Bricks — Privacy Policy

BRICKS PRIVACY POLICY

Effective: August 27, 2026
Organization: Bricks Group
Privacy contact: help@brxs.ca

This policy explains how Bricks Group collects, uses, and discloses personal information for brxs.ca and related booking and photographer-apply flows, under PIPEDA and applicable Ontario privacy rules.

1. What we collect

Booking: name, brokerage, email, phone, property address, property type/size, package and add-on choices, booked date and clock time, access notes.
Payment: processed by Stripe. We do not store full card numbers. We may store Stripe customer id, last four, brand, and payment status.
Launch / marketing email: email, if you opted in.
Photographer applicants: name, phone, email, city, travel radius, specialties, equipment, portfolio URLs, resume file, HST number if provided, and IC-acceptance record.
Technical: IP address, device/browser, pages, and similar logs needed to run and secure the site.

2. Why

Provide quotes, take payment, schedule, dispatch, shoot, deliver, support, and refund.
Review photographer applications and keep a record of the IC agreement version accepted.
Tax, accounting, and legal records.
Improve the site (aggregated or de-identified where practical).
Marketing email only with CASL-compliant consent.

3. Who we share with

We do not sell personal information. We share what is needed with: Stripe; Supabase; OpenStreetMap/geocoding; the assigned photographer (address, time, access notes, contact name as needed); counsel, accountants, or authorities when required by law. Photographers are independent contractors and must keep booking details confidential under the IC agreement.

4. Where

Infrastructure currently includes US-hosted processors (Stripe, Supabase, Vercel). By using the site you consent to that transfer. We remain accountable under PIPEDA for personal information we collect.

5. Retention

Booking and payment records: generally 7 years. Delivered media: until delivered plus a limited operational window. Photographer applications: while we evaluate or engage you, then as required for records. Marketing consent records: as required by CASL. Deletion on request unless we must keep a record.

6. Your rights

Email help@brxs.ca to access, correct, or withdraw consent (subject to legal and booking obligations). Aim to respond within 30 days. Complaint: Office of the Privacy Commissioner of Canada (priv.gc.ca).

7. CASL

Commercial electronic messages only with CASL consent. Unsubscribe on marketing. Transactional booking/application messages as needed to perform the service.

8. Children

Adults 18+. We do not knowingly collect information from children. Listing media is of property, not of children.

9. Security

TLS in transit, access-limited systems. Notify of a PIPEDA-significant breach as required.

10. Changes

Posted on this page and dated.

Privacy Policy