How we handle your details.
Plain language, no tracking. This notice covers the Tiles Connect website and the project inquiry form, and applies Canada’s privacy law (the Personal Information Protection and Electronic Documents Act, “PIPEDA”) and any provincial law that applies to you.
Who we are
“Tiles Connect”, “we” and “us” mean the Toronto tile installation business that runs this website. We use the name Tiles Connect publicly.
What we collect
Only what you choose to send through the project inquiry form: your name; your email address and/or phone number; the type of project; a description of it; and your agreement to be contacted. You may also add your project location (a city or postal code), the approximate project size, how you would like to be contacted (email, phone call or text message) and photographs. We also record when you sent the inquiry and when you agreed.
Photographs can carry hidden details such as the place and time they were taken. We do not remove these, so please only send photos you are comfortable sharing.
We collect nothing else about you through this website. It has no accounts, no analytics and no advertising or tracking scripts.
Why we collect it, and your consent
To read your inquiry, contact you about it, and talk about the project, which may lead to a consultation, a site visit or an estimate prepared by the studio. If you become a customer, we keep your details to carry out and support the work. We do not sell your information and do not use it for marketing lists.
We ask for your consent with a tick box before you can send the form. Sending the inquiry means you agree that we may collect and use what you gave us for these purposes and contact you about it by the method you chose. We keep a record of that agreement and its date with your inquiry.
You can withdraw your consent, or change how you want to be contacted, at any time by contacting us (see below). We will stop contacting you about the inquiry. We may keep a short record that you withdrew, and some information we must keep for legal reasons. If you withdraw consent, we may not be able to continue with your project inquiry.
An inquiry is not a quote or a booking, and no time is reserved. The website does not generate estimates or prices automatically; the studio contacts you directly.
What happens to your inquiry
Your inquiry is saved as a new lead in the studio’s private business system, with a follow-up task for the studio. Only the studio’s authorised staff can read it. The studio contacts you by phone, text or email, as you asked. At the moment this website does not send you an automatic confirmation email, and we do not email your photos anywhere.
When the studio’s email notifications are switched on, a short email is also sent to the studio’s own mailbox so the studio can follow up quickly. It contains what you typed into the form (your name, contact details, project type, description and the number of photos you added), but not the photos themselves, and a link to the inquiry in the private business system.
Photos
Photos you add are sent directly from your browser to private storage, using short-lived secure links, and are linked to your inquiry. They are not public and are not shown on this website or used in the studio’s portfolio. They can be opened only by signed-in, authorised people through the studio’s business system. We do not use them for anything other than your inquiry. Photos that are uploaded but never submitted with an inquiry are removed by an automatic clean-up.
Service providers and where information is processed
We use technology providers to run the website and the business system. They handle information only on our behalf, to provide their service: Vercel (website hosting and the studio’s web address), Neon (the business-system database and private photo storage), Resend (sends the studio’s notification emails from the studio’s address), ForwardEmail (passes email sent to the studio’s info@tilesconnect.ca address on to the studio’s mailbox), Google (the studio’s Gmail mailbox, where those emails are received), and the standard internet infrastructure they run on. We do not allow them to use your information for their own purposes. If you email us, your message and your email address pass through ForwardEmail and Google on their way to the studio.
These providers may process or store information outside Canada. As set up today, the business-system database and the photo storage are located in the United States. Information held outside Canada can be accessed by courts, law enforcement and other authorities under the laws of that country. We do not promise that your information stays in Canada. If we change providers or where data is held, we will update this notice.
We do not share your inquiry with anyone else unless you ask us to or the law requires it.
Cookies, logs and spam protection
This website sets no cookies. It stores one note in your browser (tc-hero) so the opening animation plays only on your first visit, and keeps your inquiry draft in your browser until you send it. Fonts are served from this site, not from a third party.
Our hosting provider keeps routine technical logs of requests (such as the time, the page requested and your network address) to run and secure the service. To stop automated abuse, the form uses a hidden field, a signed timer that records when the form loaded, and a limit on how many requests one connection can send. For that limit the business system keeps a one-way hash of your network address, not the address itself. The business system also keeps technical records of errors and security events, which are deleted automatically after 90 days.
How we protect it
Your inquiry travels over an encrypted connection. Stored information sits in access-controlled systems that require sign-in, separate each business’s data from others’, and limit who can see what by role. Photos are kept in private storage that is not reachable without a secure link or sign-in. Inside the business system, technical support users cannot open customer information unless the studio grants them time-limited access, and that access is logged. No system is perfectly secure, and we cannot guarantee absolute security, but we take reasonable steps to protect your information.
How long we keep it
We keep inquiry information only as long as we need it for the purposes above, and for as long as the law requires if you become a customer. We have not set fixed retention periods yet. When we no longer need information, we delete it or make it anonymous in a secure way. You can also ask us to delete it sooner (see below).
Your rights: access, correction and deletion
You can ask to see the personal information we hold about you, ask us to correct it, ask us to delete it, or withdraw your consent. We may need to confirm who you are first. For a request to see your information, PIPEDA requires us to respond within 30 days; in limited cases the law allows more time, and we will tell you if we need it. We aim to deal with correction, deletion and withdrawal requests just as promptly. That is our goal rather than a legal guarantee. If we cannot fully meet a request, we will tell you why. There is normally no charge.
Questions, requests and complaints
Our privacy contact is Tiles Connect, at tilesconnect@gmail.com. Email it for privacy questions, requests to see or correct your information, withdrawing your consent, and complaints. You can also message the studio on Instagram @tilesconnect (opens in a new tab), call 647-530-2590, or use the contact page, and quote the reference you were given when you sent your inquiry. We will look into every complaint and tell you what we found.
If you are not satisfied, you can contact the Office of the Privacy Commissioner of Canada (opens in a new tab). If you live in Quebec, Alberta or British Columbia, the privacy law and privacy regulator of your province may also apply to you.
If something goes wrong
If a security breach involving your personal information creates a real risk of significant harm to you, we will tell you and report it to the Office of the Privacy Commissioner of Canada as the law requires, and we keep a record of every breach.
Other sites
Links to Instagram, Threads and the SitesByNu credit lead to other organisations’ sites, which have their own privacy practices.
Changes to this notice
We will update this notice if our practices change, for example if we add an email service or a new provider. The current version always appears on this page. When you send an inquiry, we record which version you agreed to. This is version 2026-11-01.1.