Written in plain English, because a privacy policy nobody can read isn't really a privacy policy. This explains what we collect, why, who else sees it, and how to get it back or deleted.
Effective 18 September 2026 · Version 1.1
We collect what you type into our forms and some basic information about how you use this website. We use it to build your demo and to reply to you. We don't sell it, we don't rent it, and we don't add you to a mailing list without asking first. You can ask us what we hold on you, ask us to correct it, or ask us to delete it — email privacy@cashtech.ca and you'll hear back within 30 days. The rest of this page is the detail.
CashTech is a registered business name of 1001307533 Ontario Inc., a corporation incorporated under the laws of Ontario and operating from Brockville, Ontario. It is the corporation, not any individual, that is the organization responsible for your personal information under this policy. Because we handle personal information in the course of commercial activity, we're governed by Canada's federal private-sector privacy law, the Personal Information Protection and Electronic Documents Act (PIPEDA).
Kashif Tahir is the individual we have designated as Privacy Officer, and he is accountable on the corporation’s behalf for the personal information in our care — including information we pass to the service providers listed below. Anything in this policy can be raised with him directly at privacy@cashtech.ca.
Our demo request form asks for your business name, a description of what you do, the area you serve, your main services, why customers choose you, your current website if you have one, your email address and your phone number. We ask for these because we can't build you a useful demo without them. Nothing on that form is optional-but-secretly-required — if a field isn't marked required, you can leave it blank.
Payments are processed by Stripe. Your card number, expiry and security code go directly to Stripe and are never seen by, transmitted through, or stored on anything we control. We receive only your name, email, billing address, the amount, and whether the payment succeeded. Stripe's own privacy policy governs what they do with your payment data.
Nothing. We run no analytics on this website — no Google Analytics, no heatmaps, no session recording, no advertising pixels, and no cookies of our own. Our host keeps standard server logs, which include IP addresses, for a short period for security and to keep the site running. If we ever add a measurement tool, we will name it here and change the effective date above before it goes live.
We keep your correspondence and any details you give us in it, so we have a record of what was discussed and agreed.
PIPEDA requires us to tell you our purposes before or at the time we collect. Ours are:
We won't use your information for a new purpose that isn't on this list without coming back to you and asking.
When you fill in our demo form, you're giving us consent to use those details for the purposes above — the purpose is obvious from the form itself, and we've set it out here as well.
Marketing is separate. Sending you the demo you requested is a reply to your request. If we later want to send you anything promotional, that's a commercial electronic message under Canada's Anti-Spam Legislation, and we'll only do it where the law permits and always with a working unsubscribe. Reply "unsubscribe" to any message and we'll act on it immediately.
You can withdraw consent at any time, subject to legal and contractual limits — we can't, for example, delete an invoice we're required to keep for tax purposes. Withdrawing consent may mean we can no longer provide a service to you, and we'll tell you plainly if that's the case rather than letting you find out later.
We don't sell, rent or trade personal information. Ever.
We do use service providers to run the business, and your information passes through them. Most of these providers are based in the United States, which means your information is stored and processed outside Canada. While it's there it may be accessible to foreign courts, law enforcement and national security authorities under the laws of that country. We remain accountable for it and require comparable protection by contract, but we can't override foreign law and we'd rather say so than bury it.
| Provider | What it handles | Where |
|---|---|---|
| Netlify Forms | Demo request and onboarding form submissions | United States |
| Stripe | Payment processing | United States / Ireland |
| Netlify / Cloudflare | Website hosting and delivery | United States, global network |
| Email provider | Correspondence with you | United States |
We may also disclose personal information where the law requires it — a subpoena, warrant or court order — or where PIPEDA otherwise permits disclosure without consent, such as to collect a debt you owe us or in an emergency threatening someone's life, health or security. If we ever sell or transfer the business, client information may transfer with it, and you'd be told before that happened.
| Information | Kept for |
|---|---|
| Demo requests that didn't become clients | 12 months, then deleted |
| Client records and correspondence | The life of the relationship, then 7 years |
| Invoices and payment records | 7 years, as tax law requires |
| Host server logs | A short period, then automatically discarded |
When information reaches the end of its retention period we delete it or render it anonymous. You can ask us to delete sooner and we'll do it wherever the law lets us.
Every page on this site is served over an encrypted connection. Accounts holding personal information are protected with strong, unique passwords and two-factor authentication. Access is limited to people who need it to do the work — in practice, at present, that is a single person. We choose service providers with a credible security record, and we don't keep information we no longer need, because the safest data is the data you never held onto.
No system is perfectly secure, and anyone who tells you otherwise is selling something. If a breach occurs that creates a real risk of significant harm to you, we will report it to the Office of the Privacy Commissioner of Canada and notify you directly, as PIPEDA requires. We keep records of all security breaches for 24 months.
You have the right to:
Email privacy@cashtech.ca. We'll respond within 30 days. If we need longer we'll tell you why and how much longer, as the law allows. There's no charge. If we ever have to refuse a request in part — most often because releasing something would reveal another person's information — we'll tell you which part and why.
This site sets no cookies of its own. There are no analytics cookies, no advertising cookies, and nothing here tracking you across other websites — so there is nothing to opt out of. If you want to block or delete cookies generally, your browser settings do that, and this site works perfectly well without them.
This is a service for business owners. We don't knowingly collect information from anyone under 18. If you believe a child has given us information, tell us and we'll delete it.
Tell us first — email privacy@cashtech.ca with "Privacy concern" in the subject line. We'll acknowledge it within 5 business days, investigate, and give you a written answer within 30 days. If we got something wrong we'll tell you what we've changed.
If our answer doesn't satisfy you, you have the right to complain to the federal regulator, and you don't need our permission to do so:
Office of the Privacy Commissioner of Canada
30 Victoria Street, Gatineau, Quebec K1A 1H3
Toll-free 1-800-282-1376 · priv.gc.ca
If we change how we handle personal information, we'll update this page and change the effective date at the top. If the change is significant — a new purpose, a new category of information, a new provider handling your data — we'll email anyone it affects rather than quietly editing the page and hoping you notice.
Kashif Tahir
1001307533 Ontario Inc., o/a CashTech
Brockville, Ontario