RepairGal
Ottawa, Ontario
This policy explains what data RepairGal collects, where it lives, who might have access to it, and your rights regarding deletion.
1. Default Retention Period: 10 Years
By default, any communications you have with RepairGal will be retained on our servers or services we use to provide you with services for a period of ten (10) years from the date of the last interaction. This retention is for internal record-keeping, legal compliance, and business continuity purposes.
2. Data We Collect & Where It Is Stored
To provide transparency about our infrastructure, please review the following breakdown of what data we collect and which third-party services may hold that data on our behalf.
A. Email & Ticket Communications (Proton)
- What we collect: Email content, subject lines, timestamps, attachment metadata, and any personal information contained within those communications (including name, email address, and phone number if provided).
- Who holds it: Proton (currently located in Sweden; we have been notified of an upcoming server relocation to Germany).
- Format & Security: All email logs and tickets are held in an encrypted format that is unreadable by Proton. Proton is responsible for maintaining the security and integrity of this encrypted data on their infrastructure.
- Our Responsibility: RepairGal is responsible for the security and retention of this data within our Proton account, including managing access to our encryption keys. If you submit a GDPR deletion request, we will delete this data from our Proton account, subject to the payment exception in Section 4.
B. Website Contact Form Submissions (Un-static)
- What we collect: Name, email address, phone number, and the content of your message submitted via the contact form on our website.
- Who holds it: Un-static (a forms provider based in the Netherlands).
- Important Limitation of Control: Data submitted through this form is routed directly to and stored by Un-static's infrastructure. We have no technical ability to clear, edit, or delete this data once you click "Submit." The care, security, and deletion of that specific form entry are the responsibility of Un-static.
- Our Responsibility: While we cannot delete the initial submission from Un-static's logs, any trace of the initial submission that arrives in our Proton inbox (email notification) becomes our responsibility to protect, as outlined in Section 2A. This includes any name, email address, phone number, and message content forwarded to us.
C. Anonymized Analytics & Demographics
- What we collect: We use a third-party analytics service to better understand who our audience is and how they interact with pages on our website. This data includes generalized location (country level), browser type, and pages visited.
- Format: This information is always anonymized. We do not collect or store your specific IP address or device fingerprint in connection with this demographic data.
- Purpose: This helps RepairGal understand our demographic reach and website usage patterns but does not identify you personally.
D. Website Usage & Hosting (GitHub Pages)
- What we collect: We do not actively collect IP addresses or any other identifiable data.
- Temporary Usage: Our site may use temporary session data for critical functions (e.g., form validation), but this data is not stored or logged by us.
- Who holds it: Our website is hosted on GitHub Pages. While we do not collect this data, GitHub Pages may automatically collect standard server logs (including IP addresses) as part of their hosting infrastructure. Please refer to GitHub's Privacy Policy for details on their data handling practices.
3. Your Right to Erasure (GDPR/Data Deletion Request)
You retain the right to request the deletion of your personal data where we have the technical ability to do so.
- Scope: We will remove all personal communications and identifiable information from our Proton account and any other system under our direct administrative control.
- Exception: We cannot delete data held by Un-static (initial form submission), GitHub Pages (server logs), or our anonymized analytics provider (as that data contains no personal identifiers to locate), as these are outside our administrative control.
4. Exception: Payment Record History
Due to financial regulations, tax laws, and anti-fraud requirements, we are unable to delete records of financial transactions prior to the 10-year mark.
- Disposal: This payment data will be held securely for the full statutory period of ten (10) years from the transaction date. Upon reaching the 10-year anniversary, this data will be permanently disposed of or anonymized.
5. Security & Limitation of Liability
We are committed to protecting data under our control using industry-standard measures. However, no method of electronic storage or transmission is 100% secure.
Accordingly:
- No Liability for Breach: To the fullest extent permitted by law, RepairGal is not responsible or liable for any data loss, unauthorized access, data leak, or breach of our systems or the systems of the third-party processors mentioned above that occurs despite our reasonable security efforts.
- Best Efforts: We promise to do our best to protect the data that resides on our own servers and within our Proton account to the best of our ability.
6. Contact Us
If you have questions about this policy or wish to exercise your data deletion rights regarding data we control, please contact:
7. Applicable Law & Jurisdiction
This Privacy Policy shall be governed by and interpreted in accordance with Canadian law to the highest ability. RepairGal is committed to upholding Canadian privacy standards, including those set forth in the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial legislation.
Exception for Third-Party Services:
The third-party services utilized by RepairGal are subject to their own respective privacy policies and the laws of the jurisdictions in which they operate, specifically:
Proton
Subject to the laws of Germany (upon server relocation) and the European Union (GDPR).
Un-static
Subject to the laws of the Netherlands and the European Union (GDPR).
GitHub Pages
Subject to the laws of the United States of America.
By using our services, you acknowledge that your data may be processed in these jurisdictions under their respective legal frameworks.
RepairGal — Professional Console Repair & Modifications