Privacy Policy

1. Who we are

Craft & Key is a residential renovation and garden suite construction studio based in Toronto, Ontario, Canada. You can reach us at hello@craftandkey.ca or 416 900 3345 for any question, including questions about this policy.

2. What we collect

We only collect personal information that you provide to us directly. That includes:

• Contact information: your name, email address, phone number, and project address, when you fill out the contact form, request a quote, or email us.
• Project details: answers you provide to our online tools (Cost Estimator, Permit Checker, Garden Suite Estimator), such as project type, scope, finish level, and location.
• Email subscription details, your name and email when you subscribe to our newsletter or request guide downloads.
• Basic technical information: limited information your browser sends automatically, such as approximate location, browser type, and pages visited. This is used in aggregate to understand how the site is performing.

We do not knowingly collect personal information from anyone under the age of 13.

3. Why we collect it

We use the personal information you give us to:

• Respond to your inquiries and prepare project estimates.
• Send you the guide, estimate, or content you requested.
• Send you marketing emails about our work, only if you have given express consent.
• Improve our website, our content, and the services we offer.
• Meet legal, regulatory, and bookkeeping obligations.

We do not sell or rent your personal information to anyone. Ever.

4. Email marketing and CASL

Under Canada's Anti-Spam Legislation, we will only send you commercial electronic messages (such as marketing emails) if you have given us express consent to do so, or we have a recognized implied-consent relationship with you (for example, you are an existing client).

Every marketing email we send identifies Craft & Key as the sender, includes our contact information, and contains a clear and functional unsubscribe link. Your unsubscribe request will be honoured within 10 business days, as required by law. We retain records of consent for at least three years.

5. Service providers we use

We rely on a small number of trusted third-party service providers to operate this website and run our business. Where they process your personal information, they do so only on our instructions and under their own privacy policies:

• Klaviyo (United States), email marketing platform. Stores subscriber email addresses and the answers you provide to our online tools so we can personalize the content we send you.
• Jobber (Canada), booking and customer relationship management. Stores contact form submissions and quote requests.
• Cloudflare (United States): website hosting, security, content delivery, and privacy-friendly web analytics. The analytics service does not use cookies or persistent identifiers and does not track individuals across websites.

Because some of these providers are based outside Canada, your personal information may be stored or processed in the United States or other jurisdictions, where it may be subject to legal access requests by foreign authorities. We choose providers that maintain strong technical and contractual safeguards.

6. How we protect your information

We use reasonable physical, technical, and administrative safeguards to protect personal information against unauthorized access, disclosure, alteration, or loss. The website is served over HTTPS. Internal access to your information is limited to people who need it to do their job. No method of transmission over the internet is 100% secure, but we take the safekeeping of your data seriously.

7. How long we keep your information

We retain personal information only for as long as is necessary to fulfill the purposes we collected it for, including to meet legal, accounting, or reporting requirements. If you subscribed to our email list and then unsubscribed, we keep a suppression record of your email address so we do not contact you again, and consent records for the period required by CASL.

8. Your rights

Under PIPEDA, you have the right to:

• Know what personal information we hold about you.
• Request a copy of that information.
• Ask us to correct any information that is inaccurate or incomplete.
• Withdraw your consent at any time, subject to legal or contractual restrictions.
• Ask us to delete your personal information, subject to certain legal exceptions.

To make any of these requests, email hello@craftandkey.ca. We will respond within 30 days. If you are not satisfied with how we have handled your request, you can contact the Office of the Privacy Commissioner of Canada.

9. Cookies and analytics

Our website uses only essential cookies needed for the site to function, such as remembering your light or dark mode preference. We do not use advertising cookies or cross-site tracking.

For analytics, we use Cloudflare Web Analytics, a privacy-respecting service that collects aggregate information about how the site is performing. It tells us things like which pages are most visited, where visitors are coming from (referral source), and approximate country of origin. It does not set cookies, does not store any data in your browser, does not collect your IP address, and does not track you across other websites. The data is anonymous and is used only to help us improve the site.

10. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or in applicable law. When we do, we will update the "Last updated" date at the top of this page. Material changes will be communicated by email to active subscribers and clients.

11. Contact us

If you have any questions, concerns, or requests about this policy or how we handle your personal information, please reach out:

Craft & Key Inc.
Toronto, Ontario, Canada
Email: hello@craftandkey.ca
Phone: 416 900 3345