Gold Standard Cleaning

Privacy policy

This policy explains how Gold Standard Cleaning handles personal information through our cleaning business, public website, and the internal reporting application named Gold Standard Cleaning Admin.

Effective
Applies in
Ontario, Canada

About this policy

Gold Standard Cleaning is an Ontario cleaning business serving homes, short-stay rentals, and commercial properties in and around Collingwood. We are responsible for personal information under our control and follow Canada's Personal Information Protection and Electronic Documents Act, known as PIPEDA, and other applicable laws.

This policy applies when you visit goldstandardcleaningservices.com, request a quote, contact us, receive cleaning services, or use an account that we have authorized to access Gold Standard Cleaning Admin.

Information we collect

Information you give us

Depending on how you work with us, we may collect:

  • Your name, email address, telephone number, and preferred contact method.
  • A property address, property type, approximate size, service priorities, requested frequency, timing, access notes, and other details needed to prepare an estimate or deliver service.
  • Messages, service requests, feedback, and records of our communications.
  • Estimate, invoice, payment-status, and transaction records maintained for business and accounting purposes. We do not ask you to place payment-card details in a quote or contact form.

Information collected through the website

When you use our website, our hosting and analytics providers may receive your Internet Protocol address, browser and device information, approximate location derived from that address, pages visited, referring page, and interactions such as form submissions or telephone-link clicks. Google Analytics may use first-party cookies or similar identifiers. Vercel Web Analytics receives limited website usage information.

Information used by authorized administrators

If you are authorized to sign in to Gold Standard Cleaning Admin, we collect your administrator account email for authentication. Convex Auth stores the password only as a one-way hash. The application also accesses the Google reporting data described under Google user data.

Why we use information

We use personal information to:

  • Respond to questions and prepare property-specific walkthroughs, estimates, and service plans.
  • Schedule and deliver cleaning services, manage access instructions, document agreed work, and resolve service concerns.
  • Send estimates, invoices, service messages, and other records connected to our relationship.
  • Operate, secure, maintain, and improve our website and internal systems.
  • Measure website and advertising performance, understand which inquiries become service requests, and make internal business decisions.
  • Meet legal, tax, accounting, insurance, fraud-prevention, and security obligations.

We use information for a new purpose only when that purpose is compatible with the original reason for collection, you consent, or the law permits or requires it.

Google user data and Gold Standard Cleaning Admin

Gold Standard Cleaning Admin is an internal, allowlisted reporting and controlled Google Ads management tool. A dedicated service account has Viewer access to Gold Standard Cleaning's Google Analytics property and Standard access to its configured Google Ads account. Reporting is read-only. The application can pause or enable existing campaigns and keywords, adjust a non-shared campaign budget, or add a campaign negative keyword only after an authenticated administrator approves the exact action.

Google data the application accesses

  • The administrator account email used to authenticate access to the internal application.
  • Google Analytics 4 reporting data, including traffic, acquisition, engagement, events, and conversion metrics for Gold Standard Cleaning's property.
  • Google Ads reporting and resource data, including account, campaign, ad group, keyword, search-term, budget, status, impression, click, cost, and conversion information for the configured advertising account.

The application does not request access to Gmail, Google Drive, Google Contacts, or personal files.

How the application uses and stores Google data

We use Google data to provide internal reporting, analysis, recommendations, and explicitly approved Google Ads changes requested by an authenticated administrator. Every supported Ads change pauses for a separate administrator approval, targets one resource, checks that the resource still matches the proposed state, and verifies the resulting state. Administrator passwords are stored only as one-way hashes by Convex Auth. The service-account private key is kept in server-side secret storage and is not exposed in the public website or browser source. The tools do not store a user refresh token. Reports are fetched on demand. Report results, approval decisions, change inputs, the approving administrator, Google request identifiers, and verified results may appear in the authorized administrator's conversation history, but we do not create a separate long-term archive of raw Google API reports.

