Privacy policy
Last updated 23 October 2026
Bombay Shutters Ltd. respects your privacy. This policy explains what personal information we collect through bombayshutters.com, why we collect it, who helps us handle it and the choices and rights you have. It is written to meet Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec's Act respecting the protection of personal information in the private sector (Law 25) and, for visitors in the European Union and United Kingdom, the General Data Protection Regulation (GDPR).
Who is responsible
Bombay Shutters Ltd., Toronto, Ontario, Canada, is responsible for your personal information. Our Privacy Officer is the person in charge of protecting it and answering your questions. You can reach the Privacy Officer at sales@bombayshutters.com (subject "Privacy") or by phone at (416) 323-5386.
What we collect
- Quote requests: the products, rooms, window sizes and preferences you choose; how you'd like to meet; your name, email, phone, city and, if you give them, your street address, postal code, notes and photos of your windows.
- Messages: your name, email, phone if given, company if you are in the trade, and your message.
- Newsletter: your email address and when and where you signed up.
- Technical information: when you visit, our hosting provider processes your IP address, browser type and the pages requested so the site can be delivered and protected from attacks and spam. We do not use this to identify you.
We do not use analytics, advertising cookies, tracking pixels, profiling or automated decision-making. We do not collect payment information on this website.
Why we use it
- To prepare your quote, answer your message and arrange your consultation, by video call or at home.
- To make, install and service your order and honour your warranty.
- To send our newsletter, if you subscribed. You first confirm by clicking the link in the email we send you. You can unsubscribe at any time with the link at the bottom of every newsletter, or by writing to us, and we will remove you promptly.
- To keep the website secure and free of spam.
- To meet our legal, tax and accounting obligations.
Under PIPEDA and Law 25 we rely on your consent, which you give when you tick the consent box and send a form. Under the GDPR our legal bases are steps you ask us to take before a contract, the performance of a contract, our legitimate interest in keeping the site secure, and legal obligations. You can withdraw consent at any time; this does not affect what we did before.
Who we share it with
We never sell or rent your personal information. We share it only with service providers that help us run the website and our business, under contracts that require them to protect it and use it only for us:
- Cloudflare (website hosting, security and the spam check on our forms).
- Resend (delivers the form you send to our mailbox).
- Cal.com (the booking calendar: after you send a consultation request, your name, email, phone, address and notes are passed to it so you can pick a time without typing them again; it sends the booking confirmation).
- Kit (keeps our newsletter list, sends the email that confirms your subscription, and sends the newsletter).
- Microsoft (our business email, Microsoft 365).
Some of these providers store or process information outside Quebec and Canada, including in the United States. Before any transfer we assess the protection it will receive, and your information may be accessible to authorities in those countries under their laws.
How long we keep it
Quote requests and messages that do not lead to an order are deleted within 24 months of our last contact. For customers, we keep what we need for the length of the warranty and for as long as the law requires us to keep business records. Photos of your windows are deleted once your quote or installation no longer needs them.
How we protect it
The website runs only over encrypted connections, our forms are protected against spam and abuse, and access to your information is limited to the people who need it to serve you. If a confidentiality incident creates a risk of serious harm, we will notify you and the privacy regulators as the law requires.
Your rights
You may ask to see the personal information we hold about you, to correct it, to receive it in a structured format, to have it deleted, to limit or object to how we use it, and to withdraw your consent. Quebec residents may also ask us to stop disseminating information or to de-index links to it. We answer within 30 days. Write to the Privacy Officer at sales@bombayshutters.com; we may ask you to confirm your identity.
If you are not satisfied with our answer, you may complain to the Office of the Privacy Commissioner of Canada, to the Commission d'accès à l'information du Québec or, in the European Union or United Kingdom, to your local data protection authority.
Cookies and browser storage
We set no tracking cookies. The small items we store in your browser, and how to change your choice, are described in our cookie policy.
We reply to the requests you send us. We do not add you to marketing lists or send promotional email without your express consent, as required by Canada's anti-spam legislation (CASL).
Children
This website is meant for adults arranging work on their homes or businesses. We do not knowingly collect information from children under 14.
Changes
We will update this policy when our practices change and show the new date at the top of this page.