information on PIPEDA: https://www.priv.gc.ca (for user reference).

Privacy Commissioner Canada