Privacy Policy: HandymanNinja.ca
Last updated: November 9, 2026
Handyman Ninja is a registered business name of 1001788959 Ontario Incorporated ("Handyman Ninja", "we", "us"). This policy explains, in plain language, what personal information we collect through HandymanNinja.ca, why we collect it, and your choices. It also covers information we collect when we prepare estimates by email or phone, take payments, and carry out work in your home. We follow the principles of Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL).
1. What we collect
When you request an estimate, we collect:
- Contact details: your name, phone number, and email address.
- Service location: your service address and postal code.
- Job details: the repairs you choose, your descriptions, quantities, material and colour notes, and whether you'd like a call or a text.
- Photos you upload of the work area. Please avoid including people, documents or other personal items in the photos.
- Your marketing choice: whether you ticked the offers box, plus the date, the time, the wording you agreed to, and the page or form version where you ticked it.
- Basic technical data: to stop spam and abuse, we use Cloudflare Turnstile and keep a scrambled (hashed) version of your IP address for up to 30 days. We don't use advertising trackers on the estimate form.
When you play the Win $10 game and claim a coupon, we collect:
- Your phone number, so we can text you your coupon code and so each phone number can have only one coupon at a time. We use it only for that. We do not use game phone numbers for marketing.
We keep your phone number and coupon code until the coupon is used or expires, plus 30 days, then we delete them. If a coupon is used on a job, that record becomes part of the job record and is kept for as long as we keep that job record.
When you book and we do the work, we also collect:
- Booking and payment details: your estimate acceptance, appointment window, deposit and balance payments, and invoices. Card payments are processed by our payment provider, Stripe (Stripe Payments Canada / Stripe, Inc.). We don't see or store your full card number.
- Access notes: things you tell us to get in and work safely, such as pets, parking, and who will let us in.
- Job photos and records: before and after photos of the repair area that our team takes on-site, any existing damage nearby, the work done, and your approval of any extra work (by signature or tap on our device, or remotely), plus the end-of-visit walkthrough.
- Incident records: if something is damaged during a visit, photos and notes about what happened and how it was resolved.
- Messages and feedback: emails, texts and call notes about your job, and any feedback you choose to give.
- Optional marketing photo consent: whether you agreed that we may use photos of the finished work in our marketing. This is separate from the offers box.
2. Why we collect it
We use your information to:
- review your request, confirm your visit minimum for your address, and prepare and send your estimate;
- contact you about your request, including by phone or text if you asked us to;
- schedule, carry out and support your repair, including our workmanship guarantee;
- take your deposit and final payment, and issue receipts and invoices;
- handle any damage claim;
- keep the business records that the law requires, such as tax and accounting records;
- protect the site from spam and abuse;
- send offers and discounts by email, only if you opted in. We don't send marketing text messages unless you give separate consent for them.
- use photos of finished work in our marketing, only if you agreed separately.
We collect only what we need for these purposes. We use it only for them, unless you agree to something else or the law requires otherwise. We do not sell your personal information.
3. Where it is stored and who helps us
We use trusted service providers that process information on our behalf:
- Cloudflare, Inc. hosts the website. It stores estimate requests in Cloudflare D1 and photos in Cloudflare R2, and it provides the spam check (Turnstile).
- Brevo (Sendinblue SAS) sends our emails, such as estimate notifications and, if you opted in, offers.
- Zoho Mail (Zoho Corporation) handles our email inbox.
- Stripe (Stripe Payments Canada / Stripe, Inc.) processes deposits and payments.
- Our accountant, for tax and bookkeeping.
These providers may store or process information outside Canada, including in the United States and the European Union. While it is outside Canada, it may be accessed by the courts, law enforcement and national security authorities of that country. We require our providers to protect your information and to use it only to provide services to us.
4. How long we keep it
| Information | How long we keep it |
|---|---|
| Estimate requests that don't go ahead, and their photos | 12 months after the request, then deleted |
| Customer job records, including photos and invoices | 6 years from the end of the tax year the job relates to, then deleted |
| Hashed IP addresses used for spam checks | 30 days or less |
| Marketing consent records | As long as we rely on your consent, plus 3 years after you unsubscribe |
| Win $10 game claim details (phone number and coupon code) | Until the coupon is used or expires, plus 30 days, then deleted. If applied to a job, it becomes part of that job’s record and follows the job-record period. |
| Unsubscribe requests | As long as we send marketing email, so we never email you again by mistake |
| Payment records, receipts and accounting records | 6 years from the end of the tax year they relate to |
| Incident and damage records | Until the matter is resolved, plus 2 years; at least as long as the related job record |
| Marketing photos you agreed to | Until you withdraw consent; we then stop new uses and remove them from our channels where we can |
| Privacy requests and our responses | 2 years after we respond |
When a period ends, we delete or anonymize the information.
5. Marketing emails (optional)
On the estimate form, the box "Email me exclusive Handyman Ninja offers and discounts." is unticked by default. Getting an estimate does not depend on it.
- If you tick it, we may email you offers until you unsubscribe.
- Every marketing email includes our name, our mailing address and a working unsubscribe link. The unsubscribe link works for at least 60 days after each email.
- You can also unsubscribe by emailing stephen@handymanninja.ca. We act on unsubscribe requests right away where we can, and always within 10 business days.
- Even if you don't opt in, we will still send emails about your own request or job, such as your estimate, booking confirmations and reminders. These don't include promotions.
6. Your choices and rights
You can ask us to:
- see the personal information we hold about you;
- correct it if it is wrong;
- withdraw consent to marketing, or to uses that aren't needed for your job. Withdrawing consent for uses we need to do your job may mean we can't complete it.
- delete it. We will delete what we no longer need. Some records we must keep for the periods in section 4 (for example, tax records).
To make a request, email us (see section 9). We may ask you to confirm your identity. We will respond within 30 days. If we need more time, we'll tell you why and when to expect an answer, as the law allows. If you're not satisfied with our answer, tell our privacy contact first and we'll review it. If you're still not satisfied, you can contact the Office of the Privacy Commissioner of Canada (priv.gc.ca).
7. How we protect it
- Only authorized owners and staff can access estimate requests, behind a secure sign-in.
- Data is encrypted in transit (HTTPS).
- Staff only access the details they need for a job.
- Job photos stay in our job system, not on personal phones or galleries, and staff can't export customer lists.
- We don't publish your address or photos without your separate consent.
No system is perfectly secure. If a breach creates a real risk of significant harm, we will notify you and the Privacy Commissioner as soon as feasible, as required by law.
8. Children
Our services are for adults who can arrange home repairs. We don't knowingly collect information from children under 18.
9. Contact us
Privacy contact: Stephen Yap, Owner, Handyman Ninja (1001788959 Ontario Incorporated)
- Email: stephen@handymanninja.ca
- Mail: mailing address available on request. Email us and we’ll send it.
10. Changes
We may update this policy. The date at the top shows the latest version. If we make significant changes, we will post them on this page before they take effect. If a change means we would use your information for a new purpose, we'll ask for your consent first.