Privacy policy
What 905 Trades collects when you send a request, who sees it, how long it is kept, and how to have it deleted. Plain language, nothing hidden in a longer document.
What we collect
When you submit the request form, we collect the job details you type in: the trade, the town, your timing, any details you add, and your name, phone number or email address. We also record the page you sent it from and the exact wording of the consent you agreed to when you ticked the box: "I agree that 905 Trades may pass these details to one matched contractor so they can contact me about this job, and may email me about it. I can withdraw this at any time by emailing hello@905trades.ca." We keep that wording, not just a record that a box was checked, because Canada's anti-spam law expects us to be able to show what you actually agreed to.
Why
We collect this to pass your request to the one contractor matched to your trade and town, and to email you about that specific request: a confirmation with your reference number, and any follow-up needed to complete it. We do not use it for anything beyond that request.
Who sees it
Three parties see your request. The one contractor matched to your job. The operator of 905 Trades, who is copied on every request so nothing is dropped. And the services that carry the data on our behalf: Microsoft Azure Communication Services, which sends the emails, and Cloudflare, which hosts the site and stores the request in its database. Neither of those providers uses your information for anything other than delivering it for us.
How long
We keep your request and the consent wording as a record of what you asked for and what you agreed to. You can ask for it to be deleted, or withdraw your consent, at any time by emailing hello@905trades.ca. When you withdraw consent, we record that withdrawal rather than deleting everything outright, because we need to be able to show that we stopped contacting you if that is ever in question. If you want the underlying request deleted as well, say so in the same email and we will remove it.
Stopping the form being abused
A form anyone can post to is a form somebody will eventually script. To limit that, we count recent submissions against a one-way fingerprint of the network address a request arrived from. The fingerprint is a hash, salted with a private key and with today's date, so it cannot be turned back into an address and today's fingerprint cannot be matched to yesterday's. It is not stored with your request, it is not used to identify you, and it is deleted automatically after a day.
Analytics
This site runs a first-party, cookieless analytics beacon. It builds a visitor identifier by salting and hashing basic request information fresh each day, so the same visitor gets a different, unlinkable identifier tomorrow. There is no cross-day identity to track, no cookie, and no advertising or retargeting pixel of any kind on this site.
Your rights
Under Canada's private-sector privacy law, you can ask what we hold about you, ask us to correct it, and withdraw your consent at any time. Email hello@905trades.ca for any of these. If you believe we have handled your information improperly and we have not resolved it to your satisfaction, you can complain to the Office of the Privacy Commissioner of Canada.
Contact
905 Trades is operated by Blue Crane Works Inc., Hamilton, Ontario. Email hello@905trades.ca with any privacy question or request.