Privacy Policy

PLOTIMM ("we") sells electrical and construction supplies online and at our Markham, Ontario branch. This Privacy Policy explains how we collect, use, disclose and protect personal information, in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

• Account details: name, email address, phone number and your password (stored only as a secure hash).
• Order details: items, quantities, prices, pickup branch, delivery address and its map location, order and delivery history.
• Guest checkout: your email address and a one-time verification code (stored only as a hash and deleted after expiry).
• Payments: handled by our payment provider; we receive only a payment confirmation and reference — never your full card number.
• Rewards: XP history, tier, referral code, invited friends and coupons.
• Technical: essential cookies that keep you signed in and your cart in your browser, plus basic server logs used for security.

• To process, transfer between branches, prepare, deliver and support your orders.
• To plan delivery routes and confirm addresses are within our 100 km delivery area.
• To send transactional emails and in-app notifications about your account and orders.
• To run XP, tiers, referrals and reward coupons.
• To keep the website secure, prevent fraud and meet legal and tax obligations.

By creating an account or checking out you consent to the collection and use described here. You may withdraw consent at any time by contacting us or by asking us to close your account — this may mean we can no longer provide some services. We do not use your information for purposes other than those described without asking you first.

We send transactional emails needed to provide our service — for example verification codes, order confirmations, ready-for-pickup and delivery updates, security alerts and reward notices. We do not send promotional email unless you have given express consent under Canada's Anti-Spam Legislation (CASL), and every promotional email includes a way to unsubscribe.

When you create an account we email you a copy of this Privacy Policy for your records.

We never sell personal information. We share it only with service providers who help us run the business, under contracts that require them to protect it:

• Cloud hosting, database and file storage providers (including MongoDB Atlas and Cloudflare R2).
• Our email delivery provider.
• OpenStreetMap services, which receive address searches you type to find a location and display map tiles.
• Our payment processor, once online payment is enabled.
• Authorities, where required by law or to protect our rights and customers.

Some providers may process information outside Canada, where it may be accessible to authorities under local law.

We keep order and tax records for as long as required by law (generally seven years) and other information only as long as needed for the purposes above. We use encryption in transit, hashed passwords, encrypted two-factor secrets for staff, role-based access and audit trails for staff actions.

• Access the personal information we hold about you.
• Ask us to correct inaccurate information.
• Ask us to delete your account, subject to legal record-keeping requirements.
• Withdraw consent as described above.
• Complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) if you are not satisfied with our response.

Our services are not directed to children and we do not knowingly collect information from anyone under the age of majority.

We may update this policy; the date at the top shows the latest version and we will email account holders about significant changes.

Privacy Officer: PLOTIMM, 142 Alfred Paterson Drive, Markham, Ontario L6E 1J5, Canada. You can also visit or call our Markham branch during opening hours.