TenantCraft is a sole proprietorship operated by Geri Crroj from Ontario, Canada. This policy explains what information I collect through tenantcraft.ca, why, where it goes, and how I handle it. It is written to align with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's Anti-Spam Legislation (CASL) for any commercial electronic messages, and the EU GDPR where it applies. Plain English on purpose, if anything is unclear, email me.
What I collect
- Contact-form submissions: name, email address, organization (optional), inquiry type, and the message you write.
- Discovery-call bookings: name, email, and any notes you supply when scheduling through Cal.com.
- Gated PDF downloads and newsletter: email address you submit to receive a guide or subscribe to occasional updates, plus your CASL opt-in timestamp and the group you joined.
- Site analytics: pages visited, referrer, device type, and approximate region via Google Analytics 4 with IP anonymization. No cross-site advertising profiles are built.
- Server logs: standard request logs (IP, user-agent, timestamp) retained by Hostinger for the period set in their policy.
Why I collect it
To respond to your enquiry, schedule a call, deliver the guide you requested, send the newsletter you opted into, and understand which pages people read so I can improve them. That's it. I do not sell your information, and I do not share it with anyone outside the processors listed below.
Processors I use
Each one is named here with the data class it touches and the purpose it serves. Their own privacy practices govern your data once it is with them, links go to their policies.
Hostinger, hosting and server logs
Static hosting for tenantcraft.ca and standard request logs (IP, user-agent, timestamp). Servers may be located outside Canada; retention follows Hostinger's policy.
Web3Forms, contact-form transport
Receives a one-way relay of contact-form submissions (name, email, organization, inquiry type, message body) and forwards them to my inbox. Web3Forms does not retain submissions long-term. Privacy policy.
MailerLite, email subscribers and gated-PDF delivery
Stores subscriber email, group membership, double-opt-in timestamp
(CASL paper trail), and basic engagement data (open/click on emails
I send). Sender domain is tenantcraft.ca. MailerLite
is an EU-based processor; data may be processed in the EU or US.
Privacy policy.
Cal.com, discovery-call scheduling
Receives the name, email, and any notes you provide when you book a call. Calendar events sync to my calendar. Cal.com is hosted in the US. Privacy policy.
Google Analytics 4, anonymized site usage
Page-view, referrer, device, and approximate-region data with IP anonymization on. No cross-site advertising integrations. Default Google retention applies (14 months). Privacy policy.
Data leaving Canada
Some processors above are based outside Canada (US or EU). When you submit information, it may be stored or processed in those jurisdictions and is subject to the laws there, including lawful access by foreign authorities. By using the site you accept that transfer. If that is not acceptable for your situation, email me and we'll find a Canada-only path.
How long I keep it
Contact-form messages stay in my inbox while the conversation is active and for a reasonable archive period after, typically up to two years, in case you come back. Newsletter subscribers stay on the list until they unsubscribe. Cal.com bookings stay until I delete the calendar event. Analytics data follows Google's default retention. You can ask me to delete anything at any time.
How to withdraw consent or unsubscribe
- Newsletter / gated-PDF emails: click the unsubscribe link at the bottom of any email. It removes you from the list immediately.
- Anything else: email hello@tenantcraft.ca and tell me what to delete or stop. I will respond within 30 days, which is the PIPEDA deadline.
Your rights under PIPEDA
You can ask to see what I hold about you, correct it, or have it deleted. You can withdraw consent for the newsletter or any other optional contact at any time. Email hello@tenantcraft.ca and I will respond within 30 days. If you are unhappy with my response, you can escalate to the Office of the Privacy Commissioner of Canada.
Cookies
The site uses no advertising or third-party tracking cookies. Google Analytics sets first-party cookies that record an anonymized session ID. You can block them with any standard browser setting or extension without breaking the site. Cal.com and the embedded booking widget may set first-party cookies on the cal.com domain when you interact with the embed.
Security
The site runs over HTTPS with Hostinger-managed TLS. Form submissions go directly from your browser to Web3Forms over HTTPS. I am the only person with access to the inbox and the MailerLite list. No client deliverables are stored on the public site, engagement deliverables live in Microsoft 365 tenants you control or in private storage referenced from your SOW.
Changes to this policy
If anything material changes, a new processor, a different analytics tool, a new data-handling step, I will update this page and bump the "last updated" date at the top.
Contact
Questions or requests: hello@tenantcraft.ca, or use the contact form. TenantCraft is operated from Ontario, Canada.