Privacy Policy

Scope and operator

This policy applies to the BC Snow Tuning website and booking service. BC Snow Tuning is a registered Ontario sole proprietorship. The designated privacy contact is the Privacy Officer, BC Snow Tuning. Privacy inquiries or complaints may be submitted through the Contact page.

Information collected

We collect only information needed to assess, form, and operate a guest booking.

• Name, email address, phone number, and booking locale.
• Pickup and return addresses when home service is requested, plus requested dates and windows.
• Equipment type, selected services, customer instructions, and one private equipment photo per item.
• Booking, final-agreement, status, pricing, payment-authorization, policy-acceptance, tracking, security, and delivery records.
• Pseudonymous anti-abuse counters and limited operational events that exclude raw IP addresses and request bodies.

How information is used

We use this information to validate service eligibility, prevent overbooking and abuse, prepare and manage a booking, process equipment photos, provide secure booking status, deliver transactional messages, form and retain the booking agreement, and support the owner workflow.

We do not use booking data for marketing, advertising profiles, or sale to data brokers.

Payment and service providers

When online card payment is available, Stripe hosts Checkout and processes card or compatible card-wallet details. BC Snow Tuning does not store card numbers. Booking flows request card only and use manual authorization before owner confirmation; authorization is not a completed payment.

The service also relies on Netlify, Neon PostgreSQL, private Backblaze B2 storage, Cloudflare Turnstile, Resend when separately enabled, and address-validation providers. Test and live Stripe records remain separated, and historical test payments are never treated as revenue.

Storage, security, and retention

Equipment photos are stored privately and scheduled for deletion after 180 days. Secure booking links use a high-entropy capability and are normally available for up to 180 days while active, then no more than 30 days after a terminal status.

Operational logs are intended to be retained for 7 days and exclude customer PII, secrets, and raw provider payloads. Twelve months after completion or cancellation, the retention workflow removes or anonymizes operational and customer-service copies of contact details, addresses, customer notes and instructions, tracking credentials, and transactional-email recipient and body data unless a legal hold applies.

An accepted immutable booking agreement is a separate transaction record. It may retain the exact details accepted by the customer for longer where reasonably necessary to document the transaction, resolve disputes, or meet legal or accounting obligations.

Minimum service, pricing, authorization, agreement, policy, tax, payment, status, and audit evidence is retained for six complete years after the applicable calendar tax year. A later financial event may extend that date, and a legal hold prevents minimization or deletion.

We use access controls, hashed capabilities, infrastructure encryption, and data minimization. No online system can be guaranteed completely secure.

Your choices and requests

You may request access to or correction of your personal information, and may request deletion where applicable, subject to information that must be retained for security, dispute, accounting, tax or other legal purposes.

Submit a privacy inquiry or complaint through the Contact page. Do not send card details, account secrets, equipment-photo links, or private booking links in a support message.

Updates

Material changes use a new policy version and effective date. The version accepted with a booking and the final agreement disclosure are retained with that booking.