Legal
Privacy Policy.
We collect as little about you as we can get away with. This page explains exactly what that means — what we see, where it lives, who touches it, and what you can ask us to do with it. We follow Canadian federal privacy law (PIPEDA), and nothing in this policy overrides rights you already have under it.
Section 01. The short version.
We do not sell your data. We do not run analytics or third-party trackers on this website. We do not drop cookies. The only personal information we hold is what you send us directly — through our contact form or WhatsApp — and we keep it only as long as we need it to serve you well.
Section 02. What we actually collect.
Here's the complete list of personal information we receive when you use fonebazaar:
- Contact form submissions: name, email address, phone number (optional), the service you're asking about, subject line, the message itself, and any attached file you choose to send.
- WhatsApp conversations: whatever you message us, whatever we message back. Meta (WhatsApp's parent company) handles the transport; we see it as the recipient on our business number.
- Order details: once you start an order with us, we keep a record — your name, the pieces you ordered, delivery or pickup preference, and any custom specs you shared. This lives in the WhatsApp thread itself, not in a separate database.
Section 03. What we do not collect.
For transparency, here's what we specifically don't track or store:
- No visitor analytics. We don't use Google Analytics, Vercel Analytics, Plausible, or any similar tool.
- No cookies. The only persistent storage on this site is your cart in localStorage — which is technically not a cookie and never leaves your browser.
- No advertising pixels. No Meta Pixel, no Google Ads conversion tracking, no TikTok Pixel.
- No third-party fonts at runtime. Our display font (Satoshi) is self-hosted on our server; our body font (Inter) is bundled at build time. No fetches to fonts.googleapis.com happen when you load a page.
- No chat widget. No Intercom, Drift, Crisp, or similar. If you want to chat, it's WhatsApp.
- No IP address logging beyond what our hosting provider sees for standard delivery (see Section 06).
Section 04. How we use what we collect.
What you send us is used for exactly one thing: making, delivering, and following up on your order. Specifically:
- Replying to your message or quote request.
- Making the piece you ordered.
- Coordinating pickup or delivery.
- Answering questions about an order after you receive it.
- Keeping a record in case of a return or remake request.
And specifically not for:
- We do not use your information for marketing emails.
- We do not build a customer profile for targeted ads.
- We do not resell or share your data with partners.
Section 05. Third parties that see your data.
We use a small number of services to run this website. Each one handles a specific function, and we've picked them to minimise how many companies touch your information.
- Vercel: hosts this website. They see standard server logs — your IP address, the pages you visited, your user agent — kept briefly for abuse detection. Vercel's privacy policy: vercel.com/legal/privacy-policy.
- Web3Forms: processes submissions from our contact form. Your message is sent to their servers, then forwarded to our inbox. They temporarily store the submission and log basic metadata. Web3Forms' privacy policy: web3forms.com/privacy.
- Meta (WhatsApp): the WhatsApp platform is how we take orders. Anything you message us passes through Meta's infrastructure under their own privacy terms. Meta's privacy policy: privacy.whatsapp.com.
Section 06. Where your data physically lives.
Our website is hosted on Vercel's global edge network. When you load a page from Sault Ste. Marie, you're likely served by a data center in Toronto or nearby.
Contact form submissions are routed through Web3Forms' servers and land in a Canadian email inbox — hello@fonebazaar.ca — which we access from Canada.
WhatsApp conversations are stored on Meta's infrastructure per their terms, which may include servers outside Canada. We access them from our WhatsApp Business account in Canada.
Section 07. How long we keep things.
Data retention is intentionally minimal. Here's what sits around and for how long:
- Contact form submissions: kept in our email inbox for up to 24 months, then manually archived or deleted. We review quarterly.
- WhatsApp threads: retained for the duration of the customer relationship plus one year. Longer only if an active custom project references back to earlier messages.
- Order records: retained for 3 years after order completion. This is the window in which remake/refund requests can reasonably arise.
- Your cart (localStorage): stays in your browser until you clear it or until browser storage is cleared for our domain. We can't delete it on your behalf — but you can, anytime.
Section 08. Your rights under PIPEDA.
Canadian federal law gives you specific rights over the personal information we hold. You can:
- Ask what personal information we have about you. We'll tell you — usually within a week.
- Ask us to correct inaccurate information. We'll do it as soon as we see the message.
- Ask us to delete your information. We'll do it unless we're legally required to keep it (e.g., tax records for orders already paid).
- Withdraw consent for us to process your information. If you do this while an order is active, we may not be able to complete the order.
- Ask how your information is being used and who it's been shared with. Same answer as above — we'll lay it out clearly.
Section 09. How we keep your data secure.
We take basic precautions. Nothing fancy, nothing industry-first — just the things that should be baseline in 2026:
- HTTPS everywhere. The entire site is served over TLS. There's no way to visit fonebazaar.ca over plain HTTP.
- Email account with two-factor authentication. Our hello@fonebazaar.ca inbox requires a second factor to sign in.
- WhatsApp Business account with two-step verification enabled.
- No shared credentials. No team members share passwords; each has their own access.
- Minimal attack surface. We don't run a database on this website. There's no user login, no password storage, no admin panel. Nothing to hack that we're responsible for.
Section 10. If something goes wrong.
Under PIPEDA, if we experience a data breach that poses a real risk of significant harm to you, we are required to:
- Notify you directly, as soon as reasonably possible.
- Report the breach to the Office of the Privacy Commissioner of Canada.
- Keep a record of the breach and what we did about it.
Section 11. Kids.
This site is not directed at children under 13. We don't knowingly collect information from anyone under 13. If you believe a child has sent us information — through the contact form or WhatsApp — please message us and we'll delete it.
Section 12. Changes to this policy.
We may update this policy as the business evolves, the law changes, or we start using a new tool that touches personal data. The last-updated date at the top of this page reflects the most recent change.
If the change is material — say, we add analytics or a new third-party processor — we'll note it clearly on our homepage for two weeks before the change takes effect, so you have a chance to read the new terms.
Section 13. Getting in touch about privacy.
If you have a question about this policy, want to exercise any of the rights in Section 08, or just want to understand something better — message us.
- WhatsApp: +1 (705) 971-0676
- Email: hello@fonebazaar.ca (put "Privacy" in the subject)
- Mail: fonebazaar studio, 253 Bruce St, Sault Ste. Marie, ON, Canada