Privacy policy

NexaFob collects the minimum information needed to provide our services. This policy explains what that is and what we do with it.

What we collect

When you book an appointment we collect your name, email address, phone number, chosen location and time, the service you want, and anything you write in the message field.

When you submit a fob check we collect your name, email address, optional phone number, the photos you upload, and your description of the credential.

When you send a contact message we collect your name, email address, optional phone number and the message itself.

We also store a one-way salted hash of your IP address with each submission. This is used to detect abuse and to rate-limit our forms. The hash cannot be reversed to recover your address.

What we do not collect

We do not run advertising trackers or third-party analytics that build a profile of you across sites. We do not sell, rent or share your personal information with third parties for marketing.

We do not store payment card details on this website — payment happens in person at the store.

How we use it

Your information is used to contact you about your booking or quote, to prepare and perform the work, to keep a record of what was supplied for warranty purposes, and to protect our forms from abuse.

Emails we send you are transactional: confirmations, quotes and replies. We do not add you to a marketing list from a booking.

Photos

Photos you upload are stored on our own server, not a third-party image service. They are visible only to our staff and are used to identify your credential and price the work. You can ask us to delete them at any time.

How long we keep it

Bookings and quote requests are retained for two years, which covers the warranty period and any follow-up. Contact messages are retained for one year. Photos are deleted on request, and otherwise follow the retention period of the request they belong to.

Your rights

Under Canadian privacy law you can ask what personal information we hold about you, ask us to correct it, and ask us to delete it. Email [email protected] and we will respond within thirty days.

Cookies

The public website uses no tracking cookies. If you sign in to the staff admin panel, a single session cookie is set to keep you signed in; it is strictly necessary and is removed when you sign out.

Security

Data is stored on servers we control, transmitted over TLS, and access to the admin panel is restricted to named staff accounts with individually hashed passwords.

Contact

Questions or requests about your information can be sent to [email protected].