Privacy Policy

Nuandria Eco-Clean is operated by Nuandria Group Inc., an Ontario-based corporation. Nuandria Group Inc. is responsible for personal information collected and processed in connection with Nuandria Eco-Clean's services.

When you contact Nuandria Eco-Clean or request a quote, we may collect your name, email address, phone number, preferred contact method, service location, cleaning requirements, scheduling preferences, and information you choose to include in your message.

For business inquiries, we may also collect a business name and details about the premises. Our website quote form requests a full Canadian postal code rather than a street address. A street address may be requested later when arranging an accepted service.

As a customer relationship develops, we may maintain relevant quotes, bookings, payment-status information, service preferences, correspondence, and operational notes.

We use personal information to respond to inquiries, prepare quotes, communicate about requested services, arrange bookings, provide cleaning services, and administer related business transactions.

Submitting a quote request does not enroll you in marketing communications. We do not treat a quote request as consent to promotional campaigns.

Currently, website quote requests are processed through our website infrastructure and email-delivery provider, Resend, for delivery to our business mailbox and customer acknowledgements when the submission service is operational.

Relevant inquiry and customer records are manually maintained in Microsoft Lists within Microsoft 365. Our website does not currently maintain its own customer database or automatically synchronize quote submissions with the CRM.

As our services develop, we may introduce an integrated customer management database, automated quote and booking workflows, retention monitoring, and payment processing. These capabilities are planned and are not currently part of our website quote-submission process.

Before introducing material changes, we will assess their privacy and security implications, update relevant disclosures, and obtain additional consent where required.

We use third-party service providers to support website hosting, form protection, email delivery, business communications, and customer record management. These include Cloudflare, Resend, our business email provider, and Microsoft 365.

Resend processes and stores email content and delivery logs in the United States. Cloudflare may process website and security-related technical information internationally. Microsoft 365 also processes business communications and customer records under its applicable service arrangements.

We may engage additional providers as our systems evolve. Material changes affecting personal information will be reflected in this policy as appropriate.

We use measures intended to reduce unauthorized access and automated form abuse. Our quote process may use Cloudflare Turnstile to help distinguish legitimate submissions from automated activity.

Our website does not currently use its own quote-submission database or marketing analytics to store submitted form contents. Infrastructure and service providers may separately process technical information, including logs, under their applicable practices.

For inquiries that do not proceed to a customer relationship, we retain associated personal information for no longer than 12 months after the last customer interaction, unless a documented legal or legitimate business reason requires further retention. This includes review of related CRM entries and business emails.

Other quote-request emails are subject to a general maximum retention period of 24 months, unless a shorter retention requirement applies or a documented legal or legitimate business exception requires further retention.

Information for active customers is retained as reasonably necessary for the relationship and applicable obligations. Inactive customer contact records are reviewed after 24 months. Financial and tax records may need to be retained longer where required by law.

We conduct monthly manual retention and deletion reviews. Provider backups, logs, and recycle bins may follow different retention schedules, and deletion from an active record does not necessarily mean immediate permanent erasure from every system.

Future automated retention processes will be assessed before implementation and will not override applicable legal retention requirements.

You may contact us to request access to or correction of your personal information, raise a privacy concern, or request deletion or withdrawal of consent where applicable. We may need to verify your identity before processing a request.

We generally respond to access requests within 30 calendar days under PIPEDA, subject to legally permitted extensions. Some requests may be subject to legal retention requirements or other lawful limitations.

We investigate suspected privacy incidents and take appropriate steps to contain and address them. Where required by applicable law, we notify affected individuals and the relevant privacy regulator. We maintain records of privacy breaches as required by law.

We may update this policy when our services, systems, or privacy practices change. Material changes to how personal information is collected, used, disclosed, stored, or retained will be reviewed and reflected in this policy as appropriate.