TradeList Privacy Policy

1. Who operates TradeList

TradeList is operated by Velveteen Technologies Inc. ("Velveteen", "we", "us", or "our"), a company organized under the laws of British Columbia, Canada. This policy applies to tradelist.ca and the TradeList directory, tools, forms, account areas, and related services (the "Service").

Velveteen is accountable for personal information under its control. Our privacy contact is listed at the end of this policy.

2. Information we handle

• Public directory information: business names, trade categories, service areas, business addresses, phone numbers, websites, public reviews or source links, professional names and roles, and other facts published by businesses, governments, or reputable public sources.
• Claims and profile management: claimant name, role, work email, optional phone number, authorization confirmation, verification notes, profile edits, and account or sign-in records.
• Project requests: project type, location, timing, description, selected businesses, name, email, phone number, preferred contact method, and request status.
• Communications: questions, correction or removal requests, support messages, and our responses.
• Technical information: IP address, browser and device type, pages and links used, timestamps, approximate region, referrer, diagnostics, and security events collected by us or our service providers.
• Browser storage: your consent choice in a cookie and your shortlist in local browser storage. Authentication providers may use cookies needed to keep an authorized session active.

Please do not include sensitive personal information in free-text fields unless it is necessary for your request.

3. Where information comes from

We receive information directly from visitors, homeowners, business owners and representatives, authentication providers, and service providers. We also compile directory records from sources such as official business websites, municipal or provincial open data, professional directories, public map and review profiles, and other publicly accessible records. A public source does not remove our obligation to handle personal information responsibly.

4. Why we use information

• Operate, secure, troubleshoot, and improve the Service.
• Publish and maintain useful, source-backed business profiles.
• Review claims, verify authority, and manage profile corrections.
• Receive, review, route, and follow up on homeowner project requests.
• Respond to privacy, support, legal, and safety requests.
• Prevent abuse, fraud, scraping, and unauthorized access.
• Measure directory use when optional services have been accepted.
• Meet legal, accounting, and recordkeeping obligations.

We limit collection, use, and disclosure to purposes that a reasonable person would consider appropriate in the circumstances. If we need to use personal information for a materially new purpose, we will provide notice and obtain consent where required.

5. Cookies, analytics, maps, and browser storage

Necessary storage supports your cookie preference, shortlist, security, and authenticated sessions. These functions remain available when you reject optional services.

With your permission, TradeList loads Google Analytics to help us understand visits and improve the directory, and Google Maps to display interactive business maps. Google may process technical identifiers, device and interaction data, and approximate location in Canada, the United States, or other countries. Before permission, TradeList does not load these optional scripts and shows its first-party static map instead.

You can accept, reject, or revisit optional services at any time using Cookie settings in the footer. A new choice takes effect immediately for future loading. You can also clear site data in your browser.

6. When we disclose information

We may disclose information:

• to vendors that host, secure, authenticate, store, email, map, or analyze the Service, including providers such as Vercel, Supabase, and Google, under arrangements appropriate to their role;
• to a selected or relevant business when we route a reviewed project request, consistent with the request and any notice shown on the form;
• to verify a profile claim through official business channels;
• where required by law or reasonably necessary to protect rights, safety, security, and the integrity of the Service;
• in connection with a financing, reorganization, merger, or transfer of all or part of the business, subject to appropriate safeguards; or
• with your direction or consent.

We do not sell personal information for money.

7. Processing outside Canada

Our providers may process information in Canada, the United States, and other jurisdictions. Information in another jurisdiction may be accessible to courts, law enforcement, or national-security authorities under that jurisdiction's laws. We use contractual, organizational, and technical measures appropriate to the sensitivity and context.

8. Retention

We keep personal information only as long as reasonably necessary for the purposes described here, including maintaining accurate records, resolving disputes, preventing abuse, and meeting legal obligations. Retention depends on the record: rejected or completed requests and verification records may be kept for a reasonable audit period; account and profile records may remain while an account or listing is active; security logs and analytics generally use shorter rolling periods. We delete, anonymize, or securely restrict information when it is no longer required.

9. Safeguards and incidents

We use administrative, technical, and physical safeguards appropriate to the information, including access controls, encrypted transport, service-role separation, logging, and restricted administrative areas. No system is completely secure. We assess suspected breaches and keep, report, or provide records and notices when applicable law requires it.

10. Your choices and rights

Subject to applicable law, you may ask to access personal information we hold about you, understand how it has been used or disclosed, correct inaccurate information, withdraw consent, or request deletion, de-indexing, or restriction. Listed businesses and individuals may also request a correction, claim review, or removal assessment. Some records may need to be retained for legal, security, editorial, or record-integrity reasons.

Email privacy@velveteen.fmwith enough detail to locate the information. We may verify your identity and authority before acting. Withdrawing consent does not affect processing already completed lawfully.

11. Children

TradeList is a general business directory and is not directed to children under 14. We do not knowingly ask children under 14 to submit personal information. A parent or guardian who believes a child has submitted information may contact us for review and deletion.

12. Third-party sites

TradeList links to businesses, review platforms, maps, and other third-party services. Their privacy practices and content are governed by their own policies. Opening an external link may allow that third party to receive technical information about the visit.

13. Changes to this policy

We may update this policy as the Service or law changes. We will post the revised policy with a new effective date and provide additional notice when a change is material and notice is required.

14. Contact and complaints

Contact: privacy@velveteen.fm
Velveteen Technologies Inc., Attn: Privacy
1538 Pinot Gris Drive, West Kelowna, BC, Canada

We will investigate privacy complaints and explain our response. You may also contact the Office of the Privacy Commissioner of Canada or the privacy regulator with jurisdiction where you live.