Privacy Policy

CottageConnect Muskoka ("we", "us", "our") operates the website at cottageconnectmuskoka.ca, a directory connecting cottage owners and visitors ("customers") with local businesses and tradespeople ("businesses") in the Muskoka region of Ontario, Canada. This policy explains how we handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws.

• Account information: name, email, phone number, password, and account type (customer or business).
• Business listings: business name, description, location, service categories, photos, contact information, and verification details.
• Messages and leads: chat messages, attachments, quote requests, and any content you submit through the platform.
• Payment information: processed by Stripe. We do not store full card numbers; we receive only billing metadata (last 4 digits, brand, postal code, subscription status).
• Usage data: listing views, IP address, device/browser information, and basic analytics required to operate and improve the service.

• To create and manage your account.
• To publish business listings and connect customers with businesses.
• To deliver direct messages, lead notifications, and transactional emails.
• To process subscription payments and apply promotional codes.
• To prevent fraud, enforce our Terms of Service, and comply with the law.

We share the minimum information needed with trusted third parties who help operate the platform:

• Stripe — payment processing and subscription management.
• Supabase — database, authentication, and file storage.
• Resend — transactional email delivery.

These providers act as data processors and are bound by their own privacy obligations. Some may store data outside of Canada (including in the United States and the European Union).

Business listings, including business name, description, photos, location and service category, are public by design. We redact contact details (email and phone) from anonymous visitors; customers must sign in or message the business to make contact. Customer accounts are never displayed publicly.

We retain account and listing data for as long as your account is active. If you delete your account, we soft-delete personal data and purge it from active systems within 30 days, except where retention is required by law (for example, financial records for tax purposes — up to 7 years).

Under PIPEDA you may, at any time:

• Request a copy of the personal information we hold about you.
• Request correction of inaccurate information.
• Withdraw consent and request deletion of your account.
• Unsubscribe from non-essential email via the link in any message.

To exercise these rights, contact us at privacy@cottageconnectmuskoka.ca.

We use industry-standard safeguards including TLS encryption in transit, row-level security in the database, and access controls on administrative tools. No system is perfectly secure; please use a strong, unique password and notify us immediately if you suspect unauthorized access to your account.

We use essential cookies and local storage to keep you signed in and to remember your preferences. We do not currently use advertising or cross-site tracking cookies.

CottageConnect Muskoka is not directed at children under 16, and we do not knowingly collect personal information from them.

We may update this policy from time to time. Material changes will be announced on the site or by email. Continued use of the service after an update constitutes acceptance of the revised policy.

Questions or complaints about privacy may be directed to privacy@cottageconnectmuskoka.ca. You also have the right to contact the Office of the Privacy Commissioner of Canada.