How Google data is shared

We disclose Google data only to service providers that process it as needed to host, secure, or provide the requested reporting and controlled-management features. Selected report results may be processed by our configured artificial-intelligence service provider solely to generate the analysis or approved action requested by an authorized administrator. We do not allow Google user data to be used to train generalized or non-personalized artificial-intelligence or machine-learning models.

We do not sell Google user data, use it for targeted advertising, provide it to data brokers or information resellers, use it to determine creditworthiness, or disclose it for purposes unrelated to the application. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Revoking access

An administrator may ask our privacy officer to disable or delete an administrator account and associated conversation records. A business account administrator can separately revoke reporting and management access by removing the service account from the GA4 property and Google Ads account. Revoking either form of access disables the features that depend on it.

When we share information

We do not sell or rent personal information. We may disclose it:

  • To employees and contractors who need it to prepare an estimate, schedule work, deliver service, maintain systems, or respond to you.
  • To providers that support hosting, databases, authentication, analytics, accounting, communications, security, and internal reporting. Current technology providers include Vercel, Convex, Google, OpenRouter, the selected AI model provider, and QuickBooks where applicable.
  • To professional advisers, insurers, regulators, law enforcement, or other parties when the law requires or permits disclosure.
  • As part of a proposed or completed business transaction, subject to appropriate confidentiality and legal requirements.

We require service providers to use information only for the work they perform for us and to protect it using appropriate safeguards.

We seek meaningful consent when required. You may decline optional information or withdraw consent, subject to legal or contractual limits and reasonable notice. Withdrawing consent may prevent us from providing a quote, service, or feature that needs the information.

You can block or delete browser cookies through your browser settings. Privacy tools may limit analytics collection. If we send commercial electronic messages, you can use the unsubscribe method in the message or contact us. Service and transaction messages may continue when needed to manage an active request or relationship.

How we protect information

We use administrative, technical, and physical safeguards suited to the sensitivity of the information. These include role-based access, allowlisted administrator accounts, server-side secret storage, encrypted network connections, access restrictions, provider security controls, and procedures for responding to suspected incidents. No system is completely secure, so we review safeguards as our services and risks change.

Retention and deletion

We keep personal information only as long as reasonably needed for the purposes described in this policy, to manage an active customer relationship, or to meet legal, accounting, tax, insurance, dispute, fraud-prevention, and security requirements. Retention periods vary by record type. When information is no longer required, we delete, destroy, or anonymize it using methods appropriate to its sensitivity.

Service-account access tokens are short-lived and cached only for their validity period. The service account retains reporting access until a business account administrator removes it or the integration is no longer needed. We limit Google report data in administrator responses and conversation history to what supports the requested analysis. You may request deletion as described below, subject to records we must retain by law.

Your privacy rights

You may ask us to:

  • Explain whether we hold personal information about you and how we have used or disclosed it.
  • Give you access to personal information under our control.
  • Correct information that is inaccurate or incomplete.
  • Withdraw consent or request deletion where applicable.
  • Answer a question or complaint about our privacy practices.

We may need to verify your identity before acting on a request. We respond within the period required by applicable law, generally within 30 days under PIPEDA. Legal exceptions may limit access or deletion. If an exception applies, we will explain it unless the law prevents us from doing so.

Processing outside Canada

Some service providers may process or store information outside Ontario or Canada, including in the United States. Information in another country may be subject to that country's laws and lawful access by its courts, governments, or law-enforcement agencies. We remain accountable for personal information transferred to providers for processing and use contractual or other safeguards appropriate to the service.

Changes to this policy

We may update this policy when our services, providers, legal obligations, or information practices change. We will post the revised policy here and change the effective date. We will provide additional notice or seek consent when a material change requires it.

Contact our privacy officer

Send privacy questions, access or correction requests, deletion requests, and complaints to:

Privacy Officer, Gold Standard Cleaning
64 Hurontario Street
Collingwood, ON L9Y 2L6
sales@goldstandardcleaningservices.com
+1 705 408 0911

If we do not resolve your concern, you may contact the Office of the Privacy Commissioner of Canada.