Kirsaani is a trade name of a corporation registered in Alberta. This page explains what personal information we collect, why, and what we do with it. We follow Alberta’s Personal Information Protection Act (PIPA).
What we collect
- When you use the form on our website: your name, phone number, email if you give one, your neighbourhood, what you’re interested in, how you heard about us if you tell us, anything you write in the message box, and whether you ticked the box asking us to email you.
- Your soil check result, only if you choose to send it. If you take the soil check, the form offers to send your score with your enquiry, and writes one line at the start of your message: your score, your soil level and your answer about what has gone on your lawn this year. You can change that line before you send. Untick the box and neither is sent.
- Campaign tags from the link you followed. If the web address you arrived on carries tags (for example, from a flyer’s link), we keep them with your enquiry, so we know which flyer worked. They say nothing about you.
- A scrambled code to stop spam. To limit how many messages one connection can send, our server keeps a code made from your IP address for about two hours. It’s a one-way hash, not the address itself.
- When you become a client: your service address, access notes such as gate codes or where the dog is, scheduling preferences, your written quote and agreement, and a record of visits and payments.
- Photos: we take a before and after photo of the lawn at each visit, for our records and to send to you. We only use photos publicly with your written permission, never with your address, and you can withdraw it later.
Why we collect it
- To reply to you and give you a quote
- To schedule and carry out work you’ve booked
- To invoice you and keep the records the Canada Revenue Agency requires
- To contact you about your service: a delay, a weather change, a seasonal reminder
- To email you about spring openings and seasonal notes, only if you ticked the box asking for that
That’s the whole list. We don’t collect anything we don’t need for those purposes.
What we don’t do
- We don’t sell your information. To anyone, ever.
- We don’t share it with marketers or data brokers.
- We don’t send marketing email unless you’ve said yes, and every email has a way to unsubscribe.
- We don’t collect payment card details on this website.
Where your enquiry goes
Our website form sends your enquiry one of two ways. The information is the same either way, and so is how we use it.
- To our own database. When our Control Room is switched on, the form saves your enquiry in a database we control, hosted by Cloudflare (Cloudflare D1). Only people we approve can open it, and each time they sign in with a one-time code sent to their email. Every change they make is logged.
- Through Formspree, as a backup. When the Control Room is off, the form goes through Formspree, which passes it to our email inbox.
If you tick the email box, we also keep a record of your consent: the exact words you agreed to, when, and on which page. That’s how we can show we had your permission, as Canada’s anti-spam law expects.
The “verify you are human” check
Our form may show a small “verify you are human” check. That’s Cloudflare Turnstile. It’s only there when we switch it on. It looks at technical information from your browser and connection to tell people from bots, and we only learn whether the check passed.
Who else sees it
Only the services we need to run the business:
- Cloudflare hosts this website and our database, runs the “verify you are human” check when it’s on, sends the sign-in codes for our own staff, forwards email sent to info@kirsaani.com, and keeps standard server logs such as IP addresses.
- Formspree, our backup form provider, receives what you send through the website form when it’s in use and passes it to our inbox.
- Google provides the inbox where our email arrives.
- Our accountant sees invoices and payment records for tax filing.
- Law enforcement or a regulator, only if the law requires us to disclose.
Information stored outside Canada
Cloudflare, Formspree and Google may store or process your information outside Canada, mainly in the United States, where it can be subject to the laws of those countries. That includes our Control Room database, which Cloudflare hosts and which is likely to be stored in the United States.
You can ask us for written information about how we use service providers outside Canada. Our Privacy Officer, Karan Singh Padda, will answer your questions about how they collect, use, disclose or store personal information for us (contact details below).
Cookies and tracking
This site sets no tracking cookies and runs no advertising pixels. It uses Cloudflare Web Analytics, which counts visits without cookies and without following you to other sites. Its fonts are stored on this site, so your browser doesn’t contact Google or anyone else for them.
Apart from that visit count, the only time this site loads anything from another company is the “verify you are human” check, when it’s on. Our own team’s sign-in to the Control Room uses a Cloudflare sign-in cookie; visitors never get it.
How long we keep it
- Enquiries and list sign-ups that don’t become bookings: deleted within twelve months of our last contact, or sooner if you ask.
- Email list: until you unsubscribe.
- Consent records (the proof that you asked for our emails): kept while we’re emailing you, and for three years after you unsubscribe or withdraw consent, so we can show we had permission. Then they’re deleted.
- Unsubscribes: we keep only your email address, on a do-not-email list, so we never email you again by mistake.
- Spam-check codes: about two hours.
- Client records: six years from the end of the tax year they relate to, because the Canada Revenue Agency requires it. Then they’re deleted.
Your rights
Under PIPA you can ask what personal information we hold about you, ask us to correct anything that’s wrong, ask us to delete what we aren’t required to keep, and withdraw consent for anything optional, such as emails or photos.
How to make a request
- To see, correct or delete your information: write to us. Email is fine. We may ask you to confirm who you are before we share anything. PIPA gives us 45 days to respond. The law allows an extension in a few situations; if we ever need one, we’ll tell you in writing why and for how long. In practice we aim to answer within a week.
- To stop our emails: use the unsubscribe link in any email we send, our unsubscribe page, or email us. We act on it right away, and always within ten business days.
- To withdraw photo permission: tell us, and we take the photo down.
Who to contact
Karan Singh Padda is our Privacy Officer and handles privacy questions, requests and complaints.
info@kirsaani.com · 587 287 6452
Mailing address: PO box to be added
If you have a complaint
Tell us first. Write to us and we’ll respond in writing, normally within a week, with what we found and what we changed.
If you’re not satisfied, you can ask the Office of the Information and Privacy Commissioner of Alberta to review it, at oipc.ab.ca. You don’t need our permission, and we won’t treat you differently for it.
Security
This site is served over an encrypted connection. Our Control Room sits behind Cloudflare Access: only email addresses we approve can sign in, each time with a one-time code, and every change is logged. Client records are kept on password-protected devices. We’re a small family business: we keep what we need and no more, which is a protection in itself.
If personal information we hold is ever lost, or seen by someone who shouldn’t see it, and there’s a real risk of significant harm to you, we’ll report it to Alberta’s Information and Privacy Commissioner without unreasonable delay, and tell the people affected.
Changes
If this policy changes, we’ll update the date at the top and tell existing clients about anything that affects them.